Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
File: JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft (raw, json)
Hash identifier: khlEMP5d5o2Ut5Bzb4X2ME2zcdiDWrQId/hyOgr0sbc=
Subject key identifier: 6E:1D:C5:73:FB:50:4B:25:39:95:B1:F3:FF:41:BA:FA:5A:CE:39:64
Authority key identifier: 25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87
Certificate issuer: /CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87
Certificate serial: 019FA7BD9A3F43F08DDBD59577B3EAA0053E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
Manifest number: 026F
Signing time: Tue 28 Jul 2026 08:00:48 +0000
Manifest this update: Tue 28 Jul 2026 08:00:48 +0000
Manifest next update: Wed 29 Jul 2026 08:00:48 +0000
Files and hashes: 1: JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl (hash: Q0PCL9wv4YbgeFeH7d6OkWZQ+xxpE3hmLCJTYLY9LVo=)
2: cBLrRuc_QFmi2U_2CCzwN-A0dxc.asa (hash: 5Ey35yS4pWRnFXiX5P1NF3EizWA8z5Hs9goy/FTCwkE=)
3: kKS6KloPbQfk_MqDgcm0FtJjzs0.roa (hash: 6OLn7a+dahEkyNoliy/foyipMpplcVkPCSuLTDS5rdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:9a:3f:43:f0:8d:db:d5:95:77:b3:ea:a0:05:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87
Validity
Not Before: Jul 28 08:00:48 2026 GMT
Not After : Jul 29 08:00:48 2026 GMT
Subject: CN=6e1dc573fb504b253995b1f3ff41bafa5ace3964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:2b:4e:dd:ce:8c:04:c2:4c:99:4a:c0:1a:
2c:93:70:64:8d:34:18:f5:b5:e4:d8:61:b8:a5:76:
c0:8e:b1:fb:f9:41:c4:a1:aa:cd:4d:54:6e:a5:37:
5d:6b:72:dd:f1:74:55:b9:e4:e8:9e:51:1e:07:a3:
fb:2b:5b:0b:8c:c1:c5:80:c0:af:11:46:b4:c0:a6:
67:e9:af:66:b5:4d:be:f8:d7:00:1b:d1:54:2c:8f:
2d:7d:ef:fc:39:d8:16:e4:ce:8b:de:18:95:98:2d:
bf:9c:d1:7b:a3:3d:15:6e:e6:23:90:57:fa:e4:bf:
e4:72:88:13:ef:fb:b3:f8:24:d1:e4:35:a0:3b:e7:
c9:ae:bf:a4:69:5e:8a:ac:a2:f0:f7:b2:62:5f:7a:
d8:24:0a:f9:ce:cc:64:b5:7e:81:e8:e2:ab:e4:47:
72:2e:e8:14:f9:74:fe:68:d8:de:ac:da:79:a5:6e:
11:00:35:cf:d8:65:e1:89:19:9c:9a:e8:45:12:0e:
20:87:c7:53:81:60:58:de:b6:35:93:e7:cb:f2:60:
61:79:42:e2:f5:e3:da:8d:f4:d8:c4:3c:24:fb:79:
d2:be:20:ab:38:a2:a8:9d:19:e6:22:0a:8d:70:ad:
d1:cd:40:24:c1:86:6a:af:90:44:f7:0f:57:fe:f1:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1D:C5:73:FB:50:4B:25:39:95:B1:F3:FF:41:BA:FA:5A:CE:39:64
X509v3 Authority Key Identifier:
keyid:25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b2:0d:b8:d6:35:72:56:cf:cf:9a:11:b9:cd:c2:c6:46:84:
aa:9a:c3:54:33:6f:93:42:40:9f:20:c2:91:3b:3a:d8:e4:eb:
3f:d0:77:c3:72:41:cb:eb:a4:7b:c0:b5:85:ed:12:5a:ea:cd:
c4:f3:0b:00:da:bb:09:c6:a2:fe:52:13:63:63:df:80:d0:9d:
f4:5c:88:67:87:54:ff:ed:ea:75:71:ed:6f:b1:30:37:26:ce:
2d:d8:ee:c4:23:49:c4:a7:d6:d9:00:16:ee:94:7e:3f:f9:34:
a0:0a:2f:98:d3:36:0e:c3:63:04:24:c6:54:09:63:ca:68:cd:
a1:da:83:b3:fe:f1:e1:9a:dd:1d:58:dc:0b:81:36:84:10:e1:
a0:b0:1a:f7:23:4d:2c:66:3c:2d:77:ab:93:a3:97:8f:18:91:
c4:be:c1:c7:51:86:d9:d3:14:54:e3:17:7e:39:46:23:b4:3e:
ec:d0:0d:f6:1f:1a:48:77:95:0d:3d:2c:79:5a:45:c9:89:7d:
03:1c:f0:45:0d:a7:99:cd:70:2d:1c:21:2c:75:ea:3a:22:cd:
30:75:4e:05:3a:24:a3:8e:90:a4:c4:93:01:2e:a2:b4:bb:fa:
54:f4:61:e5:1f:0b:49:17:1b:de:3a:e2:56:0c:f9:cf:58:09:
35:5c:ab:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nvZo/Q/CN29WVd7PqoAU+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YzE1ZDhlYzQ3YTJiMGUyMDQzYTc4MjJkYjY3YWMyMzEx
N2NjODcwHhcNMjYwNzI4MDgwMDQ4WhcNMjYwNzI5MDgwMDQ4WjAzMTEwLwYDVQQD
Eyg2ZTFkYzU3M2ZiNTA0YjI1Mzk5NWIxZjNmZjQxYmFmYTVhY2UzOTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhYrTt3OjATCTJlKwBosk3BkjTQY
9bXk2GG4pXbAjrH7+UHEoarNTVRupTdda3Ld8XRVueTonlEeB6P7K1sLjMHFgMCv
EUa0wKZn6a9mtU2++NcAG9FULI8tfe/8OdgW5M6L3hiVmC2/nNF7oz0VbuYjkFf6
5L/kcogT7/uz+CTR5DWgO+fJrr+kaV6KrKLw97JiX3rYJAr5zsxktX6B6OKr5Edy
LugU+XT+aNjerNp5pW4RADXP2GXhiRmcmuhFEg4gh8dTgWBY3rY1k+fL8mBheULi
9ePajfTYxDwk+3nSviCrOKKonRnmIgqNcK3RzUAkwYZqr5BE9w9X/vH6owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4dxXP7UEslOZWx8/9BuvpazjlkMB8GA1UdIwQY
MBaAFCXBXY7EeisOIEOngi22esIxF8yHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmNGZGpzUjZLdzRnUTZlQ0xiWjZ3akVYekljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kN2MyZTgtNGYyNS00MDMwLWExYzYt
NDNlMmIxNTk2NTdkLzEvSmNGZGpzUjZLdzRnUTZlQ0xiWjZ3akVYekljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9kN2MyZTgtNGYyNS00MDMwLWExYzYtNDNlMmIxNTk2NTdk
LzEvSmNGZGpzUjZLdzRnUTZlQ0xiWjZ3akVYekljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbINuNY1
clbPz5oRuc3CxkaEqprDVDNvk0JAnyDCkTs62OTrP9B3w3JBy+uke8C1he0SWurN
xPMLANq7Ccai/lITY2PfgNCd9FyIZ4dU/+3qdXHtb7EwNybOLdjuxCNJxKfW2QAW
7pR+P/k0oAovmNM2DsNjBCTGVAljymjNodqDs/7x4ZrdHVjcC4E2hBDhoLAa9yNN
LGY8LXerk6OXjxiRxL7Bx1GG2dMUVOMXfjlGI7Q+7NAN9h8aSHeVDT0seVpFyYl9
AxzwRQ2nmc1wLRwhLHXqOiLNMHVOBToko46QpMSTAS6itLv6VPRh5R8LSRcb3jri
Vgz5z1gJNVyrhA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 13:37:34 2026 by rpki-client