Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.mft
File: JPJm2DH8J6QqMgiJno32JsRXEAc.mft (raw, json)
Hash identifier: RVRGSFeOLheOuw+Rte7VH7sTb/UmhAb+zTEtLlDtWwE=
Subject key identifier: D1:2D:F9:44:85:95:33:27:B7:86:E6:1C:38:CC:04:28:F0:DD:D9:32
Authority key identifier: 24:F2:66:D8:31:FC:27:A4:2A:32:08:89:9E:8D:F6:26:C4:57:10:07
Certificate issuer: /CN=24f266d831fc27a42a3208899e8df626c4571007
Certificate serial: 019FA899723593C2E2B57C15A64D5269E790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPJm2DH8J6QqMgiJno32JsRXEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:56 +0000
Manifest this update: Tue 28 Jul 2026 12:00:56 +0000
Manifest next update: Wed 29 Jul 2026 12:00:56 +0000
Files and hashes: 1: JPJm2DH8J6QqMgiJno32JsRXEAc.crl (hash: hedPSE1i7wv7ekmnYrMoPVdRnlFMJRgka+5mREj3c5s=)
2: k8cKlqP4deq3hyxYaiQ4GhXCA5I.asa (hash: CisMnnWLCTdGxCNLWXEduRycUM2+pYKyAFoWjqKXGyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPJm2DH8J6QqMgiJno32JsRXEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:72:35:93:c2:e2:b5:7c:15:a6:4d:52:69:e7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f266d831fc27a42a3208899e8df626c4571007
Validity
Not Before: Jul 28 12:00:56 2026 GMT
Not After : Jul 29 12:00:56 2026 GMT
Subject: CN=d12df94485953327b786e61c38cc0428f0ddd932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:e8:e1:e4:c0:f7:bd:82:86:8d:b9:c9:10:
9e:7b:66:a4:fe:00:4b:d5:35:53:3c:ef:a0:06:53:
28:c9:2e:86:80:0b:f4:43:a4:55:b5:07:88:3a:3c:
3f:bd:4c:2c:80:a6:5c:76:a0:53:dc:d6:37:30:33:
66:4a:4c:58:df:ed:6a:c9:7b:99:54:13:d1:e7:1f:
b1:71:e0:19:48:86:c3:80:56:4c:c4:51:47:f3:b7:
50:0f:c3:85:3d:0e:f7:c7:33:ef:2f:25:be:2f:09:
99:57:f8:a8:34:9d:81:63:17:d4:b5:0c:40:3d:b6:
cf:c3:d5:ce:ac:78:cb:0e:94:86:30:c7:ab:df:de:
9b:85:68:ce:fa:48:c4:8e:21:9f:5c:7c:ed:1d:9c:
bb:48:fc:d6:44:d5:07:e8:9e:8a:b7:ff:4b:03:72:
13:0e:c0:5c:de:49:0b:73:c7:c4:1d:12:ee:da:71:
23:7a:07:a3:08:02:d8:62:e5:8e:a9:b2:e9:8b:0c:
d3:79:58:5c:82:ad:97:1a:7a:b1:a6:b1:92:02:97:
92:cd:02:89:6f:0c:b4:50:f7:61:a1:dc:77:7a:72:
36:19:1b:45:ce:da:a6:7d:ac:4b:c8:b3:ab:06:a5:
5b:61:8c:33:2d:47:a2:7a:3b:62:a7:df:73:e4:f7:
d1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2D:F9:44:85:95:33:27:B7:86:E6:1C:38:CC:04:28:F0:DD:D9:32
X509v3 Authority Key Identifier:
keyid:24:F2:66:D8:31:FC:27:A4:2A:32:08:89:9E:8D:F6:26:C4:57:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPJm2DH8J6QqMgiJno32JsRXEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:74:4e:4f:e5:7d:a4:4b:87:1d:25:d2:4d:38:49:d1:c2:35:
1f:a1:8a:66:b3:f0:ae:c9:2b:01:b8:33:82:2b:f2:28:08:8b:
f1:3a:2c:67:c2:3d:6c:86:dd:70:1f:ee:75:45:6e:38:d1:ff:
4e:58:a4:6b:14:40:00:e0:bf:b1:09:a3:17:b5:70:53:d4:8d:
01:d3:4e:de:ea:11:e6:1d:33:ca:df:6b:a5:35:f9:5a:f9:16:
56:bb:dd:6a:ee:f9:bc:ed:8e:bd:fa:2c:06:d0:05:78:4e:29:
90:91:80:0e:22:cb:6e:6b:66:9c:f5:52:ea:22:3d:13:63:62:
5f:ca:c2:e5:a0:0e:90:53:c1:b0:5c:61:fd:23:11:e4:7e:77:
e3:66:55:b7:79:f9:eb:c9:83:03:cc:3e:bc:f9:6b:37:8f:8b:
7a:c3:7d:cc:18:66:89:10:66:ac:ea:6f:be:66:f9:9b:41:35:
a2:6a:40:fb:82:a2:8c:c6:49:76:78:64:38:d4:bf:f3:10:91:
ca:fd:82:41:e0:79:c2:75:ce:fb:3f:e8:9a:c4:11:42:04:47:
b8:2d:52:b3:ec:18:64:3f:69:10:b5:3b:28:47:ff:53:d2:d5:
43:46:9e:4f:48:d5:ec:16:e6:54:45:cc:c7:64:ef:d3:2f:ce:
4b:ee:22:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:26 2026 by rpki-client