Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
File: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json)
Hash identifier: tkIoWihRxOMaz4lM3NTovK5KNstZv10o9yD0x/GKDFM=
Subject key identifier: 48:78:2A:13:93:98:79:7C:15:85:06:5B:14:12:18:17:AF:03:19:3C
Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
Certificate issuer: /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Certificate serial: 019FA7195BD1D2A55EA3543A0C91B979B3EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
Manifest number: 1925
Signing time: Tue 28 Jul 2026 05:01:24 +0000
Manifest this update: Tue 28 Jul 2026 05:01:24 +0000
Manifest next update: Wed 29 Jul 2026 05:01:24 +0000
Files and hashes: 1: 8yYMhh0gMT6CiQOLVp2cTc5vVZ0.roa (hash: 7gaVBUF1/eBBpHyrZMX3iYaRP7VQvzONGdsKY6mhoPg=)
2: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: vyg1XUV6OBuQOEK6njDZ5I5s5qMp/UwjSJjTcmVQvig=)
3: jWXlavsE52YTVFZOpNefWWU1i6k.asa (hash: vEyTlENGA5Gaf1l2XTZgXp/m9z8nLu21MiVt4HAmg+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:19:5b:d1:d2:a5:5e:a3:54:3a:0c:91:b9:79:b3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Validity
Not Before: Jul 28 05:01:24 2026 GMT
Not After : Jul 29 05:01:24 2026 GMT
Subject: CN=48782a139398797c1585065b14121817af03193c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:09:78:b7:ac:4e:8f:ab:24:04:e4:ae:72:
c6:60:f9:2f:8e:c2:d8:15:5a:e0:0e:b0:7c:0b:ef:
62:31:57:e2:11:ab:24:b5:61:5c:0e:27:40:15:5a:
16:0a:b8:96:8a:bd:e0:34:39:26:4e:ee:7f:c3:27:
2a:5d:f3:98:e5:e6:63:e4:ce:c7:20:62:09:69:72:
e8:c3:ea:1b:31:fa:ca:ee:9d:cf:53:b0:4c:9a:fe:
86:32:aa:6b:98:b9:02:b3:94:00:ed:60:13:97:12:
fa:7a:2a:a5:4e:67:da:82:76:a0:93:04:7d:53:e2:
98:41:be:4e:ed:93:7e:b2:60:71:73:4f:46:77:68:
fd:58:36:17:cf:9f:44:75:be:b7:17:37:ee:6d:12:
79:52:47:e7:aa:92:c0:bc:fb:c8:d3:7c:7a:c7:6b:
db:d2:6f:1e:c8:ee:32:fa:4b:95:15:d2:8a:9d:5e:
83:26:ae:ef:32:7c:fe:de:87:65:77:cc:d2:5e:78:
0f:5a:9d:ec:cc:11:89:ba:be:f7:54:f5:7f:62:e8:
85:6a:21:8f:f6:dc:9d:23:b5:c5:7a:04:d0:fa:f1:
dc:dc:35:a1:90:be:3b:67:bb:94:01:4d:31:8b:d3:
f0:c3:17:7e:fc:46:d2:0a:22:29:1a:21:47:a7:96:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:78:2A:13:93:98:79:7C:15:85:06:5B:14:12:18:17:AF:03:19:3C
X509v3 Authority Key Identifier:
keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:c4:c7:35:67:1d:9f:43:97:0b:32:fa:65:a7:f6:3e:66:f8:
00:09:45:6b:7b:34:35:c2:ff:c3:05:16:e0:ee:55:7a:da:e5:
54:98:86:7d:45:50:d0:d7:c7:30:e3:4d:78:7a:ad:7c:c0:26:
01:05:d5:1e:ec:72:cf:e0:96:ab:e3:56:40:47:69:d6:27:03:
f4:b2:d6:95:a6:2a:e8:2a:9d:ee:12:7e:da:80:03:47:f0:8a:
07:44:3c:de:b5:23:45:21:37:5d:8c:0c:63:97:a4:e0:67:1f:
10:8c:d7:ac:91:72:56:33:90:16:6e:b2:ca:15:85:a3:a1:1f:
11:94:af:4f:58:b5:c5:8e:a5:71:6d:16:dc:ce:bf:e8:36:3b:
0b:ad:44:6a:db:0e:94:99:60:3c:ab:2f:87:fc:11:8a:a7:ca:
14:cd:c6:fc:ea:79:9f:d1:f2:c9:01:78:ed:20:26:0c:67:c8:
de:e2:6c:45:03:04:c9:b4:71:33:b7:12:7a:70:d8:01:8a:c1:
b6:9d:6b:6d:f6:68:14:49:87:c5:65:c0:b1:51:ae:70:b0:05:
b8:c0:de:86:77:f2:cd:bc:ff:5d:8d:e4:5c:eb:77:40:53:75:
1a:4b:48:c1:0b:5e:5a:91:f5:d2:45:ee:54:86:4f:aa:da:06:
42:ae:fe:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:53 2026 by rpki-client