Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File: jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier: cYAKoRepNhQnBpFD3xgngof+Pxea0U0BK4gjqPzxqTw=
Subject key identifier: 30:72:F3:FD:A4:38:F8:FE:82:E2:5B:85:BD:61:BD:D6:EB:7D:39:F5
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer: /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial: 019FAAF56291A11D3413C6206E8C2B6D382C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 23:00:35 +0000
Manifest this update: Tue 28 Jul 2026 23:00:35 +0000
Manifest next update: Wed 29 Jul 2026 23:00:35 +0000
Files and hashes: 1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: wHIbF0xvFsONDmIs6ROXXVVz+tH5LqzMhwJtbKfsK8M=)
2: twrQ972oI9ZzJB5lNnpdx6DecVA.roa (hash: R4HcQNJ+RCE6vVMBKIPOjPzd/TdNdxhTx9KPeq1FVRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:62:91:a1:1d:34:13:c6:20:6e:8c:2b:6d:38:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Validity
Not Before: Jul 28 23:00:35 2026 GMT
Not After : Jul 29 23:00:35 2026 GMT
Subject: CN=3072f3fda438f8fe82e25b85bd61bdd6eb7d39f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8e:d0:0d:71:df:05:1a:0f:21:ee:f3:a7:97:
33:ee:84:68:c3:d4:c2:53:38:d2:e5:fb:09:83:bd:
3d:fe:1f:e8:5e:1e:90:93:78:12:55:2a:86:de:59:
c8:db:66:5e:fa:fd:bc:46:d7:c1:59:4d:96:36:3c:
a1:44:c8:c8:77:fd:a8:1d:e6:52:52:5a:b8:dd:ab:
32:32:3e:71:d2:94:ed:9a:51:7f:d0:c3:22:4a:2d:
1b:c1:e6:f4:fe:6b:ea:f6:c4:ff:d5:02:47:46:c4:
c0:b5:98:13:b2:6e:71:cb:a0:92:42:63:f4:b5:58:
16:01:94:4e:26:9a:93:00:24:21:1d:8a:c4:ad:b5:
ef:92:78:c2:2b:d2:cb:6d:77:3d:78:78:6e:1b:8d:
cf:42:ba:6d:8c:37:3e:e8:0e:f0:59:64:cb:ba:96:
1b:cb:5c:c7:48:af:25:2f:86:a0:b5:4c:f4:37:e2:
92:f9:f4:8c:0d:9a:82:47:61:0e:74:a3:7c:27:6d:
c2:50:ed:a0:ce:69:0a:10:4b:74:89:0e:34:59:30:
46:b0:ad:07:0a:eb:05:e9:92:d1:34:a0:8a:a5:1c:
dc:76:02:c5:ff:d1:95:15:bd:26:aa:e7:de:bc:42:
d6:76:a7:18:ca:d1:60:71:7c:5d:57:84:46:c9:64:
53:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:72:F3:FD:A4:38:F8:FE:82:E2:5B:85:BD:61:BD:D6:EB:7D:39:F5
X509v3 Authority Key Identifier:
keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:24:08:64:5f:ee:43:3f:0a:dc:f1:4e:5f:97:33:25:ee:9d:
f0:5e:8e:4e:3d:96:9f:ad:6a:1c:7e:3d:d6:10:00:99:e9:14:
56:ff:44:47:22:a8:2f:09:d1:f6:15:71:6f:75:82:97:45:7c:
e4:c0:b6:62:57:05:23:f1:57:98:98:be:8e:82:7e:1c:85:a9:
61:d0:e8:e9:88:39:95:0a:9f:c6:75:29:85:6f:f7:31:04:28:
cc:31:0d:42:0d:b5:de:06:63:52:6b:cc:20:1a:91:47:59:16:
dd:39:42:fb:1f:5b:ed:7c:52:07:a8:07:6a:f9:c9:ed:87:44:
2f:fd:d6:12:1a:6b:93:34:59:23:17:ec:1f:c7:ee:95:28:aa:
3d:23:9f:b6:30:cb:bc:c7:3f:30:04:61:a5:60:20:da:77:86:
c0:7c:00:2e:b9:f9:aa:e3:5e:d2:60:fe:a9:77:bf:8b:35:1f:
36:15:f2:cd:f8:a7:86:84:76:a2:9a:35:07:5a:d7:6f:84:66:
e4:f7:ac:83:55:36:15:fe:b1:a0:19:a0:c1:fc:2e:d1:85:29:
8a:4e:e0:59:14:8c:da:1c:3d:40:d1:e4:b5:95:c8:a5:b2:da:
cc:06:84:c8:55:87:0e:85:5f:25:21:af:1f:a6:f4:f5:f3:c5:
60:f4:11:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:10:20 2026 by rpki-client