Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
File: JWvhdrMT4aigUPZwr1dncbZV1hE.mft (raw, json)
Hash identifier: D0Gv2KfG+AqFG/+SObK9uvgt5tHGtckcErKrXJFKZ8I=
Subject key identifier: BB:58:48:0A:C0:B6:D4:88:9E:77:07:08:44:3E:E3:91:F0:77:2A:E6
Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
Certificate issuer: /CN=256be176b313e1a8a050f670af576771b655d611
Certificate serial: 019FA898FD061EB264AB06B8AF75E5DD79A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 12:00:26 +0000
Manifest this update: Tue 28 Jul 2026 12:00:26 +0000
Manifest next update: Wed 29 Jul 2026 12:00:26 +0000
Files and hashes: 1: JWvhdrMT4aigUPZwr1dncbZV1hE.crl (hash: lj3zHMfu7qC+8YYXC8+CuSWkEZKnv1BWNZxU36wRwvQ=)
2: p2IMZfuSyzWUQCvrAkoFeLo46oo.roa (hash: hxar/HLUHEBtlzcjTx3TaCuWIzPYRzZYjjh5egyYeWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:fd:06:1e:b2:64:ab:06:b8:af:75:e5:dd:79:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256be176b313e1a8a050f670af576771b655d611
Validity
Not Before: Jul 28 12:00:26 2026 GMT
Not After : Jul 29 12:00:26 2026 GMT
Subject: CN=bb58480ac0b6d4889e770708443ee391f0772ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:0b:b7:d7:fd:1c:fa:e0:ef:e4:cb:6c:52:
18:87:5b:35:40:a8:60:ec:3f:28:4d:cd:81:ac:b9:
5a:1c:54:ef:54:11:d4:fd:8f:01:ac:3f:e6:c9:78:
ef:d3:3d:0e:a9:7b:68:07:7d:99:e0:74:f9:ca:57:
49:c1:17:a7:74:10:ca:d3:df:85:1d:65:4b:d0:5f:
8f:3a:ab:19:c1:ec:62:07:e2:28:f3:ee:02:03:09:
9f:7a:85:ea:82:7d:93:2e:4c:82:e5:23:94:8e:b7:
dd:a6:e5:86:05:80:8d:fd:de:98:8b:73:6e:43:29:
f5:e7:66:bb:98:53:e4:3a:a8:f6:53:ca:e0:3f:ea:
63:e0:ce:11:c6:38:9e:90:35:48:27:64:27:0d:8f:
0a:83:ef:1f:44:9f:d7:85:f5:1a:23:e8:c9:4d:af:
df:f6:e5:89:5a:bb:de:5b:f4:2d:e5:9e:f2:9d:67:
a6:a7:41:bf:ae:88:f3:4b:5d:68:e5:e1:d2:fd:af:
09:a9:19:87:1f:95:27:b0:4d:b9:6d:58:92:40:f0:
c9:cf:f5:68:f3:94:48:cc:bd:d3:d9:95:87:90:d1:
42:55:95:10:c3:96:b7:b9:60:d8:ee:c5:03:61:a3:
87:95:b4:79:a2:2c:95:7f:f2:66:ea:aa:a7:77:c3:
07:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:58:48:0A:C0:B6:D4:88:9E:77:07:08:44:3E:E3:91:F0:77:2A:E6
X509v3 Authority Key Identifier:
keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7f:80:03:d5:ab:36:39:6c:23:4d:5f:18:60:64:a7:8f:30:
75:be:6f:b6:ce:fc:5c:4f:42:dd:ac:f8:11:b0:c9:ee:ff:64:
7e:75:36:94:70:82:c0:8a:8a:db:3e:42:95:df:96:4b:80:1b:
9b:c1:1b:bd:40:3e:3a:71:fb:10:de:b3:f5:85:97:be:ab:3e:
d5:36:26:77:69:a3:d3:b6:69:1f:25:c1:18:14:bf:9a:09:0b:
8e:a8:6d:7b:c9:4f:cc:eb:ff:9e:13:09:43:a0:19:39:3a:ea:
4a:c8:a5:84:67:8d:c7:df:07:24:26:48:c8:e6:a3:7d:44:33:
1e:d5:84:d9:39:c5:02:84:bf:2e:8b:ce:b2:df:b1:2e:b4:be:
90:9b:c9:81:21:8b:88:88:71:c4:9e:39:49:80:bb:c1:0d:3e:
71:5c:36:9a:44:46:17:05:72:d9:82:7a:03:af:8f:16:c0:7f:
88:21:78:19:14:50:00:6e:41:cb:1c:bc:01:31:cf:a5:e8:57:
45:e2:45:78:b7:7e:f8:c0:e4:5f:46:5f:d4:98:31:2c:1d:1b:
8e:9c:44:4e:10:f2:92:44:0e:bb:e4:1d:d0:40:32:60:26:7d:
f3:1f:63:a3:ba:96:98:0e:bb:70:30:6d:d9:35:30:8b:57:3a:
9d:89:9e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:53:51 2026 by rpki-client