Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: u9ZA78FoFPbfYVFE3iq5vv8kA7X1cjF8b6jhJhPr5Ic=
Subject key identifier: 12:E8:52:02:5B:7C:C4:03:E6:88:BF:E5:54:C0:D6:A5:1D:F5:59:5C
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 019FA9AC63E956D75C42E9E94A98BD5AD06E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 17:01:14 +0000
Manifest this update: Tue 28 Jul 2026 17:01:14 +0000
Manifest next update: Wed 29 Jul 2026 17:01:14 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: KznL02nA+EVl7ISYhK6QvqlxH/TNxgBeObF47bNRhEI=)
2: TaLcMniYP68W_xpID_YTmpPHJQw.roa (hash: FpN6wFwhf5u/rLDXXLg50HkAwzUqczd5OywdW3G3qdY=)
3: dfxqd7-EbGdffyLZ8A8olZcFYug.asa (hash: HTZdeFHh36s+CBI2gsv3WBt1hDMpM6ApTTwTmbGKXCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:63:e9:56:d7:5c:42:e9:e9:4a:98:bd:5a:d0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Jul 28 17:01:14 2026 GMT
Not After : Jul 29 17:01:14 2026 GMT
Subject: CN=12e852025b7cc403e688bfe554c0d6a51df5595c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:d5:dc:6d:b1:75:0b:ba:aa:b3:e3:7c:da:
40:ff:3f:e0:65:a0:36:7a:06:90:71:21:da:3d:10:
87:06:f9:f5:26:0c:3e:52:56:de:97:1c:12:29:65:
e6:eb:8b:7f:25:05:7d:b8:9d:c6:c2:fc:52:87:54:
0a:02:4e:e3:0a:c0:71:09:b1:f7:7b:5f:35:64:a4:
83:65:96:66:c4:ed:68:a1:ed:1b:1d:c7:9e:d6:04:
24:d8:71:2a:11:c9:00:bf:2a:57:aa:c1:41:b1:a3:
5b:be:48:a6:26:5e:67:72:dc:de:17:1e:ff:87:1f:
e5:52:96:b4:67:12:9d:f8:be:46:10:e9:76:ba:aa:
7d:46:ab:56:a5:fb:74:79:3c:3f:ac:20:1a:a4:e2:
05:75:51:14:74:17:e5:28:9d:cd:9f:2f:46:c6:e1:
89:03:68:b7:30:ce:22:14:f6:15:01:b3:82:ed:7c:
62:cd:68:84:3b:4d:b0:0f:9a:b7:42:c7:07:78:47:
5b:7a:8c:82:11:db:b6:08:18:ba:1f:9b:ee:16:d5:
ac:b5:e3:83:95:5e:59:f8:0b:96:cd:c0:22:41:83:
1c:0b:90:77:cb:07:3a:8d:90:89:77:35:38:bd:9d:
70:db:6e:e8:c4:27:0e:83:07:94:3f:6a:27:0a:b5:
4b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E8:52:02:5B:7C:C4:03:E6:88:BF:E5:54:C0:D6:A5:1D:F5:59:5C
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f1:15:82:18:71:45:b1:36:56:80:f9:b3:39:ec:a9:f9:79:
fd:c5:c4:f1:11:50:20:3a:e3:0d:93:2b:48:29:eb:af:aa:eb:
13:02:31:81:51:d3:17:91:5c:18:d0:3e:d3:cb:3e:76:d8:42:
2f:ff:57:a4:fe:aa:ba:84:9a:44:ee:60:3b:da:a3:c4:38:5d:
09:d2:16:b2:e6:dd:ce:1b:fc:3e:ae:d1:f1:b1:fa:39:48:1c:
e8:c6:e0:ad:e5:25:06:be:d3:a8:05:4f:78:2d:a7:50:5f:6b:
34:a1:f5:bb:cb:1b:4b:30:be:ca:d3:70:7a:16:13:11:bf:90:
ca:87:bf:21:7e:25:cd:17:a3:de:eb:1a:7d:5e:fc:9f:b1:76:
8e:fa:03:f4:f3:63:3f:ec:b3:35:20:7d:b5:b9:fd:ac:2c:41:
29:47:ad:8c:cb:23:cc:87:2c:71:9b:cf:98:da:25:6c:50:d9:
5f:3e:f5:3b:74:60:8f:e0:cb:ba:93:f3:16:68:e9:37:a7:9b:
28:63:06:a5:61:d9:e4:e7:d3:2d:0a:86:b2:3f:8b:fd:b3:99:
75:09:6d:37:9a:b1:e7:58:c5:8e:40:e8:3f:51:67:f6:b4:8a:
ca:71:f5:32:62:cb:ae:e0:b6:c8:50:05:8d:64:2a:fb:f4:cf:
1a:b4:d8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:39 2026 by rpki-client