
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft
File: j7lyrwthAUecHUYZkSh4p6ylX5s.mft (raw, json)
Hash identifier: e4Uo8DYgYIvIPx1JlCKBykfH545XKxLepnCppw20nHg=
Subject key identifier: B8:74:86:FC:1A:08:3E:F9:06:99:18:D3:AD:57:4B:0B:CD:42:87:12
Authority key identifier: 8F:B9:72:AF:0B:61:01:47:9C:1D:46:19:91:28:78:A7:AC:A5:5F:9B
Certificate issuer: /CN=8fb972af0b6101479c1d4619912878a7aca55f9b
Certificate serial: 019FAA884EBD65846CD7741955459C7502D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7lyrwthAUecHUYZkSh4p6ylX5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:27 +0000
Manifest this update: Tue 28 Jul 2026 21:01:27 +0000
Manifest next update: Wed 29 Jul 2026 21:01:27 +0000
Files and hashes: 1: j7lyrwthAUecHUYZkSh4p6ylX5s.crl (hash: EvDz5oqoUpr+2OoWn6M+w6uPsFs1rmVauHk3ep/WjHk=)
2: kxoI3tnE9aYoA4v-ZLKv8i_BQx4.roa (hash: l4BQilcKqCp6clXu8XgqddZ6lxjo67lqHjYTl9GbYZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7lyrwthAUecHUYZkSh4p6ylX5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:4e:bd:65:84:6c:d7:74:19:55:45:9c:75:02:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb972af0b6101479c1d4619912878a7aca55f9b
Validity
Not Before: Jul 28 21:01:27 2026 GMT
Not After : Jul 29 21:01:27 2026 GMT
Subject: CN=b87486fc1a083ef9069918d3ad574b0bcd428712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:28:66:e7:e7:0e:fe:25:59:94:f6:94:24:
d2:31:82:cd:47:a9:e6:10:3c:67:6d:e0:7a:f9:b7:
1f:04:91:a6:9e:cb:35:bc:3c:3e:44:3e:b9:4c:c9:
e2:dc:94:97:3b:a7:04:f4:4d:e9:53:f3:58:d4:8c:
bf:67:91:cd:bd:a5:2c:6d:ea:29:37:b5:d5:bb:ce:
34:da:81:13:06:2c:80:65:95:9b:7a:d9:5f:9c:12:
9f:95:1d:6b:1b:90:3f:b8:07:73:e5:e0:89:48:f9:
5f:95:0c:56:9e:09:b5:07:ec:ea:d9:90:60:7b:64:
03:44:87:0c:1e:0a:48:3b:e5:cf:cd:c1:72:a6:d3:
86:5d:14:1d:30:17:0b:ee:9b:56:e6:4e:67:11:d7:
15:9c:4e:9d:7e:cb:c8:e2:92:27:aa:68:c7:9f:58:
6b:fd:54:e1:34:41:77:8c:03:02:6d:0a:54:0d:3b:
6a:48:f0:68:71:a2:d8:11:de:b6:ff:03:c7:de:67:
e4:56:6e:4d:16:4b:48:a8:40:a7:a4:e0:6a:c0:f2:
8c:32:f1:2a:59:c3:03:8f:86:41:15:98:53:1f:e2:
29:c4:cf:1c:78:1a:cb:29:db:68:1f:45:ea:8e:7c:
9e:cb:e9:c4:be:17:b9:90:bf:2c:af:5d:4f:21:06:
b0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:74:86:FC:1A:08:3E:F9:06:99:18:D3:AD:57:4B:0B:CD:42:87:12
X509v3 Authority Key Identifier:
keyid:8F:B9:72:AF:0B:61:01:47:9C:1D:46:19:91:28:78:A7:AC:A5:5F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7lyrwthAUecHUYZkSh4p6ylX5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:74:5d:b1:49:09:2f:79:e2:da:45:01:4e:67:46:88:d9:ce:
8b:40:a8:83:fc:48:97:22:af:c6:c2:0a:22:a4:e7:7a:2b:2b:
7e:95:58:28:7e:20:97:a2:48:31:2a:a9:18:c5:02:d4:88:27:
2d:e9:69:0e:e8:c7:19:21:de:d1:8c:d7:b6:f8:d3:58:43:3a:
17:61:05:73:74:d1:65:cc:a5:5c:82:1a:8b:24:90:93:89:f7:
cc:5e:e1:e0:88:55:51:ca:3b:15:0d:53:0c:fe:20:8c:f1:36:
cf:52:10:52:e2:fd:80:24:4f:f0:39:c8:cf:50:19:38:10:91:
86:30:6d:9b:01:a6:b5:7a:ad:62:80:85:35:95:52:b3:97:70:
7f:a0:d1:d5:af:43:35:a8:e6:d8:54:8c:c8:e8:3e:8e:a6:6a:
25:dd:1a:a3:d9:f6:5e:f4:49:ba:df:4b:bc:9d:68:35:0b:f4:
d1:43:89:d9:9a:f9:a3:b9:ad:92:85:b8:6e:74:0a:3f:19:5b:
2b:26:d3:77:d7:f3:a8:53:a4:d9:74:0a:41:35:3e:b5:bf:e5:
c1:b2:3e:14:a7:4c:8a:f3:ff:94:cb:91:55:b1:f1:33:a7:2c:
02:e5:8e:a4:f1:33:85:1a:bc:7a:26:ae:e2:d3:04:b5:14:92:
32:2c:02:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:08:08 2026 by rpki-client