Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
File: JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft (raw, json)
Hash identifier: dGUMxnQek66QAF29uIuKMbFTuULuxFvhQf0Nsq3/FNM=
Subject key identifier: B1:91:17:D6:05:47:15:A5:9F:6D:6B:35:AB:90:6D:1A:CB:9C:CE:B5
Authority key identifier: 24:7C:DB:5E:A8:2E:03:33:36:64:0E:9E:EC:8E:A0:98:CA:C8:61:80
Certificate issuer: /CN=247cdb5ea82e033336640e9eec8ea098cac86180
Certificate serial: 019FAE2D0BC127A011B54717403FE86176AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
Manifest number: 013A
Signing time: Wed 29 Jul 2026 14:00:15 +0000
Manifest this update: Wed 29 Jul 2026 14:00:15 +0000
Manifest next update: Thu 30 Jul 2026 14:00:15 +0000
Files and hashes: 1: JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl (hash: vMJpEuvSHlf89iTZE0yYrLRTeV5kAsZoHdS4xu99F58=)
2: sr5kiWaUNJb3k53oHKiE3zAeNCc.roa (hash: 4lKEnHHPq8ieSuUmi9tpKwDYW28NC9iz/gZMj6c8NHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:2d:0b:c1:27:a0:11:b5:47:17:40:3f:e8:61:76:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247cdb5ea82e033336640e9eec8ea098cac86180
Validity
Not Before: Jul 29 14:00:15 2026 GMT
Not After : Jul 30 14:00:15 2026 GMT
Subject: CN=b19117d6054715a59f6d6b35ab906d1acb9cceb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:34:6e:b5:0d:b1:f4:8c:35:ec:76:b1:b1:7c:
13:6b:3b:df:59:8d:a1:58:ec:6c:c6:eb:9f:cf:de:
ae:22:e5:c6:e2:fb:19:52:e4:fb:3d:75:34:08:01:
c9:1a:3a:ff:af:f3:b2:ec:45:93:f0:9a:40:95:c9:
14:e6:e1:9f:6b:92:22:6a:e6:f4:4d:93:e7:af:aa:
60:fe:d1:73:b1:bb:8f:29:a7:62:46:2a:4b:0c:65:
fa:34:85:83:53:87:4e:aa:48:7e:b5:33:b4:23:8a:
af:32:68:18:ed:b0:e1:e0:3d:96:93:3a:0e:b6:b4:
81:a7:3c:db:c0:4f:81:b5:0d:d8:fb:78:8c:66:90:
7e:41:f2:5b:28:0e:f7:d4:54:35:d5:96:f1:10:d3:
c7:10:34:ef:cf:0d:8a:dd:7d:1c:a5:a3:ef:64:9e:
1a:d9:78:9e:78:2d:e0:37:f7:b5:23:df:59:44:1c:
a1:41:6a:96:4d:2c:b6:13:b3:40:c1:45:44:7f:4b:
e1:3d:18:4e:db:81:01:8a:cf:92:f1:d1:3d:c9:e9:
ba:7d:63:32:45:7e:6d:c7:15:87:06:d5:02:22:fe:
1e:ea:64:c5:da:ca:b0:43:30:df:1b:48:37:4a:89:
33:4d:b1:89:cb:12:b6:f2:c6:84:38:04:f8:67:1a:
bd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:91:17:D6:05:47:15:A5:9F:6D:6B:35:AB:90:6D:1A:CB:9C:CE:B5
X509v3 Authority Key Identifier:
keyid:24:7C:DB:5E:A8:2E:03:33:36:64:0E:9E:EC:8E:A0:98:CA:C8:61:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:89:f7:f4:56:a0:de:72:48:d3:a6:b5:2c:d5:6f:87:c7:87:
58:95:6c:46:3c:87:ef:d2:13:a7:e2:a8:38:e7:07:9b:80:2b:
8f:61:d5:a8:bf:2f:6b:42:da:2a:83:14:84:29:42:e4:c3:90:
48:f7:80:69:d9:e2:52:6f:d3:ed:e9:ce:75:c7:8d:ab:20:60:
3d:d9:a5:c1:22:ef:97:df:b8:84:26:26:30:60:86:79:b1:47:
53:21:8e:5f:e1:f6:0b:6a:8d:8f:23:65:04:4e:65:df:83:d2:
ec:d6:39:8f:25:5c:10:c0:ee:ae:3e:c1:24:86:29:8a:47:e7:
fa:a4:73:c4:6b:60:e3:d2:6f:4c:71:ba:a9:0e:0a:54:cd:dc:
40:df:0f:10:e1:3a:b9:d7:fe:8e:18:9d:8c:81:a8:5c:a1:3b:
a2:bf:b3:b6:fc:73:73:41:15:4c:2d:4a:87:04:c3:ce:9f:95:
b4:8a:ba:58:2a:0c:e6:e0:12:1c:aa:d9:b8:d1:7e:77:91:ec:
30:1c:7e:61:fc:f7:d7:2f:a1:0f:fd:d5:6f:97:b2:29:f0:61:
85:9b:88:8a:13:e9:15:86:7a:43:bf:08:45:17:9d:2c:0c:c8:
b2:c3:ad:df:13:8c:9c:2c:ea:cb:11:49:44:78:d8:e3:cb:f3:
23:b8:4f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:10:11 2026 by rpki-client