Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
File: jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json)
Hash identifier: cCl1jBN30NynpssLDFzW/DTAySfUcGPWuPksyTOEHII=
Subject key identifier: 66:57:8D:B7:74:DD:17:84:5A:2F:30:D9:C8:9A:C7:35:DA:F9:C4:72
Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
Certificate issuer: /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Certificate serial: 019FAA19C62962B1E561F0B8599BA6894B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
Manifest number: 1716
Signing time: Tue 28 Jul 2026 19:00:43 +0000
Manifest this update: Tue 28 Jul 2026 19:00:43 +0000
Manifest next update: Wed 29 Jul 2026 19:00:43 +0000
Files and hashes: 1: 17ZzXQIgaPFFjeqMhwt3zOxvx1s.roa (hash: 86lU48qvlXKv6saptuHXqJOZusprYtOpfN/ZmUTRc2c=)
2: EozSJCiP9Cygcyge5GyOuN1Brck.roa (hash: FC5zsNMnxd0ekJD3hWuMDKKtr4NZV7IGmew1wZKk3hk=)
3: SJ04ay6mMnNqXRQ46nJIK4oxSlw.asa (hash: 2SJn970nGzja/+MwrBnP0LJ7l6DR9foN++GvgJnVlAw=)
4: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: OF53P2uTNribqfBbZV5CsT3FYsw6A6BeTVJaDJZVh0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:c6:29:62:b1:e5:61:f0:b8:59:9b:a6:89:4b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Validity
Not Before: Jul 28 19:00:43 2026 GMT
Not After : Jul 29 19:00:43 2026 GMT
Subject: CN=66578db774dd17845a2f30d9c89ac735daf9c472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c3:e0:f7:69:74:ea:e4:8c:61:8d:82:dc:63:
10:29:94:95:7d:71:71:93:95:25:0d:b4:86:80:d4:
7c:55:29:e0:11:2c:df:7d:7a:3c:1b:4b:ed:93:ca:
12:9c:df:c2:2d:e5:58:e6:0c:29:ee:43:0f:f1:45:
0a:82:e4:37:2d:c2:71:f4:57:26:3f:37:df:f3:d6:
c8:d5:71:03:0a:0e:1a:38:48:18:24:33:fa:4d:01:
2d:b4:12:61:d0:b3:23:07:f2:e0:05:93:d5:6c:50:
2e:ec:b1:02:75:85:f4:a4:80:ee:0f:1d:41:c1:f4:
d5:50:a3:6b:87:c9:db:35:44:51:d5:d9:e9:43:84:
ab:fd:1c:65:0a:22:a9:05:c7:aa:8d:89:f6:6a:78:
cf:87:5f:98:7e:64:fc:bd:92:d7:38:53:06:13:32:
6a:0b:5a:c7:75:dd:fa:f0:16:22:ed:11:fb:81:f6:
3b:ec:6d:0b:da:fc:e1:66:9c:5d:c2:26:53:4f:1a:
8e:16:20:f6:7a:dc:78:2e:73:68:a3:c4:81:5e:a5:
18:04:b6:1a:8a:b6:a0:8f:0b:b4:40:9f:8b:93:10:
08:63:a6:86:db:6a:80:41:8a:74:7e:6e:dd:ea:a2:
96:c2:26:6a:ac:54:17:80:c3:c3:7b:84:89:4c:c6:
37:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:57:8D:B7:74:DD:17:84:5A:2F:30:D9:C8:9A:C7:35:DA:F9:C4:72
X509v3 Authority Key Identifier:
keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a7:f7:af:a3:33:20:99:10:3e:a3:28:a4:52:b2:f7:1a:62:
2a:46:5f:0e:14:ec:40:e9:19:48:74:3e:27:f5:19:de:40:65:
8c:87:7b:e7:55:25:1f:80:c4:dc:7d:e4:97:6a:5c:8d:f4:40:
be:9d:d0:b0:96:43:43:32:e8:9b:ad:57:19:05:3a:0e:57:93:
af:e1:f2:12:82:44:2e:56:35:ae:39:2d:a0:a8:b1:06:9c:55:
2e:0b:2c:42:02:3d:b0:ee:17:fe:a2:32:2a:a2:c7:eb:b7:30:
64:4f:1e:22:89:41:ee:f8:48:7e:48:49:96:05:96:cd:33:fd:
b9:2f:88:b1:19:9f:df:d4:dc:e2:a9:e6:8f:e3:9a:6c:cf:c2:
5a:2b:c4:d4:ff:44:34:b8:0d:d9:3d:c6:63:05:84:0f:a9:f8:
7f:62:71:75:34:d1:d0:df:50:19:0d:b1:8a:fa:61:c5:f4:1d:
e5:a1:69:ad:74:06:e8:69:8f:7c:43:3d:d2:26:1a:45:59:64:
af:cd:9e:31:07:82:bb:48:12:20:b5:97:63:3d:1c:51:14:53:
ec:12:b4:b6:78:ca:35:98:79:7e:f2:2e:1a:f0:85:c2:11:ac:
58:cc:d6:84:1e:2c:c5:ae:79:64:89:d9:a7:7d:d5:d9:eb:43:
89:35:97:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:00:47 2026 by rpki-client