Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
File: jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft (raw, json)
Hash identifier: tjFRL4m5iQZ52KqBE+zbKef6n2p7Y/6PxKkgxRvhGN8=
Subject key identifier: 45:FF:64:4E:0A:8B:2E:75:85:26:8D:56:24:21:36:7B:D5:61:2B:25
Authority key identifier: 8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C
Certificate issuer: /CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
Certificate serial: 019FA78740C5D85F42A459CC36E980931F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
Manifest number: 011C
Signing time: Tue 28 Jul 2026 07:01:26 +0000
Manifest this update: Tue 28 Jul 2026 07:01:26 +0000
Manifest next update: Wed 29 Jul 2026 07:01:26 +0000
Files and hashes: 1: jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl (hash: wEl5FvTtxkUtr8BX9rrVRUGMIUCZbcWoWQXgoh7DsTg=)
2: y0t4f3SYiNI2RVeLlWE56pwZqao.asa (hash: 7OCsijFOaHb7cmOa3vj0zykIPZySXdI6fNcvKKq6Oig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:87:40:c5:d8:5f:42:a4:59:cc:36:e9:80:93:1f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
Validity
Not Before: Jul 28 07:01:26 2026 GMT
Not After : Jul 29 07:01:26 2026 GMT
Subject: CN=45ff644e0a8b2e7585268d562421367bd5612b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:58:5c:ea:f3:d0:ab:f5:27:21:52:1e:70:
75:e1:7a:d3:11:7d:eb:93:82:67:c0:0c:e8:70:4b:
68:ce:c2:58:77:0b:aa:31:81:4b:0d:f0:fe:1b:96:
33:24:da:1f:2c:f2:cd:91:bc:4a:db:7d:5d:3e:39:
21:cb:0d:ed:bf:46:19:2a:de:10:b1:5a:1c:f2:dc:
47:8f:4f:ae:b7:ad:66:9f:f5:d6:9c:5b:ba:f3:b1:
75:4c:0c:d6:d5:50:a5:0f:83:03:c7:1c:83:6a:d2:
e9:bb:87:3a:3d:b1:80:d4:1c:ae:66:21:79:b1:ec:
e2:f5:7f:35:53:dc:b9:df:9d:64:76:4d:c0:e9:f4:
3e:39:2e:45:18:dd:aa:5e:f4:e2:00:5a:6f:1d:63:
3b:98:7f:1c:55:20:67:2f:de:23:e3:59:fa:29:46:
d5:74:84:eb:a5:89:23:18:eb:61:29:77:38:d3:94:
02:5c:bb:44:a6:61:87:f9:ec:b6:6e:4f:4e:b2:9b:
8b:d0:8a:92:88:d2:19:40:c1:18:9d:a3:7a:ea:3b:
64:de:7f:c9:28:a1:26:84:06:db:f7:b9:7f:48:a7:
4f:3e:bc:f7:83:a7:5a:37:dd:eb:b9:cb:ae:ac:a1:
5d:ac:bf:db:6e:b2:b2:02:d5:8c:d2:5a:b4:99:70:
6d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FF:64:4E:0A:8B:2E:75:85:26:8D:56:24:21:36:7B:D5:61:2B:25
X509v3 Authority Key Identifier:
keyid:8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a1:38:a7:3b:67:4f:df:df:fc:ea:2f:f0:bc:e7:5f:4d:52:
6c:17:22:8c:e9:67:6c:10:81:84:43:e1:59:42:9c:d0:16:85:
c4:71:dd:eb:02:bc:fb:d6:7d:6e:c2:e5:71:cb:b4:30:27:d2:
8f:f3:77:8d:dc:59:02:75:9e:06:e6:17:9b:ad:33:fa:16:a0:
5a:d7:d1:7c:25:53:c7:00:22:8f:d1:98:10:a7:35:57:2b:f5:
3b:a5:47:5f:16:39:e1:f9:80:ef:dc:65:26:8d:19:ef:1a:90:
00:5d:64:57:25:01:3e:b4:d5:69:a3:04:be:88:af:b4:53:1a:
76:61:8c:96:42:20:ec:ed:2e:e1:d8:6b:e6:22:69:87:8b:2a:
cc:82:4c:13:9b:64:4b:6a:f9:04:43:09:d2:ab:61:66:50:c7:
48:37:85:67:b4:43:2d:12:58:b7:2f:a5:8c:47:23:63:80:fd:
5b:bc:1c:65:6e:c9:0e:db:bc:14:0a:79:16:0e:32:11:86:45:
38:f5:c4:08:24:7e:ee:48:6d:68:3b:a8:9a:b1:13:71:1e:cf:
c5:2e:1a:5d:71:4a:9e:4a:09:5d:8a:3c:b0:19:27:13:82:27:
03:7e:3c:4d:90:3b:16:29:12:7f:a7:d9:da:86:25:74:33:3f:
b4:16:f9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:48:31 2026 by rpki-client