Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
File: jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft (raw, json)
Hash identifier: FSheL2VidOMV78yxhJyEiX0XI2UD0RrYnebYCsaidao=
Subject key identifier: 17:D0:CD:C3:D7:C4:22:29:81:09:CC:E6:48:C9:5C:99:8C:95:0B:56
Authority key identifier: 8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
Certificate issuer: /CN=8cc44984c686f2018c48102a284ab5a80f52a646
Certificate serial: 019FA899A06C9CE0750D2039A4347B20A078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
Manifest number: 0127
Signing time: Tue 28 Jul 2026 12:01:08 +0000
Manifest this update: Tue 28 Jul 2026 12:01:08 +0000
Manifest next update: Wed 29 Jul 2026 12:01:08 +0000
Files and hashes: 1: ZH79cfZtvswrSRgEB8rNyMLIncU.roa (hash: GdJB3BYjUYCwb6ugCMPQc81N/mokOXiUDJJvBJrnEFI=)
2: ZRs42qGd3cKFMrGetaE_cEFCL58.roa (hash: QY1vvv3yXpUMazK4C60xrRvy7PbaO26yt177jKe+yzU=)
3: jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl (hash: BGHgB7bXTpVvdWC4CFnWNqYCJ20cbG5hkFCYj/ueXnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:a0:6c:9c:e0:75:0d:20:39:a4:34:7b:20:a0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc44984c686f2018c48102a284ab5a80f52a646
Validity
Not Before: Jul 28 12:01:08 2026 GMT
Not After : Jul 29 12:01:08 2026 GMT
Subject: CN=17d0cdc3d7c422298109cce648c95c998c950b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:55:14:48:f0:31:af:02:fc:4b:b0:bb:29:
11:8e:94:68:81:64:3b:86:fd:f2:c0:2a:a0:5a:e4:
18:ae:54:12:35:fe:19:8a:ae:9f:91:fd:18:4f:67:
d1:cd:87:a0:52:8a:c7:d3:cd:b0:9b:b5:31:44:2c:
1a:f0:4e:9d:a9:19:a2:fa:f1:51:6f:2d:f0:18:c2:
e1:ad:f2:28:aa:e3:6e:1e:97:2a:39:20:cc:ac:e0:
00:0f:15:3e:78:ab:74:d4:f6:0f:77:76:13:d1:fa:
fa:70:e7:fc:1a:09:3b:2e:9b:1b:04:33:18:ee:f5:
9f:47:9e:46:b6:d5:e1:94:06:57:9f:a6:09:96:df:
de:46:bb:4d:8e:0d:45:db:43:16:0e:1e:35:33:aa:
bc:e2:da:77:7c:08:e6:ca:9a:bf:00:dd:6c:43:ae:
3e:48:e0:e7:ad:e5:f4:dd:82:0f:52:dc:18:b1:65:
9d:b5:3e:cd:e2:55:43:b2:55:bc:d3:fe:ff:56:8c:
48:86:29:63:80:e8:e9:ef:2a:21:a3:fe:67:47:9f:
d2:55:92:05:1d:53:07:c3:3b:26:8a:ed:dd:3b:30:
00:ff:34:2c:33:9b:38:b7:e4:d0:be:a7:36:97:64:
d1:fe:40:42:0f:2d:9d:c4:7d:d6:e0:dc:ff:62:cf:
42:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D0:CD:C3:D7:C4:22:29:81:09:CC:E6:48:C9:5C:99:8C:95:0B:56
X509v3 Authority Key Identifier:
keyid:8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:26:fb:01:28:cc:55:76:17:19:2c:69:30:88:0a:7a:1a:43:
0f:d9:e5:c7:b9:b8:9c:fd:09:00:e8:3e:ef:fe:2a:1f:10:d7:
b3:58:ff:dc:e6:a6:4b:94:6e:58:f0:e4:5c:77:d9:ad:b4:39:
9c:da:92:71:27:3b:f6:2e:02:7f:a9:aa:c4:3c:cf:c4:09:64:
3a:9d:5f:ec:3d:1f:08:68:34:06:5a:fe:ba:de:50:8e:f4:df:
17:65:e4:c3:1a:13:6c:76:f7:95:3f:58:78:bd:f7:03:81:b6:
ca:b2:6c:5c:50:dc:e4:06:a3:86:c9:e1:14:c4:64:58:71:11:
3c:44:d1:02:75:fb:b5:5c:77:84:3b:e7:82:a9:96:04:b0:44:
fa:64:23:23:67:2f:32:ba:f6:e1:43:08:42:41:dc:8c:4a:55:
6a:bb:bc:33:49:74:10:7e:52:11:a9:dd:a1:87:d9:87:66:e1:
42:a0:f6:86:67:0b:d7:47:ef:f7:a2:bb:27:5b:92:0a:ff:42:
de:80:af:1b:5d:df:34:e6:b1:29:cc:44:6a:df:66:ce:0a:35:
a8:c2:cb:0f:b2:c3:a9:7a:41:c2:af:01:4a:04:e3:26:b6:64:
59:77:94:0a:8b:71:41:c9:1b:27:2e:d4:df:e6:68:6c:57:80:
57:cb:76:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:50:22 2026 by rpki-client