Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: 1Iuuyx7Widij5zl77Y2Ljbx5/A3hMdtDXL9+NEHyIvI=
Subject key identifier: 21:58:31:CE:94:0F:6C:3A:2F:BF:4A:F0:9C:C2:ED:53:2B:BB:7A:A7
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 019FAAF52E50DE8E059E95434E20CF680422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 1834
Signing time: Tue 28 Jul 2026 23:00:22 +0000
Manifest this update: Tue 28 Jul 2026 23:00:22 +0000
Manifest next update: Wed 29 Jul 2026 23:00:22 +0000
Files and hashes: 1: 8pRpGLC7ufdVgfYDDUF6Zet2ESs.roa (hash: N6b81cttyVRNjS1aPTuek9kLwNALHCKPqaI95N5VpXM=)
2: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: AzHuNPx+8MbyJIlHezprYE5RxT+3486S3F7lmBZNBKc=)
3: iLJXM2riD2xLyWPgVHhFPJznv3A.roa (hash: htQVMbTQl+9gmW8aaJPtyq2ErZGw3e/ACgLnMofyCY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:2e:50:de:8e:05:9e:95:43:4e:20:cf:68:04:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Jul 28 23:00:22 2026 GMT
Not After : Jul 29 23:00:22 2026 GMT
Subject: CN=215831ce940f6c3a2fbf4af09cc2ed532bbb7aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:91:fa:47:66:11:35:40:66:ac:1a:7c:1e:
69:53:60:f3:39:45:cf:d5:1a:87:04:e8:05:68:aa:
e8:0c:7f:7b:cd:c2:4a:ae:eb:3d:d1:50:53:b9:0e:
26:af:06:f3:e9:99:a5:39:a9:e3:59:97:66:09:a7:
f9:32:62:13:9e:92:b7:cb:c4:f5:57:0d:90:28:98:
1b:b1:76:89:e1:3a:77:74:f2:68:60:54:b4:5d:8f:
aa:0b:d3:31:b4:0d:fe:24:ed:32:0d:1b:1d:49:b5:
b8:f5:be:56:2d:7a:3e:55:69:eb:b5:5a:86:15:58:
4f:09:a8:d9:5b:6f:be:88:7b:bd:19:c2:83:15:05:
d5:98:a6:7f:bb:f6:0b:f1:ca:89:dc:2c:db:c7:b8:
05:bd:4a:53:2a:58:2a:88:7b:6c:14:e7:2d:b8:63:
4c:83:a1:82:27:60:70:b8:9a:f5:d3:5d:d6:e6:9e:
e6:12:74:a0:85:ff:91:f5:fd:23:74:08:08:20:be:
e0:4b:87:da:10:3c:91:38:d0:ee:d7:67:be:7f:ed:
e1:7c:44:bd:9c:39:f2:be:86:d6:0a:13:7e:6f:d2:
51:88:2b:f2:c6:5a:2b:55:e8:24:74:39:67:10:fe:
2b:ee:de:99:5b:f9:2d:8c:9f:81:d7:a2:83:51:d6:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:58:31:CE:94:0F:6C:3A:2F:BF:4A:F0:9C:C2:ED:53:2B:BB:7A:A7
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:17:92:86:46:0c:54:6a:a9:30:e8:88:69:ff:96:be:4c:bc:
08:9f:43:de:cc:e5:c0:8d:49:dd:36:c8:1c:2e:ff:8b:9e:6e:
85:9b:03:3f:51:9f:06:ca:5d:f9:67:e7:44:74:31:b6:d0:74:
31:d6:94:4c:f9:3e:4c:4b:6d:1d:ef:47:e2:c5:ae:df:fd:ee:
aa:01:a2:51:71:4e:f9:1e:97:ee:71:d9:b9:a9:dd:49:11:d7:
9d:15:a3:a9:f5:5c:da:59:29:c3:dc:97:e3:82:8b:1b:29:1c:
38:e0:0b:84:2c:6c:0b:b1:85:8c:26:6c:ad:f9:f6:a3:31:94:
4d:f0:66:ca:e9:a2:e2:86:31:3a:23:f2:e0:0c:4f:9e:a6:f2:
18:78:11:a2:ce:de:f9:1f:7b:2e:22:c5:d7:49:0a:bc:88:57:
6b:d8:ca:6d:0b:8b:5b:35:15:70:0b:c7:7a:55:56:9b:32:a3:
05:c3:d5:ed:6f:13:b2:28:88:b7:e4:46:00:85:b1:a0:d4:32:
f0:0a:90:4f:36:dc:9f:8b:e4:7a:b9:06:00:d3:e9:62:f0:f3:
e7:49:01:c5:6b:5e:c7:9c:c7:0b:8f:b6:08:08:2d:33:86:7a:
19:ee:ca:bf:9a:bc:23:c2:af:ef:c6:47:3a:d8:94:14:27:95:
f6:cd:13:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:30:05 2026 by rpki-client