Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
File: joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json)
Hash identifier: ezmjrrpeVzq5KoXtrUv0lUE5IoDWnhhnrX4dYVfyB48=
Subject key identifier: 55:76:CD:24:C8:0C:62:35:60:06:BD:7F:19:4E:7C:5C:53:7A:50:0F
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 019FA82B142D3E28EA93F77D6487B3E0AD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
Manifest number: 0CA0
Signing time: Tue 28 Jul 2026 10:00:23 +0000
Manifest this update: Tue 28 Jul 2026 10:00:23 +0000
Manifest next update: Wed 29 Jul 2026 10:00:23 +0000
Files and hashes: 1: VonIBij0yRwrRDr8qNAy1e4NkTc.asa (hash: XHC+gatrojCnYMfiZp2We5SigI6aUJwD2ilzVv+oSzo=)
2: i-2Qajd4m8riLuobvPBkDzzfa5s.roa (hash: kJTbL3ROqa3RXxMLEUptXN8oatw6z/BtfYm3rGnRJXI=)
3: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: zRvN7rZnElUEphLbI5Ng2WJdxlhd2ExxF418jbLmU4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:14:2d:3e:28:ea:93:f7:7d:64:87:b3:e0:ad:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: Jul 28 10:00:23 2026 GMT
Not After : Jul 29 10:00:23 2026 GMT
Subject: CN=5576cd24c80c62356006bd7f194e7c5c537a500f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c7:1e:d7:96:b7:c8:45:1f:a2:d6:02:e9:08:
ea:27:f0:3d:9e:58:aa:dd:b8:ca:76:a8:88:1e:d1:
50:ea:4f:66:3a:fa:4b:29:14:9c:07:c5:7f:ad:f1:
26:a9:34:f2:3c:89:d3:04:85:9c:59:35:1b:00:1e:
21:41:93:65:18:43:3a:ac:f8:66:ec:92:93:59:27:
fe:a3:b7:ec:75:3a:a4:b7:0a:25:f5:e4:cf:cd:9d:
37:c1:03:e4:23:1f:f3:a6:d8:80:03:9e:e1:ec:d1:
67:96:0d:79:2e:03:42:02:20:5f:1d:69:2e:b8:19:
6b:37:ca:fb:a2:e6:20:8c:9f:b5:4b:97:fd:65:37:
69:1a:8d:38:4f:84:5c:06:52:35:d1:ab:a6:1d:39:
15:62:c1:3e:3c:cd:3c:ab:f0:81:07:8c:09:62:65:
b8:f8:23:d6:0e:a5:e8:85:0e:a8:05:9f:71:70:9a:
3e:6f:db:54:d1:5a:72:ac:e3:1e:62:4b:6a:77:9c:
ed:65:54:39:c8:33:10:8c:2a:d8:3a:f1:d6:ef:70:
ef:01:da:c0:58:75:a4:87:69:af:51:1b:f9:04:cf:
3b:a1:d5:d9:ba:41:ab:20:62:72:e3:db:d8:29:6d:
3f:2b:ba:e5:78:81:88:1d:b4:1a:79:7f:7a:ec:a0:
51:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:76:CD:24:C8:0C:62:35:60:06:BD:7F:19:4E:7C:5C:53:7A:50:0F
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:ba:00:97:35:06:b6:2f:b2:24:1f:45:81:c2:7d:bd:18:11:
67:24:ad:09:76:a9:41:ab:04:38:b7:50:52:5e:eb:a7:19:83:
e2:1d:23:0a:f3:94:33:f8:bc:e9:c1:22:a3:38:cc:94:11:76:
47:60:b3:5b:b7:ba:6c:6b:db:a3:36:2e:ca:f0:f0:21:98:7d:
07:6d:0e:01:07:ac:75:ba:7c:e3:d0:3c:03:da:f2:39:9d:72:
10:82:86:28:23:fa:6c:7b:10:33:8a:25:91:0c:c7:7d:43:ff:
04:a5:7a:83:d3:ec:55:dd:5b:f0:b0:4c:a1:7f:cf:a2:ba:f9:
b9:5e:09:c4:9b:1a:b3:c9:93:fc:38:43:e7:34:5c:eb:4c:c7:
db:eb:ee:a7:b3:69:0b:9a:7a:d1:0c:1a:25:df:0d:cd:55:69:
bb:f3:3b:a5:22:a7:52:4d:47:ba:8c:58:43:63:61:0a:74:5b:
65:7e:08:23:7e:0b:6d:95:c6:57:97:d2:df:f5:bb:3f:07:59:
7a:9d:a7:07:51:79:50:aa:75:fa:9f:58:a9:a3:cd:c5:15:19:
69:ec:94:a5:b2:ae:e9:94:5f:53:dd:34:53:86:9d:77:22:29:
25:59:09:26:fb:57:9d:78:84:d1:53:36:52:54:d8:c2:91:9a:
08:14:96:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:56:39 2026 by rpki-client