Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
File: jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json)
Hash identifier: U5loJTlpsiCgz6Hwy1PnOXLHtdKQDbml1lNInvnkjmM=
Subject key identifier: CF:E4:77:F1:3D:D0:C2:A7:A6:5C:40:AD:D7:8B:28:64:03:CB:F7:26
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 019FAA880031E1D0B1CEE977B54AFC8EDF39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
Manifest number: 1A1F
Signing time: Tue 28 Jul 2026 21:01:07 +0000
Manifest this update: Tue 28 Jul 2026 21:01:07 +0000
Manifest next update: Wed 29 Jul 2026 21:01:07 +0000
Files and hashes: 1: GCLSbZ4WxTfUOBV-fc0SMjtNYyQ.roa (hash: Y6dHUh2Hb2V1XitGNTZxZbxQzcG8Rh+QdevOx5L7qSw=)
2: IPD7v-J9c376oyXeNIKc_aWnNmQ.roa (hash: EEItVG+CeXn/JupxjY6OK4AdQvnwdrYLgxk2U0ldhpY=)
3: R_vcKb1Y3OVUOhgcnTj9SSJfqww.roa (hash: XO05SKBMj3JiSbINglJIVoADEMMaDqJEw7rnY2nqPeQ=)
4: ZBZd2Q5bGwHK_Dg2oikZZiqgRuE.roa (hash: c/sKdqGiU7G8qhtiizb8CdzGOvbzH+34+IqK7jLdymI=)
5: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: 5NwVuawZ4GJFw0hiPirSdXVCzgbpHLfsEgfMvDk4y5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:00:31:e1:d0:b1:ce:e9:77:b5:4a:fc:8e:df:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jul 28 21:01:07 2026 GMT
Not After : Jul 29 21:01:07 2026 GMT
Subject: CN=cfe477f13dd0c2a7a65c40add78b286403cbf726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:d6:d7:b7:b7:c7:e2:72:83:7e:f7:67:e7:
bb:e3:5c:02:5b:73:1d:a0:3f:63:0d:5a:f1:62:51:
a8:42:78:7a:d5:67:13:7a:d2:25:3c:65:99:ac:91:
99:a4:23:3d:43:a5:e3:eb:52:d0:ae:5f:2a:b1:e7:
94:0c:e2:5e:fa:20:7d:80:a3:9c:8a:25:c0:4e:bd:
b7:a4:89:31:1e:2e:f9:31:eb:7e:39:a6:e6:c5:12:
af:b4:b8:53:57:63:2e:b7:fe:47:5d:8e:01:60:9c:
9f:bc:15:cb:32:85:19:6b:50:da:64:32:d0:e1:cb:
b3:30:6e:e5:c0:06:e6:9c:ab:ff:24:4c:75:65:0c:
05:8c:cf:a7:54:18:0e:2f:aa:d4:4a:8c:ae:1f:99:
a7:61:8b:c2:1a:b7:5b:26:f6:b9:af:e3:94:45:37:
08:c2:df:9d:01:cd:33:b3:fe:c8:90:ca:64:f9:a9:
2f:7c:6f:db:32:2f:49:fd:66:f1:2d:98:fd:9c:c9:
2c:e1:81:70:37:1a:14:7f:bf:f2:63:1f:25:4a:cb:
31:bb:79:b1:dc:50:b6:a6:e1:b4:21:fe:e1:34:6b:
39:f2:2e:1e:15:82:a9:93:9e:ad:5c:d0:ab:db:4c:
b8:67:fb:fc:0b:4e:23:6d:12:aa:d9:32:d2:de:5a:
f2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E4:77:F1:3D:D0:C2:A7:A6:5C:40:AD:D7:8B:28:64:03:CB:F7:26
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:10:6f:43:5d:e2:18:5d:b5:7e:3c:f4:79:34:e1:8a:8b:af:
34:23:c7:a9:08:18:9d:fe:b8:b8:50:0c:82:43:42:36:45:2f:
50:45:3d:a9:ea:84:91:bc:7d:63:b6:3c:10:df:fb:b6:ce:23:
98:46:4f:27:90:ba:06:97:d7:7f:d7:71:a8:0f:9e:89:8a:4e:
3b:0e:26:66:90:31:2b:95:ba:0f:18:f8:8f:2d:37:3a:61:fa:
55:d2:3a:bb:2a:fd:e4:b4:4b:ac:78:bf:9d:94:a2:76:05:f7:
76:9e:88:ce:28:58:90:d1:ee:ed:1f:6f:b1:7b:8c:80:38:55:
14:da:a8:2e:4d:66:c0:ea:db:5c:af:d0:14:75:9e:92:ab:c6:
a7:c9:2d:f8:a2:3a:5c:00:f9:e7:34:78:32:bd:42:db:42:ca:
52:b0:bc:72:13:c4:34:c0:da:df:aa:04:47:94:f5:43:d6:d8:
7a:bb:68:f5:db:7b:f1:22:8a:01:de:4c:f9:72:44:39:80:e9:
03:da:ac:f5:cb:66:9f:d4:00:76:05:f0:01:99:90:b4:cb:19:
c3:67:74:07:5c:1f:80:a7:45:29:07:69:61:84:19:fc:94:0f:
55:91:03:f6:ed:ff:39:3d:5c:28:33:a7:d3:57:b1:76:95:ec:
a2:c4:21:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:09:28 2026 by rpki-client