Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
File: jAz2W63ZqIrMwydQC1_ynR_wkZY.mft (raw, json)
Hash identifier: Z5F9+I0uxUyuPTA9GmBTcqetDzM1IMvoLwvsOYCxjlk=
Subject key identifier: 24:0E:28:EC:8E:50:2B:EF:9C:A5:52:D4:1E:3E:55:DF:9E:5D:32:E4
Authority key identifier: 8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96
Certificate issuer: /CN=8c0cf65badd9a88accc327500b5ff29d1ff09196
Certificate serial: 019FAB9AAB7AE3136AEB8026A0295BAD7353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
Manifest number: 0487
Signing time: Wed 29 Jul 2026 02:01:08 +0000
Manifest this update: Wed 29 Jul 2026 02:01:08 +0000
Manifest next update: Thu 30 Jul 2026 02:01:08 +0000
Files and hashes: 1: jAz2W63ZqIrMwydQC1_ynR_wkZY.crl (hash: Gu+TDKtCz2hBe2u9kYqoA2tjGnw5Khi3lFzou+vFf90=)
2: q2iMHMpPinukFM5Qhc4ZwsftRx0.roa (hash: +p+ImNbpg+AUu5Y3P8c/ugT7MQsuGHh+4k2E8cJ52tE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:ab:7a:e3:13:6a:eb:80:26:a0:29:5b:ad:73:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0cf65badd9a88accc327500b5ff29d1ff09196
Validity
Not Before: Jul 29 02:01:08 2026 GMT
Not After : Jul 30 02:01:08 2026 GMT
Subject: CN=240e28ec8e502bef9ca552d41e3e55df9e5d32e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:74:b4:e2:2f:d4:4a:5e:48:fb:8d:2f:84:56:
ee:b1:8a:01:2e:81:a8:c4:69:1a:db:3b:86:47:f1:
66:ae:7e:50:ab:cd:b8:eb:94:1c:bf:12:ec:2d:9b:
de:3e:d5:cc:ad:1b:ac:70:b9:ae:5d:47:fb:ae:28:
fb:44:91:f9:5b:d3:ff:01:bf:76:13:b9:6c:f7:e6:
de:99:b2:f3:80:52:1e:61:12:b8:5a:f1:55:4a:f3:
25:65:ef:2a:90:4e:ee:4d:46:91:b7:1b:30:f9:86:
12:5e:32:1a:90:cd:5b:56:3d:99:12:94:f9:67:62:
c9:56:02:65:41:9a:94:c9:7f:92:b6:f6:48:af:45:
a2:c8:28:93:25:f3:13:f9:ca:7c:99:7d:ee:09:17:
ad:6d:ed:25:c8:97:4c:a9:94:c9:67:77:80:79:73:
9d:0b:6f:34:70:e6:cf:e2:b5:41:c3:90:be:00:86:
61:c2:6b:7f:c6:a2:fb:17:28:ef:cd:d4:20:77:e4:
1d:f2:e5:b5:33:62:4d:b9:04:33:31:a1:45:f5:db:
cc:34:d4:49:f2:2a:bb:46:e5:6c:62:10:b9:3f:29:
8e:07:01:4c:7b:58:57:16:db:fa:4e:ac:74:47:8a:
d6:5a:7b:70:63:61:65:c9:e4:3b:39:e5:36:b3:95:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0E:28:EC:8E:50:2B:EF:9C:A5:52:D4:1E:3E:55:DF:9E:5D:32:E4
X509v3 Authority Key Identifier:
keyid:8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:be:ce:bd:fd:cc:76:44:2f:ee:fe:d6:d2:1c:04:f0:4a:d6:
1a:36:5f:43:e3:1b:04:aa:45:fa:7b:f0:96:f6:d9:97:7a:c9:
13:aa:18:1a:d2:fa:ee:93:8e:7e:c9:12:c5:ba:47:32:b4:99:
d2:b6:17:41:a9:23:61:ef:24:a7:fc:1d:10:d1:87:16:b6:b4:
c3:20:cc:7b:14:f6:a9:a4:eb:de:38:73:71:c5:f0:65:6f:38:
b9:c6:5b:4b:cf:a7:37:40:de:77:94:19:f0:b2:28:54:80:26:
1b:12:81:84:a6:7b:dd:29:83:b8:db:3e:e7:c9:da:0d:40:99:
1e:b4:fd:9d:0c:14:99:40:a8:8a:ec:1e:4d:73:5f:3c:54:68:
13:de:a9:50:3e:36:d4:78:c3:d1:8a:6d:4c:26:fc:27:b5:84:
82:d8:05:79:9c:5b:6f:6d:6b:1b:08:b2:a8:76:54:8a:b4:40:
80:74:f7:73:5b:f0:a4:aa:f1:b1:4e:4a:8b:fa:95:0f:42:fa:
f0:c5:ea:f2:2d:ed:09:3b:b9:e4:96:0c:3b:85:45:41:21:14:
a0:f4:e0:2d:5d:50:37:57:59:ef:c0:d8:dc:e6:b5:78:42:97:
c1:a5:9b:23:43:19:22:04:ba:7d:3d:7f:74:15:84:c0:7c:e7:
02:bc:6c:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmqt64xNq64AmoClbrXNTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMGNmNjViYWRkOWE4OGFjY2MzMjc1MDBiNWZmMjlkMWZm
MDkxOTYwHhcNMjYwNzI5MDIwMTA4WhcNMjYwNzMwMDIwMTA4WjAzMTEwLwYDVQQD
EygyNDBlMjhlYzhlNTAyYmVmOWNhNTUyZDQxZTNlNTVkZjllNWQzMmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynS04i/USl5I+40vhFbusYoBLoGo
xGka2zuGR/Fmrn5Qq82465QcvxLsLZvePtXMrRuscLmuXUf7rij7RJH5W9P/Ab92
E7ls9+bembLzgFIeYRK4WvFVSvMlZe8qkE7uTUaRtxsw+YYSXjIakM1bVj2ZEpT5
Z2LJVgJlQZqUyX+StvZIr0WiyCiTJfMT+cp8mX3uCRetbe0lyJdMqZTJZ3eAeXOd
C280cObP4rVBw5C+AIZhwmt/xqL7FyjvzdQgd+Qd8uW1M2JNuQQzMaFF9dvMNNRJ
8iq7RuVsYhC5PymOBwFMe1hXFtv6Tqx0R4rWWntwY2FlyeQ7OeU2s5VlCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQOKOyOUCvvnKVS1B4+Vd+eXTLkMB8GA1UdIwQY
MBaAFIwM9lut2aiKzMMnUAtf8p0f8JGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZmQ4YzAtZDdhZi00ZGIxLTllMDQt
OTc1YTgwZDBkOTNmLzEvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kZmQ4YzAtZDdhZi00ZGIxLTllMDQtOTc1YTgwZDBkOTNm
LzEvakF6Mlc2M1pxSXJNd3lkUUMxX3luUl93a1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMr7Ovf3M
dkQv7v7W0hwE8ErWGjZfQ+MbBKpF+nvwlvbZl3rJE6oYGtL67pOOfskSxbpHMrSZ
0rYXQakjYe8kp/wdENGHFra0wyDMexT2qaTr3jhzccXwZW84ucZbS8+nN0Ded5QZ
8LIoVIAmGxKBhKZ73SmDuNs+58naDUCZHrT9nQwUmUCoiuweTXNfPFRoE96pUD42
1HjD0YptTCb8J7WEgtgFeZxbb21rGwiyqHZUirRAgHT3c1vwpKrxsU5Ki/qVD0L6
8MXq8i3tCTu55JYMO4VFQSEUoPTgLV1QN1dZ78DY3Oa1eEKXwaWbI0MZIgS6fT1/
dBWEwHznArxs2w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:02:36 2026 by rpki-client