Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
File: JjycXuMYJkcwl2-vxykVM-vasK4.mft (raw, json)
Hash identifier: O2Pqca6rMn1pnUqaoce/jtYLW77N3gwrS7l5amBhOvg=
Subject key identifier: 8F:6E:2B:28:C7:16:8E:EC:4D:C1:A6:9C:33:C6:38:62:4D:B9:CF:17
Authority key identifier: 26:3C:9C:5E:E3:18:26:47:30:97:6F:AF:C7:29:15:33:EB:DA:B0:AE
Certificate issuer: /CN=263c9c5ee318264730976fafc7291533ebdab0ae
Certificate serial: 019FAC767CC437678C8F97B7A6B252D2DCAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:13 +0000
Manifest this update: Wed 29 Jul 2026 06:01:13 +0000
Manifest next update: Thu 30 Jul 2026 06:01:13 +0000
Files and hashes: 1: 3s2ZJUQAOdZQJN2QTpFD73M4leg.roa (hash: +xm6BHzusOZzGKozAQdu+MZkDVhhL6TdcM7wkPQ8Ae0=)
2: JjycXuMYJkcwl2-vxykVM-vasK4.crl (hash: +yR9tQkj54RVoes//xDi3MguwlZXkHk2O+fw7ZAiM1w=)
3: sijAZFXqLEAsSi2rQmlGly-OpqE.roa (hash: nt4ShhsIrV0zPjcFLpG+lSg9q9cr8DdHdWhyP7LPzjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:7c:c4:37:67:8c:8f:97:b7:a6:b2:52:d2:dc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=263c9c5ee318264730976fafc7291533ebdab0ae
Validity
Not Before: Jul 29 06:01:13 2026 GMT
Not After : Jul 30 06:01:13 2026 GMT
Subject: CN=8f6e2b28c7168eec4dc1a69c33c638624db9cf17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:be:b0:17:f9:8d:eb:da:19:f3:d9:b7:df:9e:
88:7d:aa:42:f4:2a:74:b7:d5:f8:30:a5:8c:0c:b8:
eb:29:8d:07:3d:15:37:80:3d:bb:12:2d:fe:22:00:
c0:e3:5e:8b:89:96:6f:04:79:95:66:0b:ba:c1:48:
e0:2f:7f:10:9d:1c:94:81:49:19:1b:f1:91:7c:c2:
37:65:ff:ca:8d:29:37:b0:fb:01:a7:67:1b:5a:ef:
00:6d:23:55:cd:37:15:ff:2a:dc:9b:be:09:a0:e9:
25:b8:7e:61:94:cb:d9:75:ee:54:25:cd:21:73:20:
b8:b3:14:dc:fd:59:86:21:44:6b:1c:3f:4f:e7:a4:
2a:07:f7:cd:92:ec:82:0a:19:7c:69:ae:c7:b6:5e:
2f:64:b0:5f:89:fb:9f:44:ce:f3:f4:06:cb:86:8f:
61:ef:62:78:98:ef:b3:62:d7:57:64:f1:ef:6d:0c:
16:06:a8:c1:95:97:f9:54:86:a0:19:5a:e1:0c:f0:
74:a1:fc:56:bd:9a:0b:ff:b9:13:69:f5:a6:a4:42:
35:49:1f:e5:9b:e0:98:f9:fb:47:c8:a2:44:e9:2a:
08:73:84:5b:87:1f:e5:d2:49:59:a5:31:96:f7:06:
6a:0a:9d:fa:8f:13:47:79:27:f4:3a:05:33:ac:88:
de:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6E:2B:28:C7:16:8E:EC:4D:C1:A6:9C:33:C6:38:62:4D:B9:CF:17
X509v3 Authority Key Identifier:
keyid:26:3C:9C:5E:E3:18:26:47:30:97:6F:AF:C7:29:15:33:EB:DA:B0:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:68:ef:87:a5:31:0a:84:2c:b6:4b:6e:5e:4a:da:40:e2:ab:
3a:ad:a5:ce:dd:fb:fd:bc:b5:be:a3:b3:82:e4:32:db:f4:da:
b5:b4:8a:f3:05:6f:d8:1e:8c:0b:d1:5a:2f:23:0c:65:61:56:
f1:7f:af:6f:e0:a2:6e:fa:31:17:fc:8c:0e:49:48:71:79:28:
7b:2a:22:2b:48:2a:8f:34:41:2e:20:19:bd:12:c1:00:88:51:
d7:c2:9d:fb:b8:27:5d:87:38:2b:6f:34:3d:36:fc:c9:75:4e:
7f:7c:32:f5:7a:57:80:62:40:ac:b0:64:c5:17:d7:ac:68:71:
c4:65:47:1c:19:af:e0:0d:43:ee:65:7c:2f:30:8f:74:05:5c:
f9:1e:a5:05:28:c9:51:47:ed:67:a0:1c:f8:a5:08:74:85:8b:
86:95:97:7c:23:fe:ac:ae:10:18:7a:87:1d:90:7c:93:1c:bf:
eb:e5:f6:46:36:e7:7f:77:d5:a3:d4:a5:45:fa:52:bb:92:e5:
f7:06:32:b2:42:d9:41:31:1d:db:8e:0e:15:ba:7c:79:89:46:
4b:f2:74:63:46:5a:9f:a8:5d:12:36:d9:35:5d:0e:c0:9f:16:
dc:7f:68:69:32:5b:3b:1c:66:89:2a:f4:7f:ba:56:12:4a:b5:
eb:94:fc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:23:18 2026 by rpki-client