Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json)
Hash identifier: ZtZ+JGQQ8Lq1PD9dYbC+c4y7K7cXN5qqiU74thcane0=
Subject key identifier: D0:A5:71:BF:F7:AA:0D:E6:85:0B:46:7E:EE:33:32:21:EF:32:74:0D
Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Certificate serial: 019F924823E1F05D47F6AF1EFE04F7B51201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
Manifest number: 14BB
Signing time: Fri 24 Jul 2026 04:00:28 +0000
Manifest this update: Fri 24 Jul 2026 04:00:28 +0000
Manifest next update: Sat 25 Jul 2026 04:00:28 +0000
Files and hashes: 1: L24zb2GPwHD-aPGno9VtNYT_9UA.roa (hash: TV8bwr8KXxyIpZ3hz+LfUH4wszhJw0hokfRXNpqsBSk=)
2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: wY6JogaICBEvi0g+BJ2lkdwmSm6Vf7sNrLyWJtmyMdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:23:e1:f0:5d:47:f6:af:1e:fe:04:f7:b5:12:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Validity
Not Before: Jul 24 04:00:28 2026 GMT
Not After : Jul 25 04:00:28 2026 GMT
Subject: CN=d0a571bff7aa0de6850b467eee333221ef32740d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:4f:15:2b:ac:18:ce:37:58:dd:a3:f5:ed:
ed:52:cc:16:3b:a4:8c:64:0b:b4:ba:25:80:c0:66:
05:ae:30:ae:d5:08:78:86:ba:33:7a:f3:e7:36:e3:
97:12:6f:76:f5:31:cd:2a:a4:96:a5:b3:fd:19:14:
ff:1d:73:d3:69:b5:f1:2f:46:20:a7:ee:fb:78:5d:
db:b7:c2:dc:78:db:10:75:64:d5:47:d9:89:ac:c0:
c0:c4:c1:d6:18:7f:d4:16:46:49:93:4d:b3:c6:e5:
3a:cc:f2:a0:b5:63:45:93:e1:b6:82:7d:99:b4:15:
76:14:3b:0e:c8:8d:a3:6e:07:ea:b6:71:34:c6:69:
f3:43:d3:f8:6a:85:1c:91:07:b3:e0:ba:de:89:55:
d6:9f:01:8e:1f:b3:bb:ba:93:e2:27:bb:3d:3b:5b:
ba:e8:2e:24:c8:88:fe:83:04:2a:d5:67:3b:70:fc:
a8:ea:8d:56:ab:3a:63:69:d8:b2:48:70:ed:dc:99:
93:18:4e:81:2c:43:c2:08:7c:08:fa:39:fd:19:87:
77:0b:14:6c:72:3a:00:42:e3:f7:56:2a:a7:b9:e6:
43:a0:3a:9e:0a:70:54:fa:57:ca:bc:95:84:25:1e:
89:53:e9:e6:07:4d:cb:dd:83:5c:3d:ee:b6:0e:4b:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A5:71:BF:F7:AA:0D:E6:85:0B:46:7E:EE:33:32:21:EF:32:74:0D
X509v3 Authority Key Identifier:
keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e3:f4:0b:90:de:68:53:2c:94:2c:b0:7d:e0:c2:55:91:8e:
3d:94:bd:37:a9:f2:04:1c:45:ce:86:3e:60:9f:18:98:b6:aa:
b2:c7:ef:63:d7:94:b8:0d:9a:f1:18:a1:1c:b4:6f:e9:37:37:
e7:1c:b8:05:a4:f9:de:03:7a:76:88:78:cd:b2:af:6a:80:c0:
15:15:d0:90:32:ba:00:de:67:c4:3f:67:00:97:5f:20:6f:c0:
6f:9e:c7:7e:7e:86:7b:1a:0c:f1:48:3e:fe:33:57:7e:6e:07:
bc:43:99:e2:89:d8:c1:70:60:1c:55:60:10:28:57:5a:28:b2:
19:58:10:03:18:d6:27:1f:e7:11:54:15:36:f5:87:4e:25:13:
ad:9e:3a:2c:05:cb:da:0a:76:5d:4b:25:f7:b7:39:22:ad:77:
1c:84:5f:7d:70:54:24:5c:2a:74:fc:e8:df:a8:8b:ac:32:a6:
52:01:15:b9:c5:70:1d:b5:98:3f:b7:2e:79:53:8e:05:bc:b8:
fd:25:07:75:34:f8:0f:bf:4e:69:c8:1a:89:76:44:c4:fc:5a:
51:26:9f:79:9d:b5:21:95:ab:00:36:56:b9:43:c0:65:ce:b6:
a3:eb:c0:83:6b:09:0a:c8:14:9e:78:0f:72:2a:c1:43:b3:83:
f7:78:76:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:06:10 2026 by rpki-client