Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.mft
File: J1-trhEuaASZSOIwhiFbfxVbCcE.mft (raw, json)
Hash identifier: x+bWancPcc7uoYgXJyJpOcTG0bMuL3yXZGYw2KMPQuU=
Subject key identifier: DC:6D:DD:01:75:B2:EC:E1:68:B6:DA:01:0D:45:9D:01:A3:4C:81:7D
Authority key identifier: 27:5F:AD:AE:11:2E:68:04:99:48:E2:30:86:21:5B:7F:15:5B:09:C1
Certificate issuer: /CN=275fadae112e68049948e23086215b7f155b09c1
Certificate serial: 019FA898E8376CA234CE66652BE4AFA739CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1-trhEuaASZSOIwhiFbfxVbCcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:20 +0000
Manifest this update: Tue 28 Jul 2026 12:00:20 +0000
Manifest next update: Wed 29 Jul 2026 12:00:20 +0000
Files and hashes: 1: 0shQJP_olUAaquYrEXYkfoOk2xE.roa (hash: 4+ThIr9odjX0ODg2LR7+zUmLjBlN+O98mTnzdPuwUjY=)
2: J1-trhEuaASZSOIwhiFbfxVbCcE.crl (hash: kcCc8ltAaqgOSjSU72eIyub2HV+iYeJbdrDZ61UT/Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1-trhEuaASZSOIwhiFbfxVbCcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:e8:37:6c:a2:34:ce:66:65:2b:e4:af:a7:39:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275fadae112e68049948e23086215b7f155b09c1
Validity
Not Before: Jul 28 12:00:20 2026 GMT
Not After : Jul 29 12:00:20 2026 GMT
Subject: CN=dc6ddd0175b2ece168b6da010d459d01a34c817d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:1f:56:1e:bd:72:2c:35:ea:80:0e:77:a7:
24:bb:aa:bf:b9:b9:0f:88:63:88:34:6d:d8:26:c4:
72:23:f7:e9:51:a7:62:a9:72:44:eb:9f:e3:fc:ab:
d5:e2:1c:b4:e8:76:3f:9b:bb:89:4d:4c:ee:b7:3f:
ce:c8:cd:87:ff:1b:f5:d2:ee:e7:bc:db:a1:92:0d:
b4:b4:59:66:ab:36:97:5f:ef:fa:ea:55:06:47:be:
e4:e3:f8:03:32:5f:7a:07:f5:bb:3e:7c:3f:b7:0b:
e8:1d:56:4c:b6:43:82:85:ae:24:de:92:7c:57:c3:
a6:33:ff:78:69:17:d2:2c:bb:00:6b:5e:3d:e1:c3:
a3:ad:97:dc:8c:67:16:c5:fa:9c:63:fc:71:5e:ac:
50:27:ca:a6:c1:97:dd:54:75:0d:6c:59:29:cd:89:
58:82:81:cd:b1:81:19:94:80:5c:0a:73:9a:0b:81:
b8:b9:36:8a:b4:69:6d:23:c0:c4:a1:de:7c:9b:f1:
a1:1d:4c:b3:37:00:c2:ff:49:cd:e6:78:87:cf:9a:
6a:9c:45:da:d7:c4:db:d8:09:e0:b2:af:c9:91:22:
f8:86:7e:20:c3:80:6a:a0:f0:46:cf:cb:63:17:14:
f1:2e:1b:e7:a2:6b:92:64:19:75:53:b4:44:8c:96:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6D:DD:01:75:B2:EC:E1:68:B6:DA:01:0D:45:9D:01:A3:4C:81:7D
X509v3 Authority Key Identifier:
keyid:27:5F:AD:AE:11:2E:68:04:99:48:E2:30:86:21:5B:7F:15:5B:09:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1-trhEuaASZSOIwhiFbfxVbCcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5d:ab:be:b1:12:57:50:86:8b:74:61:06:71:23:a9:c1:38:
57:fa:f1:ae:d1:c8:6f:d9:b2:a1:73:0c:a2:13:a5:0e:8e:98:
22:89:26:56:93:5a:48:61:28:d5:c9:0c:ce:6a:da:2d:dd:f3:
e0:43:22:15:1c:8b:75:83:9b:54:fa:06:61:49:c1:d1:38:5a:
d9:e5:89:4a:30:5e:cc:b6:1a:18:f1:c2:12:58:2a:d3:b7:fc:
9a:03:94:13:2c:de:bf:29:35:62:b4:41:df:ab:b6:c3:fb:62:
33:9b:82:41:cd:5e:04:82:02:ff:48:12:89:fb:6f:a5:f2:90:
6a:70:6d:20:bf:8c:87:d5:54:b2:d7:ea:5b:3d:85:e3:a6:10:
69:49:10:4d:04:c3:3e:10:7e:83:43:2d:b7:52:96:39:f7:e3:
06:f7:48:2e:a0:66:21:38:34:94:30:71:2b:2a:62:be:64:d7:
34:c8:a0:33:df:27:e1:44:93:ec:07:11:b8:00:84:ea:3b:4f:
cf:0c:b3:d2:20:fd:a9:42:9e:a3:c5:99:f7:3d:6d:e4:e1:67:
ce:4a:1d:56:ac:4d:ef:0c:15:51:4a:a9:9b:9a:1c:07:d6:39:
a1:f4:af:84:8f:3e:9c:cc:06:c6:1b:06:e2:5a:55:11:f4:82:
41:99:53:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omOg3bKI0zmZlK+SvpznLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NWZhZGFlMTEyZTY4MDQ5OTQ4ZTIzMDg2MjE1YjdmMTU1
YjA5YzEwHhcNMjYwNzI4MTIwMDIwWhcNMjYwNzI5MTIwMDIwWjAzMTEwLwYDVQQD
EyhkYzZkZGQwMTc1YjJlY2UxNjhiNmRhMDEwZDQ1OWQwMWEzNGM4MTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsMfVh69ciw16oAOd6cku6q/ubkP
iGOING3YJsRyI/fpUadiqXJE65/j/KvV4hy06HY/m7uJTUzutz/OyM2H/xv10u7n
vNuhkg20tFlmqzaXX+/66lUGR77k4/gDMl96B/W7Pnw/twvoHVZMtkOCha4k3pJ8
V8OmM/94aRfSLLsAa1494cOjrZfcjGcWxfqcY/xxXqxQJ8qmwZfdVHUNbFkpzYlY
goHNsYEZlIBcCnOaC4G4uTaKtGltI8DEod58m/GhHUyzNwDC/0nN5niHz5pqnEXa
18Tb2Angsq/JkSL4hn4gw4BqoPBGz8tjFxTxLhvnomuSZBl1U7REjJYEPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxt3QF1suzhaLbaAQ1FnQGjTIF9MB8GA1UdIwQY
MBaAFCdfra4RLmgEmUjiMIYhW38VWwnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjEtdHJoRXVhQVNaU09Jd2hpRmJmeFZiQ2NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kNWYxNGYtMjcwNS00MmVjLTkwMGYt
NjkzNGNhZmI2YmNkLzEvSjEtdHJoRXVhQVNaU09Jd2hpRmJmeFZiQ2NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kNWYxNGYtMjcwNS00MmVjLTkwMGYtNjkzNGNhZmI2YmNk
LzEvSjEtdHJoRXVhQVNaU09Jd2hpRmJmeFZiQ2NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArF2rvrES
V1CGi3RhBnEjqcE4V/rxrtHIb9myoXMMohOlDo6YIokmVpNaSGEo1ckMzmraLd3z
4EMiFRyLdYObVPoGYUnB0Tha2eWJSjBezLYaGPHCElgq07f8mgOUEyzevyk1YrRB
36u2w/tiM5uCQc1eBIIC/0gSiftvpfKQanBtIL+Mh9VUstfqWz2F46YQaUkQTQTD
PhB+g0Mtt1KWOffjBvdILqBmITg0lDBxKypivmTXNMigM98n4UST7AcRuACE6jtP
zwyz0iD9qUKeo8WZ9z1t5OFnzkodVqxN7wwVUUqpm5ocB9Y5ofSvhI8+nMwGxhsG
4lpVEfSCQZlTpw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:38:20 2026 by rpki-client