Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier: 1m8ASjNnFOBHlurnFQfKoA/7FbkDujw9udnUhfY6lCc=
Subject key identifier: 53:61:4E:25:9C:FD:21:B8:C9:98:E3:60:1C:17:74:24:96:85:B8:43
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 019FABD12AAA06120BFD48DF3B8C576BDBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number: 12AE
Signing time: Wed 29 Jul 2026 03:00:39 +0000
Manifest this update: Wed 29 Jul 2026 03:00:39 +0000
Manifest next update: Thu 30 Jul 2026 03:00:39 +0000
Files and hashes: 1: 0oxdyMukMZaAGBeo9l9rFsh78pk.roa (hash: DX6ZwX+iC1cN81KUv6aS7NPJaf7Awa86RPypXOmFS5E=)
2: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: jFv7kZRBntrZCCOIpK97Jcgz7u4fFh+rmFybEyfJVyw=)
3: dyVWHuwmCwNemfhA3NEDaxJ2sdw.roa (hash: Q8NYEk98UWxN0ux4Y6DtAD9386w6kojLNf1xUJ5/UcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:2a:aa:06:12:0b:fd:48:df:3b:8c:57:6b:db:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Jul 29 03:00:39 2026 GMT
Not After : Jul 30 03:00:39 2026 GMT
Subject: CN=53614e259cfd21b8c998e3601c1774249685b843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:f7:08:61:51:25:aa:36:74:25:71:cd:ff:
0d:95:26:09:f6:06:a4:43:40:fa:55:c2:eb:6b:cf:
c1:9c:db:69:ac:ac:62:88:e9:f7:b6:0b:47:37:09:
63:74:d7:40:ee:fd:4c:93:1b:58:29:d0:70:3a:2b:
9c:77:3d:ee:dc:1a:72:b8:14:7d:c6:a9:6c:d9:46:
23:d2:a6:d6:fc:e0:d2:5b:3e:40:b4:e9:e1:10:21:
5f:e7:ff:c8:41:4d:0d:8b:56:a8:c8:6f:ab:78:d5:
d0:bf:3e:e3:fb:f4:11:3d:02:62:3d:6e:20:34:03:
f9:a5:de:e4:9c:eb:25:00:f1:59:b4:98:b9:31:44:
23:a5:89:6d:ea:e1:69:f0:b5:89:19:38:6e:ec:4c:
28:41:3c:11:cc:b1:d3:aa:1f:13:8a:7a:15:ab:15:
37:41:4d:41:63:a7:c2:2e:42:44:bc:d9:27:11:73:
a0:43:ca:d3:23:49:2b:4c:0a:c1:84:9c:ed:34:cf:
35:36:0d:9b:1a:08:5d:99:f0:7a:d2:3a:01:1f:67:
ed:28:34:ad:70:1b:75:55:f1:d9:5b:f9:89:0d:9e:
b9:06:ef:b1:aa:89:52:4a:46:16:d6:69:3d:fa:75:
30:3a:63:fa:e2:ff:34:66:c1:a7:f6:fd:61:75:11:
ba:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:61:4E:25:9C:FD:21:B8:C9:98:E3:60:1C:17:74:24:96:85:B8:43
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c5:5a:7a:bf:23:20:64:71:03:f7:81:d8:ad:cc:22:5c:41:
fd:cc:0d:c2:df:72:4f:73:3b:78:e5:0e:40:4a:47:c8:79:5b:
bf:be:38:3c:da:96:35:a5:44:4c:c0:eb:c4:96:5a:0e:f5:2d:
58:97:6b:e8:bf:ba:2e:f9:40:ee:57:11:4e:de:cc:8d:e0:b1:
49:c1:8f:0b:07:71:0f:ac:7f:5a:20:47:1f:69:00:1a:e6:d0:
fd:82:dc:0e:3d:13:65:52:e8:94:43:fa:a8:83:f5:4c:30:c9:
6b:3b:1f:b9:e2:32:62:9f:00:59:19:66:a9:17:23:98:9c:33:
00:45:37:a2:bd:30:00:1b:55:e6:36:7a:d8:13:a1:fe:08:d9:
84:97:da:dc:a7:3e:11:1a:12:d9:5b:0a:50:a2:43:d6:f6:02:
f6:e3:80:d3:42:9c:e9:bf:08:4e:85:fe:bb:61:b6:f3:12:fa:
9c:7e:62:be:d1:99:56:b3:eb:9d:ad:2c:2c:89:8f:44:0e:20:
dd:60:ac:a2:af:00:32:db:2a:49:a9:99:1d:1f:a0:3a:6b:8c:
09:4b:f2:f4:91:c6:b2:a4:55:40:ce:d7:ab:56:fe:6c:7e:af:
f9:90:c0:89:75:bb:16:08:e4:5c:4e:a3:e1:40:b4:7f:c1:4f:
96:0d:ef:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:31:31 2026 by rpki-client