Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
File: Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft (raw, json)
Hash identifier: Ek6DvA28V9+dJ5GH90rpvz9LFjWCKASg8P0zfRcjBq8=
Subject key identifier: 5D:4D:FC:14:F9:0A:2C:59:E8:BB:3E:07:30:7F:84:32:3B:EF:91:4D
Authority key identifier: 25:AF:AA:1E:FB:29:FF:A5:6E:6F:5D:42:06:22:DF:F0:69:7F:A6:27
Certificate issuer: /CN=25afaa1efb29ffa56e6f5d420622dff0697fa627
Certificate serial: 019FAD88B755FE1F893083DE84D541FBECE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
Manifest number: AA
Signing time: Wed 29 Jul 2026 11:00:45 +0000
Manifest this update: Wed 29 Jul 2026 11:00:45 +0000
Manifest next update: Thu 30 Jul 2026 11:00:45 +0000
Files and hashes: 1: Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl (hash: zYA+5rduNFrCMqm1BH5nEWPhpRYUn8V3ws7B40gAha4=)
2: wzD-Y1XRaC-02kl2ZMaS3E6fGFs.roa (hash: J6QWqMXaVC1M4duQaZv5ICVDFegW9Ncnya/aGNgLbJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:b7:55:fe:1f:89:30:83:de:84:d5:41:fb:ec:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25afaa1efb29ffa56e6f5d420622dff0697fa627
Validity
Not Before: Jul 29 11:00:45 2026 GMT
Not After : Jul 30 11:00:45 2026 GMT
Subject: CN=5d4dfc14f90a2c59e8bb3e07307f84323bef914d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:52:7f:b2:1a:46:74:d2:1f:05:1e:12:70:6b:
67:fb:f4:7d:17:74:5f:cd:2e:b6:5a:fa:ab:b2:40:
95:cd:fc:df:0f:58:bf:7d:e8:6f:2c:46:71:76:d4:
f6:31:c7:4e:18:af:50:42:54:1a:b0:49:b1:02:8d:
3e:03:06:96:9d:1a:bf:7f:8c:59:76:96:dc:14:43:
d6:a3:d7:1c:dc:96:af:65:81:7d:d0:9f:bc:05:c8:
c9:5e:f1:b5:dc:e5:6b:6f:cb:e3:ec:bb:03:06:36:
31:40:22:8d:e8:2f:9e:4e:6b:fb:aa:e3:24:3b:c9:
16:06:a3:2f:99:05:6b:5e:6e:37:79:8c:0c:cb:93:
84:a0:e4:5f:f0:7a:4a:18:78:62:36:a6:b3:4a:61:
f3:41:8e:4b:5e:eb:03:79:98:dd:98:96:23:8f:33:
72:1b:54:ba:46:fa:b1:6a:70:06:50:3d:d1:76:6f:
4e:9b:45:3d:46:d3:ae:93:3d:29:05:3f:02:d6:7c:
5e:64:92:bc:3a:8a:1e:7a:c7:27:be:75:63:2e:f5:
5b:18:c7:fc:ea:ba:89:53:52:90:c5:14:b6:a0:d3:
73:84:8b:4d:ce:42:d3:ec:78:68:6b:11:17:a6:c2:
de:50:f0:eb:b2:7c:75:cd:5d:6a:f7:d8:c1:17:cc:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4D:FC:14:F9:0A:2C:59:E8:BB:3E:07:30:7F:84:32:3B:EF:91:4D
X509v3 Authority Key Identifier:
keyid:25:AF:AA:1E:FB:29:FF:A5:6E:6F:5D:42:06:22:DF:F0:69:7F:A6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:de:56:8d:07:43:69:2f:de:a6:98:d6:df:89:d7:77:d2:04:
bf:4c:50:a0:1f:3c:36:b9:57:22:b1:de:6c:bb:51:ab:90:a1:
c4:f0:20:4b:35:46:cc:71:5c:36:7d:55:86:82:4a:26:5f:30:
b0:13:5a:1c:e7:9c:98:cf:01:aa:0b:8b:43:41:63:f5:18:11:
85:3d:07:53:a9:38:df:70:8a:43:84:46:81:a2:6e:f4:0b:13:
6d:82:64:36:4c:7b:a9:93:b9:50:59:6a:7a:ca:50:a6:6b:25:
2c:dd:fb:41:f8:92:1c:8f:95:28:ac:43:d7:17:35:94:7e:e5:
0a:01:ed:d6:ee:93:bf:ae:e4:62:5f:7c:67:06:cb:1e:dd:06:
91:8d:cf:40:cf:7c:a7:c6:bb:6e:21:ac:23:4e:d9:e8:ca:70:
81:37:0e:36:b7:5f:3a:fe:07:bc:a3:d9:f2:29:5c:0a:20:2f:
55:7c:17:55:06:04:e0:6d:ed:5e:a8:01:44:f6:46:35:f6:79:
4b:23:d7:6d:c7:3f:68:95:ed:35:2e:fb:10:9f:63:55:d2:79:
93:0a:6a:37:22:b9:f2:b0:ca:50:c7:83:41:40:a2:50:cc:f8:
c9:80:38:25:e4:23:e8:70:7f:a2:b9:d6:0a:d7:13:79:fb:89:
f0:1b:97:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:13:05 2026 by rpki-client