Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: ci7YLSHQU3iL/tff8XZDH6N0n69h3QMahopcODXGuDE=
Subject key identifier: B1:7E:E0:E0:F6:4E:A1:B6:4C:8C:EC:42:DF:20:81:2C:F0:32:26:43
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 019FAB2C9FB1E09699A55E75E763AE5E6CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 00:00:56 +0000
Manifest this update: Wed 29 Jul 2026 00:00:56 +0000
Manifest next update: Thu 30 Jul 2026 00:00:56 +0000
Files and hashes: 1: 2u4DW90i6pJn6TNxJSQdCJPO9PA.roa (hash: z+7kYSl922ZGHRd4ve+viSStXQUCmw3QVQ5Lgiw6cXk=)
2: 7YQffxRE0rSLQxPURshHecG_JTc.roa (hash: uQCBTYo2a3hrZABdDnP1fnClvfQjBgoT9LYi5KTntlk=)
3: AsS6Pm-pzCccfpBN7h6vWbKNH-0.roa (hash: QSEqtIt5+vLOlNNT3jvuTFm3bvcUsPaUnJycOPB71zs=)
4: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: or+x2DhGI+s0A697SvyCrYTTBgI/xxdXpFkeoKlqcnU=)
5: tgt22Xbh2dYkc5Tjjf4Gx-Xa2eY.roa (hash: XvxWV+DKU6Gtey3JNABlz2pi2cGrZK+aZ7VTSpuGXSw=)
6: vM268rav9B38xfaLn_yfc-f5loY.roa (hash: L3My8FF3Oma4omxz1SHFdJJ/WgvkO4FPZLAe6cqle1I=)
7: wsHpLkBYw1EeftdDR6sp04VigBw.roa (hash: /kY3oNdD/MtjNpfjYxiTgX3Hn7hLZLYXv3Sx0dMMAnA=)
8: zOqpyrA-mf4nkA9uzKu6WERUh9M.roa (hash: YZ3w9TWP7euxVmL2Kl9d48zmDrmJVrnCAiOTTTRIhhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:9f:b1:e0:96:99:a5:5e:75:e7:63:ae:5e:6c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Jul 29 00:00:56 2026 GMT
Not After : Jul 30 00:00:56 2026 GMT
Subject: CN=b17ee0e0f64ea1b64c8cec42df20812cf0322643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:f1:cc:a4:3f:cb:22:f0:f3:3e:d4:7f:f3:
79:cc:ab:9f:96:f9:e0:f2:19:7c:a5:6e:81:0a:35:
08:53:30:28:08:40:8a:e3:70:ed:09:5c:9c:fe:45:
85:56:85:d2:a1:02:b3:f5:ac:85:f1:80:c5:84:3b:
70:80:ec:8c:08:7d:87:97:08:df:15:70:f8:7e:fb:
bf:b3:cc:e9:f5:46:8d:15:5b:53:9f:d1:8c:81:07:
d6:98:6e:04:f5:35:da:0b:c3:23:9d:c1:3a:08:93:
5b:66:12:f0:3c:8b:61:fc:ac:63:d4:f5:29:e7:a0:
ca:7e:45:03:63:64:27:30:4a:d1:22:d9:da:41:fd:
3a:ff:d7:fc:d7:4e:9c:fb:ab:a1:bb:ef:0e:ca:5f:
d3:5a:d3:02:cc:98:5a:63:a6:8c:30:47:f8:f2:88:
85:d2:59:41:05:8e:9f:fe:f5:20:9a:83:c5:34:d4:
6d:cb:ea:56:b5:d9:4d:df:d5:b1:55:1b:67:83:6d:
3a:7f:af:a2:c9:0e:4e:c3:bd:ff:f2:19:8b:b8:25:
b5:67:d3:d9:a3:cd:75:9d:a0:f6:78:2a:85:7d:7f:
60:5d:a5:a2:95:a0:df:3d:86:4e:3d:d9:b0:08:06:
e7:52:06:ac:37:82:c1:e8:d7:1a:a2:f3:28:7a:9e:
50:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7E:E0:E0:F6:4E:A1:B6:4C:8C:EC:42:DF:20:81:2C:F0:32:26:43
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cf:92:8e:c6:c4:ce:d3:43:82:1b:65:be:64:42:64:55:11:
af:d6:a5:1e:8d:ed:f1:44:19:e7:12:01:cb:dc:4c:57:02:aa:
62:72:c0:02:0f:26:e6:e1:8f:4e:8a:2f:54:b7:e9:2c:fd:fd:
43:3d:be:81:ce:13:2d:3b:cf:c0:bd:4c:66:41:1a:fa:e3:fc:
c1:37:57:1f:c7:27:27:80:d2:4e:20:3f:cf:b1:cb:cc:71:ea:
9b:d2:80:15:de:7f:26:69:21:b7:5d:4c:c7:be:4c:5d:de:32:
a1:0e:99:62:bb:36:c3:b6:44:72:c6:2f:bc:d8:0e:38:2b:ad:
49:06:9f:a9:f7:60:53:7d:a4:fe:6d:16:ca:89:ff:18:fe:4e:
53:39:c2:31:db:5b:91:30:5c:05:54:eb:45:8a:01:7d:6c:20:
5e:5c:b9:ab:51:8b:6a:9c:64:0f:40:52:44:eb:78:3c:34:17:
28:01:47:19:07:f9:5a:94:dd:75:5d:11:64:1c:59:05:7e:42:
ab:b9:43:d9:4b:36:95:5e:86:c5:02:2a:34:ce:ec:cb:1f:ef:
f1:bb:65:01:a6:43:0c:72:15:6d:29:ec:6a:89:e2:79:1e:14:
d3:fc:b2:39:c6:2a:a0:6f:20:c6:92:ad:47:55:95:30:22:25:
58:52:1d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:00:52 2026 by rpki-client