Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier: q/f8j41qEcRvR3Q1Hm1qqEUcsp6ecxnqkpU9wDQfQL4=
Subject key identifier: 99:64:CE:A0:43:9B:BC:CE:25:4E:F9:7F:A3:5B:2D:1A:49:7A:0C:A8
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial: 019FA974FA338E4690FF3B83C88293AECE11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number: 0899
Signing time: Tue 28 Jul 2026 16:00:43 +0000
Manifest this update: Tue 28 Jul 2026 16:00:43 +0000
Manifest next update: Wed 29 Jul 2026 16:00:43 +0000
Files and hashes: 1: 13QEtilMsPvjSBACtmSM2gevovs.roa (hash: 7sZAAEzQHgY8dc7AwJ5Zb9+RwpGZZztjrIKtYajzllU=)
2: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: 6fVIYHjVgKG8J7xvD6Fkh4vRsDR5/0GbDIA6K8MtWuo=)
3: UvLYNIhvwJQmFVsOPpU_BD36ddY.roa (hash: yXxmCleC93S0pqurn9Uelv8pljT932UA9IhlOEdPEeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:fa:33:8e:46:90:ff:3b:83:c8:82:93:ae:ce:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Validity
Not Before: Jul 28 16:00:43 2026 GMT
Not After : Jul 29 16:00:43 2026 GMT
Subject: CN=9964cea0439bbcce254ef97fa35b2d1a497a0ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:1d:d2:5b:d9:44:8a:9b:56:64:01:58:86:
90:6c:54:25:a4:52:f4:66:fd:f8:cb:2c:d2:52:87:
99:5e:b4:f9:8b:37:fc:9f:9c:8c:5e:c1:c7:08:be:
24:11:f9:05:18:43:70:46:ae:37:99:33:de:93:ea:
41:93:7c:e9:c4:87:a2:b7:57:ae:44:d2:d5:cb:b0:
be:09:a7:8c:c3:1c:cf:e8:d6:f8:7a:1f:6d:59:87:
5a:31:10:3b:45:94:ef:bd:a8:29:a1:b7:77:df:c6:
f1:50:07:b5:6c:54:49:b4:c5:07:72:df:a7:f7:74:
6d:6c:26:41:9c:97:9b:84:ce:aa:78:4e:f2:7c:31:
77:6d:91:aa:39:af:29:31:08:64:6b:1e:8c:8b:ee:
d3:89:0c:d2:c4:5d:82:4b:71:69:e8:5f:16:db:39:
5c:c3:c5:c4:aa:2e:4b:3b:46:3c:dd:d0:f2:78:e4:
8d:91:61:1c:93:bf:a6:d9:b9:71:19:50:d4:40:05:
8a:83:70:6b:4a:f8:7f:0d:86:c4:7c:92:c1:91:14:
e9:73:44:6b:bb:db:cc:37:42:1a:69:46:fe:28:de:
27:12:ed:cc:8a:8a:bb:10:90:0a:6f:5d:73:48:4c:
22:0f:fb:03:8d:e9:33:ce:18:b9:bd:2a:2c:c7:79:
50:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:64:CE:A0:43:9B:BC:CE:25:4E:F9:7F:A3:5B:2D:1A:49:7A:0C:A8
X509v3 Authority Key Identifier:
keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:45:a7:11:74:cb:25:b9:f0:47:32:b3:ed:e9:03:47:a9:4c:
98:1e:6a:42:d1:77:53:2d:72:cb:d0:fc:81:b1:22:5a:15:fb:
b2:78:a9:6a:f5:98:7c:c7:52:71:33:4a:d6:7e:7e:f1:98:ad:
21:09:e6:2f:2f:6f:da:6d:45:34:20:19:de:5d:c9:3c:d9:44:
cc:74:f3:93:0e:fc:ec:d2:c0:d1:ed:60:fc:ec:9b:c5:90:80:
91:51:75:9b:05:55:f2:a1:5e:a8:27:54:fd:ac:f9:ea:41:a4:
6e:75:46:03:db:11:e9:de:29:9a:44:51:40:62:f6:b1:c8:2d:
5e:0b:6a:fc:9f:ea:1c:58:1f:9a:3f:9f:72:f2:90:bf:7a:f7:
90:da:97:92:ba:0a:dc:82:00:f9:d2:f7:14:8d:59:6d:9f:93:
78:b0:1e:b9:8d:37:02:c2:40:25:78:cc:40:bf:77:a5:42:63:
eb:f9:b2:9f:af:55:cd:d2:fc:6a:45:86:4d:1d:d3:03:35:4e:
94:38:db:c0:a4:4e:98:bd:3d:ba:f0:c8:e3:a2:eb:cb:c4:9a:
27:52:d2:80:96:54:1f:bb:75:98:02:bb:9f:71:ae:07:6f:25:
83:f6:54:dd:dd:92:2f:2c:56:9d:52:23:25:cd:43:22:12:ce:
a2:db:e4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:01:41 2026 by rpki-client