Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.mft
File: JflL0qvKpDyX5XhrLbNbcT--X-Q.mft (raw, json)
Hash identifier: CGYCTPfPWJ2q4+B7C4eSnesTK6qic4/Pnd+4AGb0JdU=
Subject key identifier: CB:7F:64:33:7B:2E:BD:E7:76:BE:45:0C:90:26:2F:8B:11:D7:72:2A
Authority key identifier: 25:F9:4B:D2:AB:CA:A4:3C:97:E5:78:6B:2D:B3:5B:71:3F:BE:5F:E4
Certificate issuer: /CN=25f94bd2abcaa43c97e5786b2db35b713fbe5fe4
Certificate serial: 019FAC765A1443198DB89B8396F101881B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:05 +0000
Manifest this update: Wed 29 Jul 2026 06:01:05 +0000
Manifest next update: Thu 30 Jul 2026 06:01:05 +0000
Files and hashes: 1: BcMMM0U66F_S0r1n65JxA8MExF0.roa (hash: H3WQFI+Saoc8E2B5BEOhesPi++dCrMFkBj7AIbeBUHI=)
2: JflL0qvKpDyX5XhrLbNbcT--X-Q.crl (hash: 4oubEKAHmBE+nzkbU8v+VCfg7EMt4oMuNPIZPt8f1Dk=)
3: VvS2Qn_Hrvcd6_-SnK7PXtk73uU.roa (hash: e6SVyLxPmWS3ohNAOmFyq9LDfmnszid2SAX7TuW2VEw=)
4: XIQjtwCAeuz5pHeyEJIwylepx78.roa (hash: /ZdrEI8StygXoq2z181JCF5ttjpJyDiccnOn6hndeRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:5a:14:43:19:8d:b8:9b:83:96:f1:01:88:1b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f94bd2abcaa43c97e5786b2db35b713fbe5fe4
Validity
Not Before: Jul 29 06:01:05 2026 GMT
Not After : Jul 30 06:01:05 2026 GMT
Subject: CN=cb7f64337b2ebde776be450c90262f8b11d7722a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:70:4a:57:15:a8:27:ef:a0:38:b8:95:86:
13:06:06:5b:a1:be:9c:fd:d8:3c:6e:d1:b5:9c:4e:
0d:db:2c:23:e8:66:9a:dc:76:72:a2:b8:ca:8a:d8:
c2:fe:fd:9f:f9:01:15:1d:67:16:eb:6e:3e:fb:a7:
9e:33:9d:48:5e:ce:5a:20:04:10:77:fa:49:45:b1:
62:c4:ea:00:e8:c4:7e:cd:78:87:3c:31:e3:44:b1:
4d:47:d1:18:bd:43:1a:db:15:d1:6d:e9:4e:c8:7a:
d8:06:2a:19:9b:86:9a:ed:18:9b:2e:51:8c:30:7a:
0b:b3:f1:70:80:c1:f8:fa:df:9a:1b:21:8e:6c:23:
53:b4:52:29:d4:e7:4a:b2:ad:ab:cb:dc:1a:c9:a1:
62:a7:a2:e5:98:b7:56:4d:45:90:c4:9b:0c:23:7b:
7f:22:be:0d:7f:25:89:3c:ac:62:cc:cc:fe:38:f9:
04:fc:dd:75:5d:3e:a7:1c:19:da:3d:5a:4f:fd:56:
29:24:42:41:99:28:6f:d3:6a:db:a1:74:97:99:26:
2c:2d:3b:93:39:42:60:e5:b2:1c:b8:2e:af:88:ad:
45:50:bc:d7:54:8c:2c:c7:df:c5:a4:56:15:b6:2d:
9d:e6:f6:aa:9e:86:c7:2c:af:f2:6f:1f:99:94:32:
d6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7F:64:33:7B:2E:BD:E7:76:BE:45:0C:90:26:2F:8B:11:D7:72:2A
X509v3 Authority Key Identifier:
keyid:25:F9:4B:D2:AB:CA:A4:3C:97:E5:78:6B:2D:B3:5B:71:3F:BE:5F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ec:a3:89:23:6c:39:5a:c8:52:86:36:fc:52:3a:49:6a:d3:
52:05:1b:db:87:d9:1f:e1:44:07:28:c4:d2:78:b3:41:d4:b6:
0d:13:80:f2:a3:c0:0d:b1:7b:75:67:87:e8:b7:0d:4b:7d:b6:
59:fe:d2:41:4b:30:c7:d5:3c:e8:f2:24:00:3b:aa:d2:9f:64:
54:8d:d8:fc:24:eb:65:2a:84:09:e9:e1:64:e6:9a:24:85:47:
06:d3:cc:93:5c:ea:fc:cf:b3:e5:39:18:63:b8:e8:9c:14:0f:
2e:1a:00:66:07:57:96:1b:ba:13:2f:d9:1d:06:30:c0:25:7c:
1e:13:c3:23:06:a4:ce:2b:cc:86:f2:86:9b:ff:a0:af:9c:cc:
a2:9b:64:0a:93:2d:4d:50:fa:7b:4f:be:63:7c:0c:fe:5f:5f:
2e:ba:10:37:87:bf:8b:0e:d6:5f:2e:0c:29:93:9a:0f:03:2d:
c1:3b:51:b6:88:b0:66:31:40:ba:77:80:de:e7:c8:6c:38:89:
3a:b2:e4:a5:96:47:c4:87:f4:dd:49:c2:43:ce:85:ef:df:1d:
0e:75:b9:63:79:1a:7b:9a:d0:4b:1b:38:b6:78:c4:f8:dd:51:
36:70:0d:48:31:12:7d:d7:da:5f:fd:1e:4f:05:3c:65:1d:01:
7b:34:fa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:57:33 2026 by rpki-client