Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json)
Hash identifier: vuRJfL3lTYVqTN0SsmCYOKBKav9PQ//BH0OlH1dyW1Q=
Subject key identifier: 3A:B0:BA:0B:42:94:6C:64:D0:5E:72:9D:0A:95:D0:A3:FD:CC:BE:BB
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial: 019FACE3F6437AC82AF02469B63E4C96F9C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
Manifest number: 0F05
Signing time: Wed 29 Jul 2026 08:00:48 +0000
Manifest this update: Wed 29 Jul 2026 08:00:48 +0000
Manifest next update: Thu 30 Jul 2026 08:00:48 +0000
Files and hashes: 1: L_9BG5xd7E-WvM8wNKg3JhMyHn0.roa (hash: fYhGLFm7hYXm5Z24lpdXxQv/bqEknOrei0vZwgl2Blk=)
2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: LoxvufFCKRXWaaZE973C/BgSoblR/TZl9jSbcERbYds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:f6:43:7a:c8:2a:f0:24:69:b6:3e:4c:96:f9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Validity
Not Before: Jul 29 08:00:48 2026 GMT
Not After : Jul 30 08:00:48 2026 GMT
Subject: CN=3ab0ba0b42946c64d05e729d0a95d0a3fdccbebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:cc:a5:eb:74:c3:a2:79:54:7d:9e:15:ac:
d8:fa:bf:ed:e3:4e:eb:9c:2c:2b:3b:35:ee:5e:ac:
15:e2:10:c7:c0:19:be:24:06:30:71:d1:8a:64:07:
2d:b9:72:4b:04:fc:f1:d4:39:d8:c2:1c:b5:93:dd:
9d:75:5e:6e:37:85:53:a5:05:59:d1:8d:1b:6a:f0:
36:b0:d8:54:db:3c:ac:e0:d3:51:98:74:df:e2:66:
08:6c:e1:de:84:bc:13:cf:4f:ec:ad:a5:db:c9:21:
6e:f0:7e:de:81:9e:95:54:9e:bc:e4:d4:0a:73:76:
69:5a:ac:04:85:44:39:59:00:38:a9:b4:24:47:46:
68:26:38:ed:8a:9a:17:c5:06:51:be:b0:c0:43:29:
01:93:28:ef:3f:f3:34:d6:8d:fe:4f:61:07:dc:f0:
df:b3:70:18:19:92:12:83:a9:f0:0d:b2:d4:34:ab:
5f:41:d7:33:3e:37:43:8f:63:94:85:4b:66:a1:ed:
9f:b1:9a:93:9b:be:30:ca:c4:91:e5:cf:e2:0d:e5:
a7:f0:f2:a9:90:f3:09:0d:fb:00:49:2e:2a:c0:87:
cf:22:69:61:d4:a0:74:78:f1:f8:d5:0f:5c:48:3e:
6f:34:09:03:ea:97:f5:d3:b7:9a:a4:98:33:29:3b:
d0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B0:BA:0B:42:94:6C:64:D0:5E:72:9D:0A:95:D0:A3:FD:CC:BE:BB
X509v3 Authority Key Identifier:
keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a5:8a:cf:62:5b:16:2e:98:88:11:55:e9:aa:9d:79:3a:37:
fb:12:f9:3a:d0:39:54:a7:0a:06:e4:d1:4d:92:e8:a9:dd:f0:
40:2a:69:c9:28:fd:18:68:e3:b5:07:54:1b:66:b8:f1:aa:e9:
26:ba:3c:47:a8:8e:28:33:92:38:0d:a2:b1:8c:db:88:ef:68:
77:06:99:f2:21:fa:a1:f9:f0:73:02:20:e3:5f:d6:53:7f:e5:
c3:b2:df:85:b3:b4:21:15:e3:5c:ea:5e:32:17:79:f8:b0:64:
3c:82:ee:0b:b4:ed:05:09:00:fb:cc:c5:c1:a6:ed:a8:43:69:
f3:dc:53:51:cc:a9:a4:07:d1:da:23:dd:f0:ad:41:46:b8:dd:
b9:26:9c:20:60:e7:5d:9d:7e:94:35:f8:0b:1a:77:3c:e4:84:
cf:52:a7:e5:33:da:fc:4e:2a:7a:3a:e6:c5:96:fb:22:d6:5c:
c5:f3:51:e9:e1:59:6e:de:6b:2d:bc:07:20:1d:86:e8:c7:b0:
5e:43:bc:cd:05:fe:35:b9:68:ac:07:9b:4f:fd:80:de:9d:cb:
4f:c1:bd:15:7f:2a:e1:23:a7:20:27:31:5e:ea:14:79:0b:af:
fd:95:8f:27:56:57:d8:6c:27:ce:a1:23:4a:92:1d:56:ac:dc:
00:e3:24:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+s4/ZDesgq8CRptj5MlvnDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkN2ZhYTViYjliM2VhNDAxMzdkYjg2YzQwNzJmY2UxNThm
NmE1Y2YwHhcNMjYwNzI5MDgwMDQ4WhcNMjYwNzMwMDgwMDQ4WjAzMTEwLwYDVQQD
EygzYWIwYmEwYjQyOTQ2YzY0ZDA1ZTcyOWQwYTk1ZDBhM2ZkY2NiZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvLMpet0w6J5VH2eFazY+r/t407r
nCwrOzXuXqwV4hDHwBm+JAYwcdGKZActuXJLBPzx1DnYwhy1k92ddV5uN4VTpQVZ
0Y0bavA2sNhU2zys4NNRmHTf4mYIbOHehLwTz0/sraXbySFu8H7egZ6VVJ685NQK
c3ZpWqwEhUQ5WQA4qbQkR0ZoJjjtipoXxQZRvrDAQykBkyjvP/M01o3+T2EH3PDf
s3AYGZISg6nwDbLUNKtfQdczPjdDj2OUhUtmoe2fsZqTm74wysSR5c/iDeWn8PKp
kPMJDfsASS4qwIfPImlh1KB0ePH41Q9cSD5vNAkD6pf107eapJgzKTvQQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqwugtClGxk0F5ynQqV0KP9zL67MB8GA1UdIwQY
MBaAFI1/qlu5s+pAE324bEBy/OFY9qXPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDIt
Zjk5OWUxYmViOTYxLzEvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDItZjk5OWUxYmViOTYx
LzEvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6WKz2Jb
Fi6YiBFV6aqdeTo3+xL5OtA5VKcKBuTRTZLoqd3wQCppySj9GGjjtQdUG2a48arp
Jro8R6iOKDOSOA2isYzbiO9odwaZ8iH6ofnwcwIg41/WU3/lw7LfhbO0IRXjXOpe
Mhd5+LBkPILuC7TtBQkA+8zFwabtqENp89xTUcyppAfR2iPd8K1BRrjduSacIGDn
XZ1+lDX4Cxp3POSEz1Kn5TPa/E4qejrmxZb7ItZcxfNR6eFZbt5rLbwHIB2G6Mew
XkO8zQX+NblorAebT/2A3p3LT8G9FX8q4SOnICcxXuoUeQuv/ZWPJ1ZX2GwnzqEj
SpIdVqzcAOMkog==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:56:29 2026 by rpki-client