Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
File: jRFmK-syV94cA0DkEu2dGZXA9f8.mft (raw, json)
Hash identifier: 00YVT4CFtRmadd8L6z0RbPE+86Vhkzge3ADy6Q6zYJo=
Subject key identifier: DA:AF:27:13:D4:8A:EC:75:5E:0D:FB:59:2B:33:30:7A:D4:C2:69:D9
Authority key identifier: 8D:11:66:2B:EB:32:57:DE:1C:03:40:E4:12:ED:9D:19:95:C0:F5:FF
Certificate issuer: /CN=8d11662beb3257de1c0340e412ed9d1995c0f5ff
Certificate serial: 019FA8995CDAA0D69D9FA9E223137D79E9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:50 +0000
Manifest this update: Tue 28 Jul 2026 12:00:50 +0000
Manifest next update: Wed 29 Jul 2026 12:00:50 +0000
Files and hashes: 1: CQCzVDXazljrHIDpQoZYmXw-po0.roa (hash: csnCrvPQLiH0NgIq8QQ3R53jMhbeRSXe4EfvPdrCVpg=)
2: OBPTg2h93nMRgYHf_TenncbSH3w.roa (hash: DcawVmKkXAq6yOPTfF+1ZtbO8p4q24hhfvuSmUJsz+Y=)
3: jRFmK-syV94cA0DkEu2dGZXA9f8.crl (hash: Kj48AuzNSznOOsB8IqtU+ZnbaFTXkKpXDOZqfbj82RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:5c:da:a0:d6:9d:9f:a9:e2:23:13:7d:79:e9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11662beb3257de1c0340e412ed9d1995c0f5ff
Validity
Not Before: Jul 28 12:00:50 2026 GMT
Not After : Jul 29 12:00:50 2026 GMT
Subject: CN=daaf2713d48aec755e0dfb592b33307ad4c269d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a8:7a:05:93:be:01:5e:e8:40:8e:0e:98:51:
54:2f:c8:6d:dd:ac:c5:fd:ee:e5:02:ee:e2:3c:a5:
08:f3:69:e4:8f:96:59:5c:b1:23:25:0a:2f:ee:3d:
ad:de:ad:eb:18:86:0a:3a:cd:c1:f3:e5:71:1e:ac:
fe:87:f9:fa:45:0f:82:54:5a:ea:b8:01:2e:61:3b:
c0:db:e2:ba:c4:22:64:ed:9f:a1:fc:f0:06:0c:4e:
1e:ce:1c:7f:6c:71:5f:2b:d1:48:5a:34:ad:6f:19:
ec:80:75:52:e5:bb:ac:c7:7a:ae:af:54:4d:70:14:
ab:2a:a7:b3:c6:29:2c:a3:00:dc:89:0f:3e:56:1e:
26:0d:08:c5:ee:77:21:e9:02:16:60:ec:86:d9:72:
d7:0a:58:ca:bc:13:7f:0c:af:8a:78:ac:c0:07:55:
d8:fe:ea:8f:31:46:bd:77:21:80:21:d3:c4:8e:bf:
48:c9:39:a9:7e:05:f7:c9:e4:5c:31:b4:fb:31:e0:
64:95:03:d5:cb:1a:c7:3a:5c:83:14:ba:3a:d7:54:
89:f0:8a:c1:4e:a5:ca:7a:eb:f9:ae:89:5e:fb:2e:
ed:06:fa:69:28:14:9e:d7:be:09:95:3b:02:9e:b0:
75:e1:c2:e9:d6:53:4d:99:bb:23:eb:fe:f3:27:98:
28:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AF:27:13:D4:8A:EC:75:5E:0D:FB:59:2B:33:30:7A:D4:C2:69:D9
X509v3 Authority Key Identifier:
keyid:8D:11:66:2B:EB:32:57:DE:1C:03:40:E4:12:ED:9D:19:95:C0:F5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:22:51:dc:1b:da:91:43:f1:3c:ce:e3:97:76:db:3a:c6:8b:
cd:8c:dd:5f:8b:bb:08:32:ae:4e:4b:37:42:b0:52:b0:96:99:
0a:3d:36:18:4c:f5:1f:e5:27:14:0a:55:65:30:39:75:39:0f:
c7:c2:fc:94:05:da:bd:cc:28:9f:12:5a:77:71:dd:bf:7e:61:
c0:4d:3f:9d:81:aa:96:6f:48:78:98:19:ba:78:fc:4a:74:8d:
39:da:82:dc:1b:21:31:81:75:25:6c:e2:33:e7:8e:33:a7:36:
c6:db:64:84:27:b7:30:14:67:8f:d2:91:20:30:4a:1d:a3:ba:
3e:90:b9:c9:00:94:71:38:ef:f3:01:ae:92:34:2e:45:2d:f4:
29:1c:b4:d4:f2:15:c4:d8:35:47:66:c9:dd:67:ef:42:e3:ef:
20:19:17:8f:48:d2:66:1e:e7:b2:35:ab:03:da:36:60:db:30:
14:cd:f6:51:5d:ba:7e:b9:af:88:7f:83:d7:92:ac:34:b8:c5:
7c:2c:7b:fe:19:32:bd:b5:04:a9:b8:ad:8b:32:2e:56:4c:f2:
92:29:5d:e7:01:84:3b:c7:e5:4e:9f:e7:41:fe:5b:c6:7e:74:
79:f3:05:69:6f:34:7a:b8:6c:f5:29:b1:ac:e3:88:3c:f1:c3:
13:ee:94:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:25 2026 by rpki-client