Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
File: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft (raw, json)
Hash identifier: NIu9wc22KFF11fKoS3qGhA1KZ4xULiSycnNHdYwYdkU=
Subject key identifier: 11:64:06:FE:DB:AD:92:48:36:DB:6A:11:1A:F1:B2:80:4F:54:66:69
Authority key identifier: 24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
Certificate issuer: /CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Certificate serial: 019FAB2CAD46DFBE731A0220F163B042F33E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
Manifest number: 07D3
Signing time: Wed 29 Jul 2026 00:00:59 +0000
Manifest this update: Wed 29 Jul 2026 00:00:59 +0000
Manifest next update: Thu 30 Jul 2026 00:00:59 +0000
Files and hashes: 1: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl (hash: CHICFQZ/9Yealy360bSSz85DdBBUo9dXmdevPpwStgQ=)
2: of5fvbBOl_2ZOya6SQ0xsXlOVng.roa (hash: FlPfu4dwMoPwrHiBDoZEfb7scYNLSD/+Wl4U6dL0V+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:ad:46:df:be:73:1a:02:20:f1:63:b0:42:f3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Validity
Not Before: Jul 29 00:00:59 2026 GMT
Not After : Jul 30 00:00:59 2026 GMT
Subject: CN=116406fedbad924836db6a111af1b2804f546669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e2:94:27:53:03:7f:87:dc:15:11:78:77:d5:
f6:73:26:fc:f0:7d:12:fd:10:f0:e3:99:b2:de:b4:
5e:e5:93:66:36:0a:da:75:24:24:4f:b1:e4:8a:dc:
f8:60:7f:cb:2b:3c:a3:41:6c:20:19:be:5a:e5:1d:
7c:97:f5:0a:98:71:ca:ed:f8:74:76:a2:b9:fc:12:
24:df:d2:0a:e4:aa:ee:3d:40:b1:fe:7d:91:41:e3:
29:ae:8a:e0:7c:45:6d:ae:5f:7a:fc:4f:8e:e5:16:
74:ee:ee:9e:7c:bd:b2:9c:eb:e1:f4:72:6a:b5:b4:
a2:13:fd:56:f1:01:7a:80:b5:af:52:2e:91:e9:3d:
cd:2f:16:73:82:82:c5:ea:0b:f5:30:21:a4:25:2a:
c5:ae:90:49:48:a5:a9:e9:18:4b:4f:2a:7d:8b:5d:
0a:a2:65:87:a4:7a:e1:02:d6:87:8a:3f:67:c9:c9:
2b:91:60:ff:30:62:ae:10:15:da:56:37:0f:41:9a:
ca:91:7b:ab:c5:48:76:31:15:da:7e:22:24:d2:ff:
2a:ad:40:3c:c4:a3:80:a6:5d:95:29:d1:16:3c:ac:
0f:b0:a7:a8:94:a6:15:61:77:d2:51:cd:fd:96:c6:
9f:9d:8d:d7:27:75:0a:e6:7b:6e:63:8e:29:9a:bd:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:64:06:FE:DB:AD:92:48:36:DB:6A:11:1A:F1:B2:80:4F:54:66:69
X509v3 Authority Key Identifier:
keyid:24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:81:4a:ad:41:3f:cc:c7:7e:f3:41:05:2a:a7:cf:79:1f:5c:
21:53:51:9d:6b:98:ae:a8:9d:d2:73:70:93:55:85:8e:52:a9:
03:ea:a7:fa:44:e6:e2:16:29:ef:ea:db:18:2c:e7:c3:b1:e7:
a0:df:69:c7:93:f5:31:a0:76:c3:41:0f:5e:c1:bc:3e:c4:38:
d8:c1:72:d2:74:fe:23:d6:33:ba:a3:c3:95:75:78:86:c7:28:
e0:f6:37:a6:9b:6f:b5:21:83:95:3c:46:82:fa:fe:1f:71:b0:
db:0f:08:01:30:38:10:fb:52:c5:c0:cd:58:55:44:9b:02:51:
b9:35:33:17:4c:2a:e9:69:fa:25:0a:ae:5c:14:f0:15:83:21:
08:f8:5b:89:fb:53:6a:16:57:ad:5b:c8:ed:59:e8:f8:32:c1:
a1:ff:99:5c:3b:97:02:1d:af:ef:f5:13:e1:40:45:55:5a:09:
69:1d:9d:45:69:14:b2:03:bd:cf:47:0f:f5:c9:3b:c7:2d:5d:
7e:08:18:2a:3f:5d:6a:64:a7:6b:56:e3:c1:cc:f7:96:c9:12:
6e:29:06:88:f4:fd:c5:a9:ea:77:e6:76:98:5a:ab:db:e4:a5:
4f:31:35:ec:db:7d:af:82:1b:c9:97:a1:f8:65:bf:7a:bc:d7:
b9:e0:e3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:40:28 2026 by rpki-client