
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File: JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier: vUxBEfwBkurXLjcdW6TowFa0tG7YvVa2+zs3ht8H1Jw=
Subject key identifier: 78:5E:9E:1E:9E:42:BA:2F:84:17:BF:A8:0F:04:EE:36:32:54:B6:97
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial: 019F9436F00B92282CCF516B94072AFBDE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 13:00:56 +0000
Manifest this update: Fri 24 Jul 2026 13:00:56 +0000
Manifest next update: Sat 25 Jul 2026 13:00:56 +0000
Files and hashes: 1: 5iJn7j9NwT_4zRsEmDpwaHGzgK8.roa (hash: Bq7Db27aznpNLmbu0ahDjZ7PeJYf+EQGmsNOgekFe6w=)
2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: 4mFJmcrh7tCIT418zwiQ2YKjziH8GefUMRKmAXl6Xl4=)
3: wCBMxNVW2s2juIQvGN-nvZjm17I.roa (hash: 3w8A09CcQCqIlBuWIFasyBemt1OICie2jVw2nf/HSKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:f0:0b:92:28:2c:cf:51:6b:94:07:2a:fb:de:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Validity
Not Before: Jul 24 13:00:56 2026 GMT
Not After : Jul 25 13:00:56 2026 GMT
Subject: CN=785e9e1e9e42ba2f8417bfa80f04ee363254b697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:64:28:1c:45:fb:6e:1c:d2:88:2a:d9:dd:bc:
2e:3d:22:84:10:f1:9a:8a:e6:5c:9e:b5:16:01:9f:
74:03:5b:b4:1c:71:19:08:f5:c9:d5:e2:05:e5:f3:
1f:8b:11:49:a3:c0:ca:e2:3d:27:ed:11:e7:16:32:
18:cd:a0:57:a7:3c:2e:90:30:1a:a7:24:4e:a4:38:
ad:28:ba:3a:c4:3c:29:85:4f:48:9f:7a:44:54:d5:
ff:a0:1d:b9:34:25:0b:ad:a2:28:e4:12:6d:66:39:
af:e8:b5:a6:6c:d1:d1:c1:7d:6d:96:1f:3f:23:f7:
d5:8a:ae:34:64:c2:25:4b:66:f7:d5:23:9e:38:d8:
3d:06:0c:81:00:35:b9:94:f1:75:bd:79:8e:12:24:
62:02:28:19:c4:ad:ff:df:c6:c2:6c:3c:59:37:1d:
ac:98:ff:51:fc:1d:b1:1d:7d:b5:d4:e6:0a:cb:a5:
3d:2b:c6:03:78:95:14:ed:e1:8e:bd:14:95:db:23:
f8:49:cc:3c:7f:13:30:1e:d6:a5:c6:04:7c:bf:99:
4b:da:5c:31:45:88:71:8b:6e:d6:bc:18:09:95:28:
8b:71:d9:d4:92:eb:c9:bd:46:d4:80:d5:7a:0a:a8:
4d:f5:08:76:15:c5:af:dc:85:d8:74:78:ac:99:95:
e7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5E:9E:1E:9E:42:BA:2F:84:17:BF:A8:0F:04:EE:36:32:54:B6:97
X509v3 Authority Key Identifier:
keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a2:95:58:af:14:99:b1:dd:86:ed:6c:9a:61:48:6e:bb:42:
24:4c:0c:33:59:4c:75:54:b2:7f:19:da:d6:e7:e1:ac:f2:fa:
5c:17:02:e9:ea:82:2d:41:ce:7a:19:7a:d0:f0:3c:77:c0:41:
4d:f3:30:85:9e:a1:9c:d3:32:57:1e:0c:1d:bc:a8:59:50:0e:
79:ec:61:a1:d3:25:1d:9e:3a:ca:9f:51:a9:6e:e0:df:54:c9:
80:5f:27:a2:9d:d8:fc:97:94:0a:23:36:5b:ba:29:77:1b:18:
22:32:86:4c:ef:b2:20:7b:14:72:69:62:99:bf:af:6f:44:93:
52:6d:08:6a:71:d5:25:ec:23:26:6b:fe:cb:4f:b7:18:de:a0:
48:c8:d5:23:b0:7f:2b:cc:42:1e:97:e8:b1:f0:ed:48:8b:ee:
1f:f4:ec:c2:96:24:10:b5:7c:68:63:90:7e:f6:fe:bf:9a:f2:
36:2e:4a:09:e1:c6:13:ec:ae:d1:53:30:a9:52:f3:e3:7a:f2:
55:7d:9a:73:b7:df:ff:85:ab:c1:56:b3:be:f5:56:1c:71:33:
a1:8e:30:f7:2b:4f:b2:8e:2d:4d:3e:5d:3e:3c:56:96:e7:de:
a0:0a:c7:4f:c4:97:17:25:51:2f:2e:77:8c:0b:05:94:20:d4:
cc:41:c8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:45:14 2026 by rpki-client