Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
File: Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json)
Hash identifier: Y2mNPqGyS3B1aIrYNHYauDjarYX8qjvcEUcE76B+2ak=
Subject key identifier: B4:15:68:24:E3:B4:48:07:C2:45:FA:A0:4C:BB:BB:35:4A:C7:46:7F
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial: 019FAB9A3AD3C45B52909C3C926BF3F428C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 02:00:39 +0000
Manifest this update: Wed 29 Jul 2026 02:00:39 +0000
Manifest next update: Thu 30 Jul 2026 02:00:39 +0000
Files and hashes: 1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: ZgTWhPM5Y0niMOwfetqr7b7o1IkuWthq59u7FQulB9s=)
2: e-pIqroMx8ktOvBXKbMUSY489PA.roa (hash: zD2XKbyMKOBSm6Gik/HGW9BbJtz+ToLcLdq/4K8Rj18=)
3: tg82jIBHH5LcgWYYM7zJbYrlVt0.roa (hash: n6rCSA1xOIDb4YmG15TQjoYexybekFDUsJodZaNLnM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:3a:d3:c4:5b:52:90:9c:3c:92:6b:f3:f4:28:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Validity
Not Before: Jul 29 02:00:39 2026 GMT
Not After : Jul 30 02:00:39 2026 GMT
Subject: CN=b4156824e3b44807c245faa04cbbbb354ac7467f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d4:76:e8:4d:d8:79:59:d6:6c:89:8a:e1:0b:
6f:2a:88:5c:f8:97:9f:fa:c5:a9:23:4e:b4:cd:bb:
28:2a:93:ff:b6:a1:f6:79:27:98:fb:ae:21:c8:78:
d5:2d:16:39:d8:69:33:54:89:d7:f1:96:ef:01:bf:
d5:17:18:c0:8b:24:59:78:85:b8:12:22:37:96:ca:
0f:44:e4:63:ee:8e:ec:35:ed:5f:d3:ee:63:ab:38:
21:6f:03:54:03:05:e7:cb:f2:01:fe:fd:c5:a8:06:
40:04:c9:98:d4:bb:62:d2:48:04:8a:d2:6c:e5:30:
bb:b2:31:41:38:26:3e:64:f3:eb:57:38:07:6d:e2:
60:b8:0a:a6:ac:19:7e:f0:07:5e:e4:a7:68:51:af:
ea:ea:b3:00:1e:c2:f8:4a:6a:aa:e9:69:19:70:a5:
f6:8f:0c:60:d7:fd:28:fd:07:80:57:ba:c8:fb:2a:
a8:99:b4:9e:00:07:8a:94:5c:35:74:aa:43:a9:17:
ef:48:73:31:c8:57:cd:f6:99:cf:1b:e7:24:e6:7d:
82:9a:9c:76:62:27:98:59:3d:e3:46:28:72:92:4d:
f8:78:e0:9a:49:ca:bb:32:0a:51:83:ef:76:50:21:
5b:55:a5:b9:b4:47:6b:7a:cb:b8:d2:64:4c:b3:45:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:15:68:24:E3:B4:48:07:C2:45:FA:A0:4C:BB:BB:35:4A:C7:46:7F
X509v3 Authority Key Identifier:
keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:16:d1:98:89:cf:af:95:7e:23:ec:61:8a:d3:2e:2c:05:59:
20:8b:18:28:6c:10:20:dc:7d:b9:84:a3:94:1b:50:fa:79:9d:
85:de:19:f5:00:c8:01:cd:42:07:97:ab:7c:4c:5d:83:26:ff:
5d:a5:1b:7a:95:1e:a8:54:66:ae:83:7c:e6:df:59:91:8f:06:
2d:9e:77:00:7c:b2:19:16:47:ce:8d:5d:7e:2f:cb:cc:7e:be:
7e:67:57:ea:06:39:7d:94:61:a3:1b:ef:d1:f8:14:91:ba:23:
a5:22:e2:23:da:e1:4f:b3:99:d5:d2:40:3e:95:ae:03:ad:8f:
64:a2:19:7f:9b:6e:12:66:7b:47:6a:23:b3:7c:3a:56:91:09:
4c:d6:8e:c1:2f:02:52:e6:a3:b9:44:d5:3e:6e:5f:ad:59:4e:
ca:cb:da:56:e2:75:95:3f:6b:0a:ee:a3:3f:84:68:52:29:f4:
2b:40:8a:1f:71:1a:9b:4d:73:1a:24:ad:29:b2:7e:b5:bf:af:
a3:4d:35:ee:31:a9:a9:19:5d:73:d1:7b:38:6a:ef:70:d7:2b:
9f:9b:f4:40:64:31:96:17:b6:46:64:e0:31:1f:ac:9b:58:33:
ba:36:9c:0d:c3:f9:d1:7b:50:9a:68:92:12:55:60:4f:bc:dd:
01:b8:66:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:41:21 2026 by rpki-client