Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: K8qI6nf8ZztLgaqMqZUCIEsQfyWgSg5oVDrlKqTeSIY=
Subject key identifier: C8:1A:23:10:50:46:9C:D7:F9:99:91:1E:C7:5A:7C:55:18:74:F9:A8
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 019FAB635EB13213121D2F11C000BAB536DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 1720
Signing time: Wed 29 Jul 2026 01:00:43 +0000
Manifest this update: Wed 29 Jul 2026 01:00:43 +0000
Manifest next update: Thu 30 Jul 2026 01:00:43 +0000
Files and hashes: 1: jOlvTqoRsdAulg6Y3XpZsAr0oMk.roa (hash: cs60eVRzgZLIh6eTxfnRAFFGp7Qvb56odPMGxJ4uAvU=)
2: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: O0vIqday/rLKGgqm5GKa3GQa/y3OSReS1Ct/Koy6Rf8=)
3: sAH-vh-27sRa8XMB1zXDPSKTTFE.roa (hash: Vvwat5s3NJzZ4utG1tsbAtKbf8nI+e0SigwDHdU+hO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:5e:b1:32:13:12:1d:2f:11:c0:00:ba:b5:36:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Jul 29 01:00:43 2026 GMT
Not After : Jul 30 01:00:43 2026 GMT
Subject: CN=c81a231050469cd7f999911ec75a7c551874f9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:1f:ab:53:96:59:65:28:35:4f:82:ba:93:
9b:0f:53:64:a9:53:00:1f:03:ec:34:95:21:af:b5:
6c:76:38:f7:b1:86:17:e9:5a:e5:88:88:b0:99:47:
70:d4:46:69:46:0a:93:92:6c:50:13:f5:27:05:8f:
57:b3:0c:b5:4b:9c:70:2c:41:fd:e8:b0:32:29:23:
20:8a:d9:02:f0:ec:1a:94:ff:ac:41:8f:af:cd:c4:
36:06:b0:ed:c2:c5:10:42:92:f7:ff:1d:f4:45:27:
a2:9d:a0:0c:d2:d1:25:ca:ef:f8:fb:7f:17:c5:e1:
2a:27:25:58:72:50:8f:07:9b:ce:de:c2:61:0f:98:
b5:f1:13:8f:83:b1:3f:e6:e4:39:91:bd:fc:12:b5:
a9:c9:60:66:a3:a1:c2:19:2f:80:c6:fe:99:41:7e:
24:ae:ec:17:01:29:ea:0f:79:4d:1a:9a:61:d1:a9:
bb:1d:59:bb:9b:f6:2a:be:55:82:6a:f3:3d:8e:33:
58:94:6c:75:6b:d9:ec:77:63:ef:4b:79:40:a1:22:
11:c1:50:39:d4:aa:3d:5f:9d:45:0b:04:80:35:82:
5a:40:57:1a:8a:9f:02:03:b6:e6:19:58:16:79:15:
7e:b3:bf:76:75:51:de:e5:7f:bd:02:08:02:0a:23:
5a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1A:23:10:50:46:9C:D7:F9:99:91:1E:C7:5A:7C:55:18:74:F9:A8
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e5:d4:3c:5d:a1:15:1c:90:91:e1:81:aa:c7:26:f5:85:e5:
fe:6b:d6:ac:16:c1:21:c5:07:fe:1e:1c:69:d7:7f:63:48:60:
c8:76:f9:bc:72:ac:23:42:9f:93:1c:80:e1:92:10:3d:a7:ed:
f4:3c:df:5c:86:ad:90:5a:3a:1f:08:90:14:0b:a3:8d:76:9a:
46:b4:ae:a3:09:63:a6:c9:fa:28:7e:65:f5:a8:bd:00:29:f0:
91:5f:ee:a5:f8:c8:00:52:14:fc:df:fc:57:c6:fe:be:a3:a2:
1e:cc:45:0c:f4:97:23:f2:80:44:b6:34:c7:0f:3c:e0:db:e7:
b6:90:a2:0c:0c:3b:95:e9:1f:b2:57:54:e4:63:f9:2a:f2:67:
72:86:4b:f1:0c:65:10:c6:4b:96:0f:9e:6e:18:8e:5f:9e:55:
26:64:0f:10:13:4b:1c:76:40:96:2e:3f:0a:c4:4b:6d:7c:81:
29:1b:6e:53:ae:1b:9a:f4:4d:01:40:94:e1:eb:4f:c5:1d:28:
5b:43:09:f0:03:d9:d4:37:ce:96:d8:29:33:c8:ca:8a:88:4b:
3b:7a:cc:b4:e3:08:43:cf:62:16:9f:64:84:08:7a:64:aa:9c:
8c:92:6d:94:11:b2:74:08:1c:da:8f:ac:56:95:ad:53:e7:30:
f0:10:43:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:55 2026 by rpki-client