Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/JJT1GjsX7o__wrzFz7I2osBtMBQ.mft
File: JJT1GjsX7o__wrzFz7I2osBtMBQ.mft (raw, json)
Hash identifier: CAQXTLtqQWQ1WIJUTBlwtxAtgR/C+4zKCjfeO5TfbyI=
Subject key identifier: CE:0D:F1:F9:0D:62:89:94:D4:1E:C5:D5:36:63:FA:81:1E:13:45:EE
Authority key identifier: 24:94:F5:1A:3B:17:EE:8F:FF:C2:BC:C5:CF:B2:36:A2:C0:6D:30:14
Certificate issuer: /CN=2494f51a3b17ee8fffc2bcc5cfb236a2c06d3014
Certificate serial: 019FA89991D137689DC35B91E613DAA62E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJT1GjsX7o__wrzFz7I2osBtMBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/JJT1GjsX7o__wrzFz7I2osBtMBQ.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:04 +0000
Manifest this update: Tue 28 Jul 2026 12:01:04 +0000
Manifest next update: Wed 29 Jul 2026 12:01:04 +0000
Files and hashes: 1: 8B-p0w7Z7j0dOO6u8yPFRmJC2eI.roa (hash: 6voDi7M4n7VVEn89oNd75Yj/U+JyFcJrtu+YtLFQn9I=)
2: JJT1GjsX7o__wrzFz7I2osBtMBQ.crl (hash: 38xK/2BZBF84jG7ZRtlJCHJHVyPzW+j8hSAkMSXi1Ws=)
3: WP_E34plJ0O3N0S7JYCB7lN7wmA.roa (hash: w7tp2TDpf5fEZdFoSaHNL5/XjscaOJcFum6Cz+q+sLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/JJT1GjsX7o__wrzFz7I2osBtMBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/JJT1GjsX7o__wrzFz7I2osBtMBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJT1GjsX7o__wrzFz7I2osBtMBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:91:d1:37:68:9d:c3:5b:91:e6:13:da:a6:2e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2494f51a3b17ee8fffc2bcc5cfb236a2c06d3014
Validity
Not Before: Jul 28 12:01:04 2026 GMT
Not After : Jul 29 12:01:04 2026 GMT
Subject: CN=ce0df1f90d628994d41ec5d53663fa811e1345ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:df:98:c4:09:60:49:b6:ee:50:7d:4a:2f:e2:
f1:22:c1:d6:8c:db:58:7a:b1:15:a4:f6:d2:a8:80:
22:ab:61:c3:b0:35:4f:25:4a:73:2c:16:77:92:bb:
d8:b9:ee:8c:80:29:6a:36:29:f2:e5:89:07:ed:84:
95:48:ff:1c:86:20:74:5c:bd:7a:f0:8b:e2:18:7f:
e9:73:c3:f4:4f:d0:c2:7a:2c:33:60:56:06:34:30:
b7:47:a6:7b:74:75:ba:a2:f3:9a:4d:0a:d9:88:5c:
b7:f4:b5:5a:ac:5a:23:7f:20:1c:e1:59:c7:b2:80:
71:26:f6:b4:5d:a4:50:db:f8:1c:54:e9:53:8c:3f:
65:eb:42:5c:43:9e:65:95:8d:06:c9:ac:2e:ad:35:
3a:29:7b:87:32:51:54:1f:9e:66:45:06:12:d9:1a:
4b:1d:09:f0:4e:32:c0:09:79:04:c1:3e:36:25:6b:
56:c0:47:46:4f:ae:b8:e4:77:7d:11:41:60:b5:6a:
16:27:8a:47:93:1d:03:f7:bb:75:56:20:82:9b:5f:
2b:f2:3e:7a:89:29:10:bb:ec:2c:d5:64:44:e2:0e:
78:3e:75:ab:e7:6a:b4:9f:d6:ea:65:2f:7e:ff:d4:
85:8c:34:27:80:1b:ba:61:d6:a3:7e:32:6f:01:a2:
41:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0D:F1:F9:0D:62:89:94:D4:1E:C5:D5:36:63:FA:81:1E:13:45:EE
X509v3 Authority Key Identifier:
keyid:24:94:F5:1A:3B:17:EE:8F:FF:C2:BC:C5:CF:B2:36:A2:C0:6D:30:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJT1GjsX7o__wrzFz7I2osBtMBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/JJT1GjsX7o__wrzFz7I2osBtMBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/JJT1GjsX7o__wrzFz7I2osBtMBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c5:b0:f3:68:36:17:bf:e2:96:ed:1c:ad:4f:f3:a3:a9:31:
da:d1:b3:1d:e2:d1:b2:47:7d:bd:a7:cc:a1:0a:35:47:3a:63:
ab:39:cd:8f:1e:9a:c2:0b:c7:b6:96:02:93:6e:82:1d:b7:6a:
3f:44:7a:62:ac:67:7d:8a:de:3b:6f:f4:a7:12:34:1e:76:39:
89:1e:17:91:03:3e:94:d7:41:de:94:5e:ac:09:25:9a:80:5f:
ab:6f:19:50:af:74:93:66:db:50:85:05:3b:63:41:ec:83:f2:
29:14:ff:58:96:df:85:9f:17:85:67:33:6a:73:a5:4b:ac:ef:
22:70:60:65:fe:85:9c:8e:a7:cd:94:ad:ef:b0:2d:06:36:3a:
1d:af:e8:57:88:be:a2:c2:b2:56:c2:0b:c9:df:2f:b6:83:8f:
bc:55:58:3a:b4:65:05:63:79:41:b6:45:79:e6:29:9b:8b:ab:
86:a0:42:c4:6e:f0:43:e5:01:18:38:88:04:30:57:f1:da:bb:
94:2b:4e:50:66:4e:6b:9b:6d:9c:fe:69:e6:6c:c8:a4:47:47:
ab:42:c7:a8:6a:81:df:fd:98:b8:8f:02:ec:6c:91:81:14:d0:
b8:f6:b5:a7:ba:aa:12:4f:87:7d:28:74:c4:a9:5d:67:8a:4b:
d0:7e:b0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:14:58 2026 by rpki-client