Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: nT+L6Hp3kkJ8Zsdduu8v0aTqs7HxFwgUcVt5w8QBYqk=
Subject key identifier: EE:59:F2:CE:0D:C5:6B:80:2E:51:00:86:6C:FF:D0:A4:7A:0A:1E:26
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 019FA9ABC4E24BD3DB695A8FEBAB85BC617D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 17:00:34 +0000
Manifest this update: Tue 28 Jul 2026 17:00:34 +0000
Manifest next update: Wed 29 Jul 2026 17:00:34 +0000
Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: cSADJbBIAqrjWm0KR+lK5lInh83mXtPC5krgoVWAiMk=)
2: psZNmPYVql98KxRd5_J9v8TyFDo.roa (hash: 83pmxITkPLNCEyrAljxQNeti1DcWIEULoY0Jkfv3Y08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:c4:e2:4b:d3:db:69:5a:8f:eb:ab:85:bc:61:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Jul 28 17:00:34 2026 GMT
Not After : Jul 29 17:00:34 2026 GMT
Subject: CN=ee59f2ce0dc56b802e5100866cffd0a47a0a1e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:a6:48:78:73:79:43:4b:f8:31:af:9f:72:
6e:9e:08:3e:0e:68:99:bd:47:35:5c:c1:f1:65:90:
d4:6e:26:56:a9:28:43:59:4e:21:ca:7b:b1:a5:8c:
fe:6d:6b:4b:f7:9f:0a:1a:dc:7e:33:96:6e:55:9c:
2f:db:f7:81:0f:5e:e9:29:61:c8:a1:84:44:a4:54:
88:75:04:83:5b:5e:dd:4f:99:26:5e:0c:65:94:4c:
26:a8:d7:e2:8a:70:91:8a:d4:b4:db:0a:7d:2b:1b:
fb:9c:c8:24:50:36:d9:8f:2a:13:d1:2e:7a:ae:5d:
4f:e5:81:a6:46:ee:ea:aa:99:ee:59:25:0a:5d:79:
6b:6b:a4:0c:12:d0:61:96:08:e3:9d:02:4e:2c:b9:
35:7d:fe:ff:f9:e3:df:6e:a7:95:0c:7a:2f:57:bb:
68:16:57:43:c2:4f:1c:42:8a:83:4a:f6:4b:41:ac:
15:94:78:00:15:21:31:48:40:69:3b:d9:81:4c:13:
b7:4b:c6:7c:c4:12:04:97:fa:a2:53:92:e3:cd:81:
21:6d:16:8a:49:f0:cd:1d:32:05:d9:04:0e:68:94:
b6:5e:a1:b8:9a:93:79:2a:66:01:09:55:a7:fc:c5:
b9:13:f8:3b:72:16:fc:c3:05:1b:4f:28:c5:47:00:
30:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:59:F2:CE:0D:C5:6B:80:2E:51:00:86:6C:FF:D0:A4:7A:0A:1E:26
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7f:bf:4f:ee:f0:be:f3:91:ec:16:26:6f:79:db:3d:1a:21:
c1:65:cb:b8:b1:a0:3e:73:a1:ec:66:f8:e2:a1:56:cd:86:48:
6a:6d:55:8e:84:66:2c:ce:33:6a:e3:0f:cd:f1:b9:23:1d:20:
83:fd:f4:fb:3f:f7:f1:2c:6b:af:48:c1:8f:54:13:13:c9:c5:
ab:72:1c:9f:c2:c0:42:e9:05:79:89:be:13:19:8d:74:e4:fe:
df:03:5c:2d:b2:d8:6b:6d:26:de:8b:1c:87:93:7c:3b:12:0a:
53:6f:40:5a:b3:e0:5f:5d:df:03:d5:03:e3:aa:4f:cf:4e:eb:
e6:8b:84:e0:a8:dd:b0:6c:45:f3:a1:aa:7d:4b:85:75:1e:e5:
fd:5c:ed:39:08:24:c2:40:db:b6:f0:0d:0c:85:e8:a7:6b:94:
c4:f6:a5:5a:96:6f:0c:e5:03:fe:c5:86:7d:87:ac:78:7a:af:
dd:37:ce:d9:59:3d:b7:63:65:ac:9c:60:70:7f:66:bf:55:e8:
f1:b0:ab:41:3c:18:f4:e5:6b:46:93:cc:79:4a:7b:e0:7a:12:
c6:d6:31:be:3c:b4:ab:c4:08:0c:0e:e4:bb:67:65:46:0d:54:
29:81:89:20:9e:9d:de:57:9a:86:86:b5:a5:5b:94:97:27:c3:
fa:a1:2f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:00:33 2026 by rpki-client