Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
File: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft (raw, json)
Hash identifier: lncJwpE2mZgCGHdtp9NbN4S4RMCBppqe+PoA+tV3Qzg=
Subject key identifier: 68:FE:2B:F3:70:CE:D2:B3:00:05:69:19:07:3A:EB:CB:3E:67:83:19
Authority key identifier: FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
Certificate issuer: /CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Certificate serial: 019FAA888B75F7BD8091A166E6AF45F56A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
Manifest number: 1967
Signing time: Tue 28 Jul 2026 21:01:43 +0000
Manifest this update: Tue 28 Jul 2026 21:01:43 +0000
Manifest next update: Wed 29 Jul 2026 21:01:43 +0000
Files and hashes: 1: 9h49lJWwF1PdYlUFcV2QXMYgM9o.roa (hash: GCIawhjOg95GqWKJazHKfaZHhHNmcBK7aJ3Mw2UEcAc=)
2: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl (hash: wgqveU6QC8t6LDlTjbA6sA5FG1v18ZDWrlIysP5Bykw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:8b:75:f7:bd:80:91:a1:66:e6:af:45:f5:6a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Validity
Not Before: Jul 28 21:01:43 2026 GMT
Not After : Jul 29 21:01:43 2026 GMT
Subject: CN=68fe2bf370ced2b300056919073aebcb3e678319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:69:62:f7:d1:a7:0f:58:2f:44:8a:d4:dd:
dc:c6:cf:68:9a:39:c3:fc:bf:85:14:8e:ce:c2:e9:
e7:fc:31:8b:48:f8:28:62:d9:54:ce:c4:d0:88:50:
62:58:3e:46:52:14:e4:28:3b:5f:2c:81:e2:7a:80:
6d:93:b1:be:ea:60:da:99:9c:7f:37:af:84:56:98:
d0:e1:10:91:8f:b4:4e:45:a6:5b:13:5b:5e:13:55:
06:fd:68:5c:34:25:ca:47:9b:c7:6c:08:97:11:34:
c8:1c:95:f8:8e:d8:a4:45:b4:23:94:a0:b8:93:30:
32:58:fa:2b:07:30:70:b3:f0:08:d0:a5:a8:1a:ed:
f2:69:cf:95:a4:d8:71:40:6d:87:a2:29:3a:03:a8:
2a:34:0f:3e:c6:18:fd:d4:07:47:9b:29:51:dd:51:
3c:54:3c:11:a1:64:92:af:33:40:df:e5:43:24:f2:
7a:e4:ac:49:51:0a:46:f3:ac:65:6c:2b:af:4b:9e:
3f:f4:55:4a:d3:1a:23:d4:64:e3:ad:90:89:69:e7:
67:2e:50:af:71:84:ef:b7:8c:1f:37:a1:05:6d:10:
e5:9c:cd:2c:f2:3a:5c:ba:47:e1:5b:c4:db:f4:da:
a9:45:cd:d5:85:69:ef:9b:88:3d:c6:7f:b9:54:7b:
a7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FE:2B:F3:70:CE:D2:B3:00:05:69:19:07:3A:EB:CB:3E:67:83:19
X509v3 Authority Key Identifier:
keyid:FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f8:aa:30:c4:b4:17:94:2a:e9:f5:9f:c2:7f:dc:15:43:c1:
f4:9c:c7:82:ed:42:2b:00:b8:0d:d3:06:8f:f7:20:b5:e9:87:
2f:12:6a:af:17:07:0a:13:94:fb:cd:c5:9c:f0:8d:40:52:3d:
9a:29:2a:25:83:66:e7:5e:c7:68:e6:e6:29:70:3f:6c:aa:36:
ca:2f:2a:17:25:cc:01:e2:65:a4:d4:c5:66:b6:ed:97:8c:6b:
47:e6:ab:50:3d:5c:54:61:0a:2f:be:6a:78:85:43:cd:ce:f3:
68:0f:f7:4b:97:0d:2e:51:e0:6e:33:25:7d:d7:25:80:d6:54:
4e:90:3f:b7:96:04:ca:68:66:fe:a3:f6:5e:5d:ab:59:28:0b:
00:0a:8e:ff:86:74:0c:a7:ae:4d:48:ae:7e:2b:fa:7a:fa:bd:
b7:a1:1b:9d:4d:56:24:64:94:fd:93:d4:f2:8f:26:7b:6e:62:
87:fd:3c:e2:fe:8d:c0:63:ec:ef:6d:fd:13:e9:a9:8a:ce:12:
e3:20:aa:45:e0:2a:31:71:10:8c:fe:6c:bf:dd:ff:a0:60:d1:
d2:61:6b:95:87:b6:80:4f:82:ae:b9:e9:45:20:f4:2c:07:c1:
86:b0:3c:3e:2d:d0:32:56:d8:8a:57:2a:b9:4b:46:12:76:07:
4f:e0:f9:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiIt1972AkaFm5q9F9WqJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOWE3YjdhMmMyOGEwYjNjMGUwYTU4OGMzYzg5MmU1MmE1
OWYwZTYwHhcNMjYwNzI4MjEwMTQzWhcNMjYwNzI5MjEwMTQzWjAzMTEwLwYDVQQD
Eyg2OGZlMmJmMzcwY2VkMmIzMDAwNTY5MTkwNzNhZWJjYjNlNjc4MzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH5pYvfRpw9YL0SK1N3cxs9omjnD
/L+FFI7Owunn/DGLSPgoYtlUzsTQiFBiWD5GUhTkKDtfLIHieoBtk7G+6mDamZx/
N6+EVpjQ4RCRj7RORaZbE1teE1UG/WhcNCXKR5vHbAiXETTIHJX4jtikRbQjlKC4
kzAyWPorBzBws/AI0KWoGu3yac+VpNhxQG2Hoik6A6gqNA8+xhj91AdHmylR3VE8
VDwRoWSSrzNA3+VDJPJ65KxJUQpG86xlbCuvS54/9FVK0xoj1GTjrZCJaednLlCv
cYTvt4wfN6EFbRDlnM0s8jpcukfhW8Tb9NqpRc3VhWnvm4g9xn+5VHunsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGj+K/NwztKzAAVpGQc668s+Z4MZMB8GA1UdIwQY
MBaAFPyae3osKKCzwOCliMPIkuUqWfDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pwN2Vpd29vTFBBNEtXSXc4aVM1U3BaOE9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xZDI4MjMtMzQ3NC00ZDg1LTk1ZTkt
YWNmMDkzMjI2YjA3LzEvX0pwN2Vpd29vTFBBNEtXSXc4aVM1U3BaOE9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8xZDI4MjMtMzQ3NC00ZDg1LTk1ZTktYWNmMDkzMjI2YjA3
LzEvX0pwN2Vpd29vTFBBNEtXSXc4aVM1U3BaOE9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/iqMMS0
F5Qq6fWfwn/cFUPB9JzHgu1CKwC4DdMGj/cgtemHLxJqrxcHChOU+83FnPCNQFI9
mikqJYNm517HaObmKXA/bKo2yi8qFyXMAeJlpNTFZrbtl4xrR+arUD1cVGEKL75q
eIVDzc7zaA/3S5cNLlHgbjMlfdclgNZUTpA/t5YEymhm/qP2Xl2rWSgLAAqO/4Z0
DKeuTUiufiv6evq9t6EbnU1WJGSU/ZPU8o8me25ih/084v6NwGPs7239E+mpis4S
4yCqReAqMXEQjP5sv93/oGDR0mFrlYe2gE+CrrnpRSD0LAfBhrA8Pi3QMlbYilcq
uUtGEnYHT+D5MA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:18:46 2026 by rpki-client