Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: AuvHYk1XTeZg8qWG5+rkgr48hhm9Pw3r4nffkTwdb1Q=
Subject key identifier: C2:53:6B:B3:00:25:1E:55:CD:D3:D6:41:10:ED:6C:68:5F:F1:9B:DD
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 019FAB2C50A0E98310DE6DC28921B0C237A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 00:00:35 +0000
Manifest this update: Wed 29 Jul 2026 00:00:35 +0000
Manifest next update: Thu 30 Jul 2026 00:00:35 +0000
Files and hashes: 1: RtAzEtFofwFDRI1uklV1iXMa1wg.roa (hash: cRkKQUmXVsmTzq50TJwx3uR/gXhJ/74yYnMnrtZIm+M=)
2: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: uz6zbUVM27din+rryJOtay/RP1oPt+XeGq0Y7mJOlNA=)
3: zVGoD_0Y0DHDLcKfmGJhAnYlgkE.roa (hash: 5YNYXEQ+H71UmBiAtmwj2k1bmJWUMWVXm7siQv17RzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:50:a0:e9:83:10:de:6d:c2:89:21:b0:c2:37:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Jul 29 00:00:35 2026 GMT
Not After : Jul 30 00:00:35 2026 GMT
Subject: CN=c2536bb300251e55cdd3d64110ed6c685ff19bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:b2:43:13:cd:5d:e8:28:83:8e:e0:2a:9f:
33:e4:1d:b3:8f:7e:eb:a1:04:a8:9d:89:82:f3:43:
ee:e6:c4:4a:93:a6:ac:7f:60:11:c9:4e:f1:5a:62:
e1:2c:69:93:b4:00:b4:9f:46:b2:81:f8:87:18:31:
c3:85:17:f3:92:8b:dc:38:09:f3:e4:b6:b1:2e:ff:
03:96:21:27:8f:6e:cb:fd:20:88:ac:7f:94:69:84:
1e:59:d9:96:5c:7a:75:25:ab:79:55:52:35:d5:4b:
3e:b6:a4:46:ee:2c:47:d5:64:6a:55:77:56:b0:04:
43:ec:15:72:bb:11:32:63:b2:b5:80:a7:57:51:c0:
a1:40:e4:03:4b:12:4b:02:b5:06:d9:d8:fa:5b:82:
0f:05:01:3a:fb:95:d3:d6:9c:ac:20:0c:4c:cf:c0:
d7:6f:85:4f:ab:48:55:98:71:3f:08:cd:29:a0:7f:
8e:8a:79:2c:9a:8f:95:85:f8:bb:e6:9c:1c:5f:c7:
81:c4:78:5a:c8:96:cc:a3:bd:14:35:c7:9d:fe:f8:
26:98:03:d8:7a:bc:53:33:6f:bb:80:46:3b:46:19:
51:f7:ac:c2:7b:84:2b:07:a7:38:dd:51:12:87:36:
5e:38:a3:b7:12:46:00:81:26:3f:73:cd:55:ec:8f:
70:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:53:6B:B3:00:25:1E:55:CD:D3:D6:41:10:ED:6C:68:5F:F1:9B:DD
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b5:14:6e:d6:52:a2:26:29:af:c1:eb:d1:fe:be:70:c0:64:
94:77:79:9f:2b:36:5b:0f:9b:2a:e7:7e:36:97:38:42:31:e5:
4c:7b:17:ef:2a:bf:bc:4d:22:fe:3d:6a:c9:25:7a:ba:66:74:
e4:ac:5a:18:5f:d9:da:5a:24:6e:88:ae:4f:86:1e:de:50:2a:
e5:ba:1f:57:de:24:c3:05:22:0e:f6:c1:aa:07:69:7d:e7:c2:
9e:47:b0:5a:92:b0:8e:78:9f:b9:cf:e1:6a:7d:6b:e1:6f:a4:
07:47:ee:53:78:77:99:7e:0f:5e:3d:00:0b:ad:70:c7:8a:9f:
e3:ef:ca:83:d3:8e:d9:c3:7a:4e:8b:9c:ba:81:18:7f:ee:6f:
60:08:c6:ef:7b:4f:0f:50:d8:4f:ce:9d:36:58:56:7b:6a:1f:
68:e5:bd:66:e2:65:08:f9:1b:7e:03:ee:80:b9:81:c1:f3:db:
db:ea:54:5b:4a:61:9d:32:36:ab:c3:4d:4d:76:9a:35:3a:e9:
1b:53:23:c7:eb:66:7a:40:2f:ca:66:83:eb:4a:32:cc:7a:81:
c2:47:9c:bc:c2:eb:8f:b2:be:0c:0c:53:a2:11:eb:2b:00:39:
42:c0:94:85:09:ba:dc:c5:2d:5c:e3:2a:db:2f:e6:72:88:71:
4a:6a:8b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:21:20 2026 by rpki-client