Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File: J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier: tmSUa/oyXBsT8JaSLtmb073XaOr7d/uCzRIrJClCyVY=
Subject key identifier: 36:64:F3:12:0A:59:45:C6:3A:2E:18:0D:14:54:2D:50:C1:AA:37:1D
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 019FA7BD2E0E8CEB6C84FF8D84664911A027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number: 19DA
Signing time: Tue 28 Jul 2026 08:00:20 +0000
Manifest this update: Tue 28 Jul 2026 08:00:20 +0000
Manifest next update: Wed 29 Jul 2026 08:00:20 +0000
Files and hashes: 1: 91q60wwCACPLxzl7znvLX0BSGEA.asa (hash: iRTNLqZ5nQm9dIpVsbb2+nwe5a7JsQ+j5M/LXHBcYYk=)
2: EaAMsvwoHBe4yq1jbHkVSMOCcms.roa (hash: tCewwDnNFA4yqzd0eb5IKas5uAfl5Rr1tmwDJ4VUURI=)
3: IvpEH6hd1qJi0dDCHitCwtgqWwA.asa (hash: pdg3WShcX162alecCVt/x5tpVyFcxh+QQl8q0PDMBOo=)
4: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: bw3TM0EPPRH9WsmKHdy+Zdp7IpvSDH+ff74+U6RQf7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:2e:0e:8c:eb:6c:84:ff:8d:84:66:49:11:a0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: Jul 28 08:00:20 2026 GMT
Not After : Jul 29 08:00:20 2026 GMT
Subject: CN=3664f3120a5945c63a2e180d14542d50c1aa371d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:79:5a:4d:d9:ed:7e:18:90:ae:b0:fe:ed:
21:04:8d:cd:08:9b:b8:90:4d:ee:8b:42:ea:82:e4:
0e:c9:97:3d:c5:94:ee:78:89:29:6f:78:e1:99:4e:
a5:94:56:e1:1b:85:17:7d:29:9b:52:c9:00:b8:fe:
f0:c7:63:66:15:7d:88:4c:07:4d:c5:d8:ef:84:db:
fd:73:27:fd:9c:12:bf:7a:b9:fa:1a:3d:34:c4:b1:
0c:92:a8:b3:3c:8a:40:99:f2:8f:48:36:86:4c:f5:
48:d9:5f:24:78:21:b0:53:6f:d2:92:e3:e0:01:24:
ca:d4:b5:00:b3:68:dd:7e:2f:81:e1:05:8a:37:78:
e6:27:85:ce:52:dc:5e:1a:0e:d5:60:6d:ad:61:b9:
9a:7a:12:b9:a9:9f:dd:7c:3c:9f:a9:2a:f4:15:71:
c0:5b:f5:1e:40:6d:aa:67:2d:fc:c6:56:d7:12:ab:
66:b4:2c:68:3c:49:80:31:83:39:c2:e1:18:01:d0:
27:fe:05:9e:41:85:c9:ab:38:ba:8d:8c:0c:be:5e:
61:4d:b0:28:b0:27:41:72:ee:60:69:05:d1:1d:dc:
17:78:4f:ef:bc:d2:c2:5a:70:20:b4:9b:f4:c8:23:
d6:bb:bc:2a:07:6b:d2:be:c2:58:69:fd:29:b0:3a:
ae:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:64:F3:12:0A:59:45:C6:3A:2E:18:0D:14:54:2D:50:C1:AA:37:1D
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1c:ab:df:26:34:be:ea:42:4e:47:bd:7e:3d:1a:ae:c8:5b:
eb:e1:62:d3:89:03:74:46:16:69:5f:86:03:50:c9:d2:c9:de:
6d:2e:88:57:cf:76:3d:35:cd:d4:05:27:90:0b:e6:af:a7:47:
a6:0c:cc:66:bf:95:02:e2:fd:91:54:a6:bd:d8:fa:b7:00:28:
0d:6f:1b:fe:32:47:26:27:d9:0f:40:1d:5a:d9:d0:92:ad:cf:
30:70:e8:59:7c:dc:23:80:aa:55:0e:df:da:99:23:e6:ad:72:
48:77:50:88:73:2e:3a:3a:8f:38:c9:89:9a:b6:05:d0:ed:1e:
b4:e3:b4:43:20:0e:35:39:c5:90:1d:38:64:07:04:6c:8d:f1:
ee:20:6b:28:8f:f7:d3:ab:8d:71:b0:1e:79:78:90:0c:fc:c1:
3e:b7:90:af:78:46:73:d4:63:c8:aa:b5:f7:ae:61:21:a7:eb:
9b:d1:86:e6:42:fa:2b:43:41:79:25:3a:d3:75:79:b6:5c:f2:
66:78:f9:f2:d5:2b:07:85:86:c6:0d:0c:21:e5:7c:f0:21:2d:
c7:c1:94:22:3a:e6:5e:8a:e8:6d:62:d2:aa:bd:69:99:44:05:
5a:ac:a0:95:a4:cf:79:05:2d:87:be:78:39:5f:41:a4:a8:9b:
aa:70:4c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:51:58 2026 by rpki-client