Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json)
Hash identifier: 2deFGZdo3R73FB5c5SKvqCOMVLbYaHzqpZ8W5JdGphU=
Subject key identifier: 9E:AF:68:A4:47:0D:62:C0:7A:A9:60:8B:66:34:52:88:79:6D:6F:66
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial: 019FAAF54DD0D02C321A35DFF8F6A70C56D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
Manifest number: 0F04
Signing time: Tue 28 Jul 2026 23:00:30 +0000
Manifest this update: Tue 28 Jul 2026 23:00:30 +0000
Manifest next update: Wed 29 Jul 2026 23:00:30 +0000
Files and hashes: 1: L_9BG5xd7E-WvM8wNKg3JhMyHn0.roa (hash: fYhGLFm7hYXm5Z24lpdXxQv/bqEknOrei0vZwgl2Blk=)
2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: 0kSCKd5tg3AhCCBSnitlZpzhw//akBbM8NinBeDYWc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:4d:d0:d0:2c:32:1a:35:df:f8:f6:a7:0c:56:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Validity
Not Before: Jul 28 23:00:30 2026 GMT
Not After : Jul 29 23:00:30 2026 GMT
Subject: CN=9eaf68a4470d62c07aa9608b66345288796d6f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:2a:e4:6d:e4:9b:a9:14:10:82:2d:26:86:
de:d1:17:f2:55:8e:cf:af:f8:54:94:a7:14:97:37:
ae:63:10:79:86:d3:5a:8b:5f:41:b8:47:09:01:60:
2f:66:50:69:34:71:e6:be:01:95:ae:d2:bd:9a:e1:
07:2b:ef:99:ba:17:ee:4c:2a:6b:53:9b:53:f5:83:
a7:7b:d7:da:8a:2d:5b:56:61:94:0a:ae:93:c0:8f:
37:84:4d:f1:fe:32:f0:09:77:e3:c7:fa:b8:a1:ca:
95:0b:02:80:6e:fd:97:60:f5:65:1e:81:6a:2e:2c:
07:e6:6d:3c:aa:a1:a8:7f:60:8e:4b:f6:03:60:d0:
5f:32:ea:ea:f4:b7:81:9d:a7:82:a2:81:fd:c3:e6:
a9:66:3c:cf:b4:27:97:b4:9e:b2:05:2e:17:25:79:
4c:ca:53:19:18:a9:57:7b:b1:55:30:64:f4:9a:e1:
5e:67:aa:3c:0e:50:3a:06:2f:2d:7e:e1:3b:67:ff:
31:b2:bf:f4:a8:1a:fd:13:8f:73:7f:d5:08:2d:53:
14:89:5f:b7:85:65:3c:6b:89:6c:3f:06:e0:6b:b9:
91:7a:2f:60:26:ba:00:74:7d:f3:81:51:85:12:09:
80:bb:38:1a:5b:47:33:10:64:e8:a5:e8:91:cc:5b:
ce:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AF:68:A4:47:0D:62:C0:7A:A9:60:8B:66:34:52:88:79:6D:6F:66
X509v3 Authority Key Identifier:
keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:66:b7:22:33:ff:2b:83:5e:d7:81:b2:fd:39:e0:90:4f:fe:
a1:2a:cf:c2:37:34:7f:3d:17:20:97:0a:a5:da:71:c8:40:66:
42:28:bd:7f:cc:5f:60:46:95:fd:8e:47:c8:62:37:d7:cf:78:
b1:32:59:d3:a7:9a:95:8a:e0:4d:44:0a:8e:d7:be:f6:db:e2:
4f:95:88:01:35:a4:17:7a:73:35:13:4a:cb:81:13:65:df:5b:
e1:6d:a5:8d:06:9a:e8:c0:e8:69:65:85:e1:c0:26:3f:76:c3:
65:b7:39:a2:b0:1f:b3:25:46:fc:0e:71:88:dc:64:fe:59:ba:
74:2d:8d:6d:d0:61:5a:16:e9:bc:cb:3f:74:ea:3a:d6:62:06:
5d:91:b9:8a:ea:5e:dc:25:e8:14:54:40:6b:3b:b1:53:3a:97:
c1:6b:50:8e:6f:0e:78:61:70:78:66:cc:21:d3:20:24:cf:bc:
d5:a4:2f:bd:67:f4:1a:96:4b:54:8c:d2:3c:2e:d5:2b:d6:80:
30:9d:77:35:aa:ee:d0:7e:08:fb:99:ee:92:ea:34:23:7c:ae:
cf:e7:c9:01:7a:c4:f3:90:13:e6:89:36:85:da:b1:47:ea:70:
8f:aa:3c:b8:e6:0d:51:03:80:e7:37:e5:65:ca:a3:da:f8:69:
22:c1:c2:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9U3Q0CwyGjXf+PanDFbQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkN2ZhYTViYjliM2VhNDAxMzdkYjg2YzQwNzJmY2UxNThm
NmE1Y2YwHhcNMjYwNzI4MjMwMDMwWhcNMjYwNzI5MjMwMDMwWjAzMTEwLwYDVQQD
Eyg5ZWFmNjhhNDQ3MGQ2MmMwN2FhOTYwOGI2NjM0NTI4ODc5NmQ2ZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf4q5G3km6kUEIItJobe0RfyVY7P
r/hUlKcUlzeuYxB5htNai19BuEcJAWAvZlBpNHHmvgGVrtK9muEHK++ZuhfuTCpr
U5tT9YOne9faii1bVmGUCq6TwI83hE3x/jLwCXfjx/q4ocqVCwKAbv2XYPVlHoFq
LiwH5m08qqGof2COS/YDYNBfMurq9LeBnaeCooH9w+apZjzPtCeXtJ6yBS4XJXlM
ylMZGKlXe7FVMGT0muFeZ6o8DlA6Bi8tfuE7Z/8xsr/0qBr9E49zf9UILVMUiV+3
hWU8a4lsPwbga7mRei9gJroAdH3zgVGFEgmAuzgaW0czEGTopeiRzFvOJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6vaKRHDWLAeqlgi2Y0Uoh5bW9mMB8GA1UdIwQY
MBaAFI1/qlu5s+pAE324bEBy/OFY9qXPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDIt
Zjk5OWUxYmViOTYxLzEvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDItZjk5OWUxYmViOTYx
LzEvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1Ga3IjP/
K4Ne14Gy/TngkE/+oSrPwjc0fz0XIJcKpdpxyEBmQii9f8xfYEaV/Y5HyGI31894
sTJZ06ealYrgTUQKjte+9tviT5WIATWkF3pzNRNKy4ETZd9b4W2ljQaa6MDoaWWF
4cAmP3bDZbc5orAfsyVG/A5xiNxk/lm6dC2NbdBhWhbpvMs/dOo61mIGXZG5iupe
3CXoFFRAazuxUzqXwWtQjm8OeGFweGbMIdMgJM+81aQvvWf0GpZLVIzSPC7VK9aA
MJ13Naru0H4I+5nukuo0I3yuz+fJAXrE85AT5ok2hdqxR+pwj6o8uOYNUQOA5zfl
Zcqj2vhpIsHCow==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:43 2026 by rpki-client