Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
File: JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft (raw, json)
Hash identifier: fmlFhYftm2/z14va6arYDM9tv1NHMW1ak9OqnKsK6N0=
Subject key identifier: 80:6A:A9:CC:C4:C6:03:9E:D3:2A:C3:42:36:67:6B:53:CE:72:D1:3A
Authority key identifier: 25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
Certificate issuer: /CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Certificate serial: 019FA898FFA6D496D6EFC4E2BFF295BCBAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
Manifest number: 02D2
Signing time: Tue 28 Jul 2026 12:00:26 +0000
Manifest this update: Tue 28 Jul 2026 12:00:26 +0000
Manifest next update: Wed 29 Jul 2026 12:00:26 +0000
Files and hashes: 1: JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl (hash: RTYU4y/54bnFSL3/c/l2ZEd7h8O+jJZS1v5V1HhBGd0=)
2: qiGwCyjJBcCuLbWQRFWZUWX1S1g.roa (hash: LG2YMYVEJAHcK6oHUr/YjapfJDnWTxIId/aMA3zY+Vo=)
3: s6B-P6OcjXLqXPfTuRILd7z1Tz0.asa (hash: TNBDe2/jguKaH36raELbXGtaWwABRi8k+6PS1M0Kc5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:ff:a6:d4:96:d6:ef:c4:e2:bf:f2:95:bc:ba:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Validity
Not Before: Jul 28 12:00:26 2026 GMT
Not After : Jul 29 12:00:26 2026 GMT
Subject: CN=806aa9ccc4c6039ed32ac34236676b53ce72d13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:33:87:9d:e1:1b:79:bb:22:a2:63:b6:11:
dc:ed:59:6a:cd:b7:e3:95:9d:66:22:c5:65:a1:46:
0c:36:da:0d:f3:3c:ab:10:4a:e1:02:ac:03:81:77:
94:bd:38:5b:fb:56:01:d8:7b:b6:c2:ce:e3:6f:91:
88:29:7c:3f:ed:d0:67:9f:d5:ff:ad:02:03:22:a9:
e7:34:20:f9:63:44:42:12:00:7f:e5:8a:9c:db:7d:
4c:79:8c:ae:2c:97:18:85:06:93:1e:1e:34:91:a5:
62:fb:df:7f:ce:25:7b:73:9e:5a:c2:3e:9b:a8:fd:
cb:32:8e:8a:02:25:41:02:de:22:b1:f4:f1:ff:e8:
05:72:10:06:f5:74:30:6f:a7:66:d5:51:e5:e2:ea:
75:67:ef:20:65:3c:d7:86:14:da:37:77:ec:1a:af:
61:17:e3:d5:f1:4b:7d:db:3c:d2:20:22:4b:46:c5:
8b:54:8c:14:56:9c:1c:c8:db:8c:57:7a:f0:48:a8:
d3:79:58:da:81:45:cd:62:6c:6f:5b:c4:7e:77:ab:
7d:0b:28:13:52:44:5d:df:76:1c:17:ed:d2:aa:4b:
2c:88:af:cc:bd:09:0b:de:03:14:71:e2:da:a2:57:
4e:ed:8b:c5:d8:9b:07:b0:de:38:54:5d:89:f6:71:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6A:A9:CC:C4:C6:03:9E:D3:2A:C3:42:36:67:6B:53:CE:72:D1:3A
X509v3 Authority Key Identifier:
keyid:25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:86:78:63:e8:ff:96:ec:5d:9b:49:2f:fe:92:57:4c:f0:51:
f8:03:0c:33:75:dc:1c:5f:84:5e:1d:5e:fa:d9:0d:bd:cd:21:
4a:7f:c5:d2:33:c8:1f:f3:46:78:90:82:2e:f5:5b:55:76:e0:
30:a9:8d:1b:db:19:03:5f:17:0a:0f:02:05:7a:22:21:6d:c0:
dd:1b:47:3a:f5:96:16:b8:06:6a:47:a1:79:24:05:22:c7:b5:
65:33:e8:81:03:79:89:5c:1e:f9:38:49:95:aa:cc:1a:fa:b4:
02:69:19:18:9d:dc:9d:00:f0:5c:0a:a2:1a:86:06:3e:5f:53:
c1:4e:dd:15:da:c9:de:49:e4:da:c5:cc:aa:92:ef:e9:b2:31:
eb:6d:52:3e:b6:b1:1c:a4:d3:e4:6b:8a:5d:ac:d8:42:ce:9b:
4d:12:49:cb:01:5e:5d:72:e1:f9:9c:fb:ea:37:3a:46:96:1b:
4c:7d:01:7c:75:86:94:28:ef:b9:ed:a5:0e:32:be:fe:e7:fc:
89:16:14:da:d1:88:b5:66:61:e0:78:3a:62:35:a4:a5:36:88:
f1:15:b8:ad:90:ed:1b:54:a9:e9:4d:31:dc:bb:3e:70:a2:c7:
f9:85:c1:c8:81:79:c5:bd:23:47:04:81:01:ef:f6:d0:7e:df:
f4:29:d6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:51:45 2026 by rpki-client