Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier: Ai1poe9FTPiYswtdSlO2KRE98I/B3qXdJxsuPqmJtks=
Subject key identifier: 1E:54:A7:DF:38:C4:FE:F4:62:D3:5E:86:62:8F:51:AD:61:8D:82:8A
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 019FAD8890464B075EE5EFB164CE116F14F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 11:00:35 +0000
Manifest this update: Wed 29 Jul 2026 11:00:35 +0000
Manifest next update: Thu 30 Jul 2026 11:00:35 +0000
Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: FEMtMv7rKikIJHzDJYP9Ynz42AS6oxyKaATZd5Qn2DY=)
2: gZ_db6GfXmBOp4kcCy-i3uexrlk.roa (hash: ThO+Sk/jrlZwpr+FgeFErC3/Gl+3M/mev1BE/Xmuy2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:90:46:4b:07:5e:e5:ef:b1:64:ce:11:6f:14:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: Jul 29 11:00:35 2026 GMT
Not After : Jul 30 11:00:35 2026 GMT
Subject: CN=1e54a7df38c4fef462d35e86628f51ad618d828a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:63:50:d0:e5:4f:19:f2:1d:20:4f:79:b0:
3d:3d:7a:21:78:dc:6e:63:4d:28:4b:8a:17:39:69:
df:55:2c:d9:17:97:bc:c9:bd:b8:28:42:b3:dd:0b:
28:cc:3e:7f:2b:e1:18:8e:05:e5:22:12:df:ab:9e:
6b:f5:57:4c:7c:0e:b8:32:75:4c:f9:c9:42:6e:3f:
60:0b:50:0f:dc:6d:af:91:9e:e4:3c:a9:aa:78:17:
ed:10:66:9d:ed:72:87:cb:ab:65:3b:df:ec:16:1e:
da:3e:8b:62:12:51:5d:ad:65:fe:08:e8:29:be:05:
ea:e6:4e:7f:b9:71:03:35:90:b7:ed:81:48:d8:60:
02:c3:df:54:85:9c:76:74:d5:82:7a:ad:94:23:53:
53:2a:fd:55:a8:ef:e4:bb:e5:98:f5:8a:28:7b:c4:
cb:27:cb:d7:f8:93:98:9d:6a:dc:9a:6a:5c:07:5b:
10:ca:9b:61:8a:98:d9:07:5f:fc:a2:8a:2e:08:36:
56:6f:da:91:5d:f0:ad:c7:fd:27:ce:00:07:81:0e:
15:33:26:c7:7d:fb:ed:83:3d:5c:f7:63:a3:b5:28:
c4:af:70:98:07:2b:ea:3e:41:43:dc:7e:08:cc:b8:
05:bd:f9:b8:43:e8:b2:ba:fd:35:0b:e2:db:e2:9d:
29:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:54:A7:DF:38:C4:FE:F4:62:D3:5E:86:62:8F:51:AD:61:8D:82:8A
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0b:4d:8f:ce:42:d4:0e:a5:7d:42:4b:08:86:aa:b4:77:2f:
aa:5f:6a:25:59:95:cd:94:33:1c:bc:5b:92:32:ea:7a:e4:ef:
b1:c4:0b:d2:65:4b:85:3f:d5:02:c1:a4:3e:23:fb:c4:13:33:
7e:81:36:7e:d8:63:a1:19:97:57:81:3c:04:25:1a:18:3c:05:
37:b2:6a:7f:10:85:c1:cf:f5:e0:85:7c:c7:ce:85:84:e9:87:
4f:5b:48:31:2c:b7:0f:48:f0:22:d3:ca:25:98:bb:66:75:33:
de:ba:4f:01:0d:6b:35:6f:e7:35:32:cd:19:d7:67:d4:0a:0b:
70:73:77:b2:f5:18:79:a9:97:b0:81:b1:cd:44:f0:75:3e:c7:
9e:28:42:13:14:80:9b:be:51:48:25:9b:9e:0c:d6:b2:47:a6:
29:fe:23:52:fa:d8:2c:88:d4:e3:7a:9c:ca:13:96:d8:31:93:
78:a3:e6:f1:5a:52:76:16:ba:71:7a:77:79:76:a6:4e:c1:70:
d8:4c:72:ba:35:a5:ae:02:3a:f7:a3:6e:32:8c:43:f2:12:d4:
e3:a5:15:84:4a:64:0e:dd:8e:35:7c:8a:a8:b2:98:d1:52:42:
8d:f6:2c:15:14:44:6e:20:67:45:15:39:ac:71:d9:e5:23:55:
28:a7:45:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:17 2026 by rpki-client