Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: Ua0r20xThLKZCQcrsVk2Q4SVmM8zTA0onjrsqmRAiwM=
Subject key identifier: 24:7F:BC:C5:B5:34:DF:36:F6:5B:8A:96:34:5B:9C:94:C3:FD:38:3A
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 019FAC77152E9DB93966C6C3D26105A4E356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 1582
Signing time: Wed 29 Jul 2026 06:01:53 +0000
Manifest this update: Wed 29 Jul 2026 06:01:53 +0000
Manifest next update: Thu 30 Jul 2026 06:01:53 +0000
Files and hashes: 1: 2zatrSnboczgSJyqZMZSlWLUtgU.roa (hash: X83ll2h7XLvQkyBb5b0DZRoRK6wcb/CaXhRs2FxEIUI=)
2: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: JYCXXxzc6uC4eGJ3Jlk0byXdFNZJ4yFvVayCoB51gk8=)
3: RrW3iZFpgHFuK1USxDsMnM1LusA.roa (hash: /DqnuC18dHwT7Z+hUMZE9xD1UgRrxpE5xwXXr5v68Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:15:2e:9d:b9:39:66:c6:c3:d2:61:05:a4:e3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Jul 29 06:01:53 2026 GMT
Not After : Jul 30 06:01:53 2026 GMT
Subject: CN=247fbcc5b534df36f65b8a96345b9c94c3fd383a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:1d:f8:74:84:54:67:bf:4d:f1:6d:4e:69:
71:e2:83:a3:fd:f9:65:c7:78:1b:13:74:02:f1:83:
c6:a7:2d:20:0d:b7:e6:1d:fe:a4:fb:ba:43:b7:d2:
71:35:88:e0:25:64:6a:56:3b:39:a2:28:6f:f2:73:
a2:17:35:37:ec:f0:b0:cf:eb:f2:2f:dc:9a:d5:8b:
b6:87:75:cb:68:07:f6:0e:db:11:e2:06:d1:0d:d8:
63:53:47:6b:44:b3:e8:fe:06:b7:b1:1b:64:2f:92:
4a:09:b5:56:cf:9f:12:3e:a1:a8:c5:bf:69:76:18:
d7:87:6f:14:e8:59:7f:cb:bc:cf:9f:a6:70:00:c3:
6f:99:28:54:bf:c7:0d:59:f0:17:f1:9d:4f:97:d2:
88:c2:d0:0e:41:d1:95:fd:83:f1:6d:9f:63:92:00:
89:bb:b9:12:f0:10:07:03:70:be:f5:d3:79:86:17:
2b:a6:33:71:ec:3c:b8:25:48:b9:4f:b9:d3:e1:6b:
91:6d:fd:97:a4:11:a3:17:94:f7:17:d2:15:6a:d8:
c3:cd:f3:24:75:82:35:28:75:1e:52:18:be:f9:9b:
25:fd:52:b1:af:a4:d9:3c:fb:8f:d9:95:94:bd:20:
91:6b:76:18:2d:77:ff:4c:e6:51:51:79:c5:bf:da:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7F:BC:C5:B5:34:DF:36:F6:5B:8A:96:34:5B:9C:94:C3:FD:38:3A
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c8:2d:73:6b:68:79:f1:fd:36:d9:66:b5:a5:3f:dd:1a:51:
2c:f3:90:8b:e3:91:b1:3b:4b:67:3a:2d:77:ff:db:9e:cf:b1:
75:f5:6c:82:7c:07:7c:08:cb:e7:85:63:d8:f0:88:e4:9f:95:
53:fc:fb:a6:7c:ec:6f:ee:e7:2d:5a:45:02:67:6d:10:54:1a:
46:54:a0:e2:b5:59:d3:21:ca:48:3f:73:c4:c6:a3:9a:ec:b6:
e7:b8:01:aa:6e:b9:ac:68:8a:7e:d4:0c:74:a9:86:5a:a4:28:
11:6b:2d:f1:8d:99:89:10:72:c0:32:bb:9d:7b:01:6e:94:90:
2d:d9:a8:d6:66:6d:19:2e:23:fe:bd:dc:86:20:b6:b8:ba:e8:
50:3a:58:37:6b:26:dd:85:3a:11:da:6a:a9:cf:62:1b:4c:6c:
e2:82:dd:9a:24:0b:a1:e7:d6:2c:4e:3c:e8:06:0d:21:a9:30:
ee:c8:6c:03:c9:6c:fc:0e:f6:2d:fb:e5:1a:b2:22:28:16:04:
b4:b0:37:cc:56:45:29:03:16:83:73:29:9d:14:82:ca:99:4e:
a2:f0:03:f3:6c:f1:c7:00:94:9d:97:e6:2c:34:96:82:cd:a9:
58:86:a8:ba:30:e7:9e:a9:ee:43:3f:8e:ae:d9:5c:a3:1d:72:
85:e5:0e:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdxUunbk5ZsbD0mEFpONWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MmM0ZTJiZjVmMjEzODQ2MmVmNGE1ZDllMGY2ZTdhNzYz
NTMwZmUwHhcNMjYwNzI5MDYwMTUzWhcNMjYwNzMwMDYwMTUzWjAzMTEwLwYDVQQD
EygyNDdmYmNjNWI1MzRkZjM2ZjY1YjhhOTYzNDViOWM5NGMzZmQzODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubEd+HSEVGe/TfFtTmlx4oOj/fll
x3gbE3QC8YPGpy0gDbfmHf6k+7pDt9JxNYjgJWRqVjs5oihv8nOiFzU37PCwz+vy
L9ya1Yu2h3XLaAf2DtsR4gbRDdhjU0drRLPo/ga3sRtkL5JKCbVWz58SPqGoxb9p
dhjXh28U6Fl/y7zPn6ZwAMNvmShUv8cNWfAX8Z1Pl9KIwtAOQdGV/YPxbZ9jkgCJ
u7kS8BAHA3C+9dN5hhcrpjNx7Dy4JUi5T7nT4WuRbf2XpBGjF5T3F9IVatjDzfMk
dYI1KHUeUhi++Zsl/VKxr6TZPPuP2ZWUvSCRa3YYLXf/TOZRUXnFv9rdYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCR/vMW1NN829luKljRbnJTD/Tg6MB8GA1UdIwQY
MBaAFCUsTiv18hOEYu9KXZ4Pbnp2NTD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlN4T0tfWHlFNFJpNzBwZG5nOXVlblkxTVA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iYmJhODgtMTM0NC00ZDg5LThmNTIt
NmRmN2JmNTllMzI2LzEvSlN4T0tfWHlFNFJpNzBwZG5nOXVlblkxTVA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iYmJhODgtMTM0NC00ZDg5LThmNTItNmRmN2JmNTllMzI2
LzEvSlN4T0tfWHlFNFJpNzBwZG5nOXVlblkxTVA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMgtc2to
efH9NtlmtaU/3RpRLPOQi+ORsTtLZzotd//bns+xdfVsgnwHfAjL54Vj2PCI5J+V
U/z7pnzsb+7nLVpFAmdtEFQaRlSg4rVZ0yHKSD9zxMajmuy257gBqm65rGiKftQM
dKmGWqQoEWst8Y2ZiRBywDK7nXsBbpSQLdmo1mZtGS4j/r3chiC2uLroUDpYN2sm
3YU6Edpqqc9iG0xs4oLdmiQLoefWLE486AYNIakw7shsA8ls/A72LfvlGrIiKBYE
tLA3zFZFKQMWg3MpnRSCyplOovAD82zxxwCUnZfmLDSWgs2pWIaoujDnnqnuQz+O
rtlcox1yheUOyQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:53:24 2026 by rpki-client