Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File: _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier: 8m6uLR9BknkduKZROu7tHQsDMLGDejoCDslyKKlQQuk=
Subject key identifier: 31:72:45:A6:AD:18:01:DD:1F:A6:FE:F2:38:1F:0A:98:35:FD:88:A5
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 019FA9E2B2B1084FD7675D2FB48E19655DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 18:00:34 +0000
Manifest this update: Tue 28 Jul 2026 18:00:34 +0000
Manifest next update: Wed 29 Jul 2026 18:00:34 +0000
Files and hashes: 1: 2WayiAZSX3nD6XaqZdV_RpH6q6U.roa (hash: 6fDuXbG6/psRUJ7t4OjebizyN35Nh2rrX/pfUxV0Hac=)
2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: dyBOjMip3U+QA/y4S64QOkA4+rR1DM2PdISVpPzuSf4=)
3: zHJpV3ZXxbaE4sj_xu9RNt3r4dE.roa (hash: S4FWvpehwaf+t86RAndAwSRdPD3fihRGtxygI5zpGMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:b2:b1:08:4f:d7:67:5d:2f:b4:8e:19:65:5d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Jul 28 18:00:34 2026 GMT
Not After : Jul 29 18:00:34 2026 GMT
Subject: CN=317245a6ad1801dd1fa6fef2381f0a9835fd88a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:bf:a2:20:d3:fc:66:af:e4:c0:7b:35:0e:b6:
f4:aa:ea:bd:4c:df:3f:fc:b2:0c:86:d9:40:04:25:
27:33:01:95:b9:a5:06:8e:58:a2:83:15:2c:17:b9:
53:09:ee:07:67:7a:4a:54:82:82:01:04:a6:85:2a:
26:9d:9e:3f:a5:7c:65:1a:b6:74:c7:b0:ae:f8:9e:
f5:8b:3a:22:79:51:82:94:c7:64:d7:da:6b:1d:a7:
7a:21:e9:af:47:7b:dc:0a:eb:5e:da:93:03:40:dc:
bf:0d:37:39:4a:c4:40:01:85:4e:9b:29:eb:80:ee:
94:44:d2:e6:26:4f:f3:b7:8f:30:fa:07:c8:5b:64:
a2:70:cc:21:b0:d2:8e:a3:f7:e3:bb:f0:aa:9b:02:
a5:c1:1e:19:e5:fe:e4:a4:9a:ac:85:e1:05:4f:6d:
40:f4:64:cb:3c:c9:14:5a:45:fb:16:54:07:ce:3c:
c8:1b:e9:a3:d3:ce:03:87:3d:15:c8:19:f3:fe:49:
c2:3e:b4:75:ea:fd:53:90:16:a4:ea:73:a9:b2:2b:
9f:64:46:22:b9:e3:66:dc:86:b0:26:17:c5:b7:cb:
ec:15:1c:29:ec:b0:02:84:22:47:92:a1:ef:88:c1:
94:cc:ac:3d:a2:95:4b:44:8e:e2:7b:43:e9:71:fc:
d6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:72:45:A6:AD:18:01:DD:1F:A6:FE:F2:38:1F:0A:98:35:FD:88:A5
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b7:e4:2a:ea:b8:1f:cf:9c:31:fa:89:a8:25:f5:95:2e:5f:
5f:b4:65:74:c5:48:0c:f5:b6:1f:f5:74:34:10:c0:a1:38:11:
dd:d0:df:ec:e0:65:13:c0:cc:67:f8:e7:3e:85:88:6f:5e:dd:
27:54:5e:f8:a6:38:b5:d5:0f:a8:92:be:8a:89:9c:74:95:bc:
0d:c2:8f:bf:3b:3a:53:83:3f:04:69:bb:cf:38:b9:56:bc:97:
2a:03:d1:b7:d6:8f:8c:66:73:34:e2:de:77:c9:c1:cb:05:8c:
73:1e:bc:85:9d:53:b6:67:db:97:dc:6f:d4:cf:47:ae:dd:02:
79:78:c6:2c:60:4a:e6:5c:20:08:21:00:d0:93:ea:c6:a4:20:
77:30:42:4f:51:68:05:80:fe:57:73:ab:b3:e2:20:fa:66:24:
01:5d:9a:98:99:2d:25:fb:56:8b:f1:f3:67:0f:14:ba:2b:65:
d9:02:78:0d:d4:4c:23:5b:a3:e0:85:ff:18:ac:95:9e:de:6e:
93:95:c3:8d:29:0c:86:0f:17:49:2e:54:ca:3d:50:26:9e:5a:
95:a1:11:b7:87:a0:d6:d4:a7:b1:e8:36:2f:a2:8a:07:39:1f:
93:1e:74:c8:83:28:66:21:d5:39:d4:bc:86:02:9c:3b:91:ea:
33:ef:9f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:08 2026 by rpki-client