Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
File: jFh6LAkWf52nMnTSmPmf210od3s.mft (raw, json)
Hash identifier: Q1rmUqM4FV82TSl/K+y/imw9myqsukk2mT6FvRrADC0=
Subject key identifier: 11:A3:76:B1:D8:7B:BB:C6:D4:D5:F2:66:38:62:F2:80:13:1C:E6:12
Authority key identifier: 8C:58:7A:2C:09:16:7F:9D:A7:32:74:D2:98:F9:9F:DB:5D:28:77:7B
Certificate issuer: /CN=8c587a2c09167f9da73274d298f99fdb5d28777b
Certificate serial: 019FAB6343E92576074892DAC0A96630978B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
Manifest number: 85
Signing time: Wed 29 Jul 2026 01:00:37 +0000
Manifest this update: Wed 29 Jul 2026 01:00:37 +0000
Manifest next update: Thu 30 Jul 2026 01:00:37 +0000
Files and hashes: 1: IeUZpA_cRarzmmAKl1mTNeS2w6Q.roa (hash: Zxv/aB//3mF6nuzItLAr8aMXf7kFc9bokYqKElvga2c=)
2: jFh6LAkWf52nMnTSmPmf210od3s.crl (hash: WqDNDcwtMI4W6+p5BJmHEVavFkKbdPcWUlvD4itECLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:43:e9:25:76:07:48:92:da:c0:a9:66:30:97:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c587a2c09167f9da73274d298f99fdb5d28777b
Validity
Not Before: Jul 29 01:00:37 2026 GMT
Not After : Jul 30 01:00:37 2026 GMT
Subject: CN=11a376b1d87bbbc6d4d5f2663862f280131ce612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:35:39:63:ce:43:16:8e:42:e7:ea:58:4d:a5:
b7:8e:43:24:b1:e3:45:6d:ec:02:1b:00:3b:7c:98:
9e:ba:70:99:73:a4:6c:84:87:bd:23:fb:93:21:78:
9c:60:f2:c1:57:ed:f4:de:df:46:c4:d7:51:31:70:
18:47:5b:b5:16:df:d3:1b:42:42:1f:90:1b:e7:1c:
25:fd:9d:dd:23:64:c1:8a:b8:08:bd:ff:cb:3c:7d:
22:78:39:60:43:72:d6:7d:6b:12:8b:86:43:17:ed:
13:8b:15:bd:33:c7:76:e9:69:2f:ae:49:ed:bd:1e:
b3:c5:e1:b0:58:a3:d6:bf:fa:b2:11:7f:ba:9d:82:
4f:02:2c:0a:b7:d0:5b:b1:d8:c7:9d:48:f0:7b:8f:
0c:93:07:1c:ab:11:83:00:90:c2:8c:6a:d1:dd:58:
cd:fa:c2:bb:51:a0:ef:6c:31:69:e2:e5:7e:e7:12:
0a:1f:ee:b8:a7:d5:07:2b:48:8a:94:9d:bb:ce:33:
2e:ae:75:16:ec:e2:bd:17:67:32:4f:8e:e6:bc:5a:
e0:68:7e:cd:93:7f:93:0a:52:17:cd:c3:50:c3:a9:
c0:7d:43:c8:7f:7e:d4:04:3f:0f:7a:1f:59:26:6f:
dd:e5:05:90:52:b0:24:91:50:22:60:05:66:de:b6:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A3:76:B1:D8:7B:BB:C6:D4:D5:F2:66:38:62:F2:80:13:1C:E6:12
X509v3 Authority Key Identifier:
keyid:8C:58:7A:2C:09:16:7F:9D:A7:32:74:D2:98:F9:9F:DB:5D:28:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7f:d2:6d:10:a9:94:96:90:34:fc:2a:b8:f5:72:a1:48:85:
1a:96:ac:1d:89:03:ef:7b:ac:22:63:d0:64:49:19:28:0d:6d:
5c:c4:5a:bb:7b:cb:10:5e:cd:5e:b6:26:6b:6c:d7:5b:c4:99:
e4:2c:90:8b:17:f8:6c:df:06:ff:e9:ea:db:bf:bc:6e:9d:21:
9c:76:a4:fb:23:a0:ac:da:ab:56:66:15:51:15:00:0e:7a:4b:
34:52:a2:07:1b:d1:92:47:29:ae:7e:fc:96:17:6b:d9:a6:e2:
50:29:d9:47:5c:e5:0c:25:a4:ec:a0:68:a3:67:52:35:74:4d:
df:33:34:c5:c1:05:6b:4f:ed:e8:9e:fb:17:8b:0f:e3:8d:24:
30:80:5d:4d:19:e0:7c:aa:6c:12:99:af:2c:1f:e1:9d:36:2c:
b2:16:eb:c0:94:4e:46:3a:97:69:72:c4:81:f2:e2:08:ac:84:
5d:4f:3f:4d:13:11:55:53:2a:9a:17:95:7d:1f:0f:7f:6a:06:
f1:c5:5f:ac:68:4e:ee:d9:41:c9:27:ce:91:44:fc:2f:84:4e:
cc:c8:39:fc:94:1c:72:82:02:72:ec:d3:2e:4b:0a:26:47:9e:
c7:6b:12:18:8f:21:e6:61:45:d1:d4:99:e4:11:8f:94:e4:6f:
67:ed:3a:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY0PpJXYHSJLawKlmMJeLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNTg3YTJjMDkxNjdmOWRhNzMyNzRkMjk4Zjk5ZmRiNWQy
ODc3N2IwHhcNMjYwNzI5MDEwMDM3WhcNMjYwNzMwMDEwMDM3WjAzMTEwLwYDVQQD
EygxMWEzNzZiMWQ4N2JiYmM2ZDRkNWYyNjYzODYyZjI4MDEzMWNlNjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDU5Y85DFo5C5+pYTaW3jkMkseNF
bewCGwA7fJieunCZc6RshIe9I/uTIXicYPLBV+303t9GxNdRMXAYR1u1Ft/TG0JC
H5Ab5xwl/Z3dI2TBirgIvf/LPH0ieDlgQ3LWfWsSi4ZDF+0TixW9M8d26Wkvrknt
vR6zxeGwWKPWv/qyEX+6nYJPAiwKt9BbsdjHnUjwe48MkwccqxGDAJDCjGrR3VjN
+sK7UaDvbDFp4uV+5xIKH+64p9UHK0iKlJ27zjMurnUW7OK9F2cyT47mvFrgaH7N
k3+TClIXzcNQw6nAfUPIf37UBD8Peh9ZJm/d5QWQUrAkkVAiYAVm3rbQ3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGjdrHYe7vG1NXyZjhi8oATHOYSMB8GA1UdIwQY
MBaAFIxYeiwJFn+dpzJ00pj5n9tdKHd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakZoNkxBa1dmNTJuTW5UU21QbWYyMTBvZDNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9hMmMyYjQtMmZjOS00NWQ3LWFmNDgt
MzU2NGJhYjIyMGVhLzEvakZoNkxBa1dmNTJuTW5UU21QbWYyMTBvZDNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9hMmMyYjQtMmZjOS00NWQ3LWFmNDgtMzU2NGJhYjIyMGVh
LzEvakZoNkxBa1dmNTJuTW5UU21QbWYyMTBvZDNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALn/SbRCp
lJaQNPwquPVyoUiFGpasHYkD73usImPQZEkZKA1tXMRau3vLEF7NXrYma2zXW8SZ
5CyQixf4bN8G/+nq27+8bp0hnHak+yOgrNqrVmYVURUADnpLNFKiBxvRkkcprn78
lhdr2abiUCnZR1zlDCWk7KBoo2dSNXRN3zM0xcEFa0/t6J77F4sP440kMIBdTRng
fKpsEpmvLB/hnTYsshbrwJRORjqXaXLEgfLiCKyEXU8/TRMRVVMqmheVfR8Pf2oG
8cVfrGhO7tlBySfOkUT8L4ROzMg5/JQccoICcuzTLksKJkeex2sSGI8h5mFF0dSZ
5BGPlORvZ+06jA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:24:59 2026 by rpki-client