Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
File: JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json)
Hash identifier: ChSF3iHblefJeWqzCUPPioKggz/fgFxz2vUQkQAGrxY=
Subject key identifier: 70:82:AC:B6:46:42:EA:26:84:D1:2F:A2:DF:07:9C:9E:93:DE:FB:2C
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial: 019FAD1AEF1DBA93D8878DE58949F5341C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
Manifest number: 16AC
Signing time: Wed 29 Jul 2026 09:00:51 +0000
Manifest this update: Wed 29 Jul 2026 09:00:51 +0000
Manifest next update: Thu 30 Jul 2026 09:00:51 +0000
Files and hashes: 1: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: HeNlwdWYVxyfDBthkgl6TAagefISKoWT233QOSLdAlk=)
2: M2jHykXP5tshdup3cmW0BBbfpFc.roa (hash: GerABurddckbNTOvcsAmSJXKIfhdD87hJkB99cOoWFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:ef:1d:ba:93:d8:87:8d:e5:89:49:f5:34:1c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
Validity
Not Before: Jul 29 09:00:51 2026 GMT
Not After : Jul 30 09:00:51 2026 GMT
Subject: CN=7082acb64642ea2684d12fa2df079c9e93defb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:80:37:09:d0:e3:14:de:34:07:bd:73:b8:24:
e5:84:10:eb:60:aa:a0:af:49:1c:15:f9:9c:89:c8:
dd:de:bd:44:fc:3e:ec:ea:c4:8b:84:5b:14:a4:e5:
62:9b:64:1c:c5:97:63:81:06:77:0d:e3:1a:28:64:
f5:03:4c:ba:a1:6e:e9:9d:98:60:3e:b8:55:a9:4c:
0a:7c:4f:c0:dc:04:2e:b4:c7:f9:ec:0a:05:cf:e2:
1e:ef:19:23:ff:94:f6:b3:64:ff:bb:f2:64:1a:84:
59:d0:0c:e7:e0:51:c0:58:b7:24:e8:e6:b9:93:49:
3c:42:47:c2:9a:b1:f9:4d:8d:7d:12:05:57:44:db:
b3:a4:1a:7f:30:7c:8a:11:98:b4:6a:52:a1:ad:2d:
8c:be:ca:18:3e:d1:3d:c5:b9:7b:09:2d:9b:fa:cb:
cd:54:e6:b8:5b:9f:81:65:ed:6c:f1:a7:07:a9:08:
5e:a7:e4:88:8e:f0:42:50:2e:8c:b5:9a:73:1f:e8:
8e:c2:24:95:02:67:e1:3b:83:8a:91:fa:d4:70:59:
af:35:7d:35:f6:53:48:75:30:df:0e:37:3c:01:ae:
81:22:8d:4b:db:9a:14:ee:de:eb:b9:11:3e:d8:d6:
79:09:6c:53:f0:65:62:9b:dc:5b:e3:8f:56:37:e3:
49:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:82:AC:B6:46:42:EA:26:84:D1:2F:A2:DF:07:9C:9E:93:DE:FB:2C
X509v3 Authority Key Identifier:
keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:97:98:1d:d5:73:f8:53:17:83:4d:45:9c:4a:ac:19:96:46:
6d:6d:0f:8f:a8:7c:24:88:dd:76:ef:6a:00:fb:1d:cf:20:9f:
66:be:05:5d:5a:de:89:e6:91:20:69:99:89:7e:17:91:21:6f:
e0:d7:77:9f:a0:03:df:fc:40:c0:e4:00:00:84:eb:1e:8e:41:
21:75:8e:a4:c7:4b:d3:64:94:22:73:82:09:a5:4e:07:5f:14:
20:b8:57:22:64:df:10:e3:d0:d9:10:2c:70:95:d4:ae:40:f4:
f2:ce:0b:c4:51:38:c5:70:9a:a4:a0:07:ea:59:b9:77:f7:4e:
3a:77:2f:dc:aa:62:ca:e4:ef:43:b7:27:80:6c:ba:b7:ba:e9:
6d:c8:d6:c2:15:7d:99:b8:a5:88:28:a7:b6:85:12:f6:cc:f2:
8e:7c:49:43:66:02:91:c4:44:f8:f2:23:b8:16:2e:98:df:4f:
0b:1e:84:55:19:86:e0:e1:10:32:b2:8f:36:b8:f0:8a:0c:0c:
b7:b6:97:3d:dd:74:53:22:1b:db:d6:3f:2b:ea:ad:92:e3:46:
2a:da:9f:7c:34:ef:70:cf:45:bb:e6:b3:00:e5:6f:31:9d:75:
46:1e:b9:05:8a:a2:6a:99:01:18:1a:95:69:a6:80:43:fd:c4:
d1:8b:11:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:13 2026 by rpki-client