Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
File: Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft (raw, json)
Hash identifier: QY/BhdIUlPL4ZjQLF1urDBteOk/5Jx4CvAwf8qfX7hc=
Subject key identifier: 29:FE:EE:97:85:97:22:33:DE:D1:48:66:3F:83:82:94:38:6A:0D:B2
Authority key identifier: 25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
Certificate issuer: /CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Certificate serial: 019F8F7EABD9C17B1A749853F76966DDEC2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:11 +0000
Manifest this update: Thu 23 Jul 2026 15:01:11 +0000
Manifest next update: Fri 24 Jul 2026 15:01:11 +0000
Files and hashes: 1: C0q_FEBxSMrd9E0lH1qFkI0HoA4.roa (hash: z039AMhLSdjI+bLUAHVfZeXYFKTMJ1GuEuS23INfAZY=)
2: Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl (hash: 1vORWjW1pGddPw9ROz07ps0lslVISCm5vPFLH4uwfaI=)
3: mctbCwQm4KKjmeToBymcjKVxZA4.asa (hash: DrGRHy1qtMiaOeuOWdrwLS9l4ACbw4Gg+jvObrN5Pi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:ab:d9:c1:7b:1a:74:98:53:f7:69:66:dd:ec:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Validity
Not Before: Jul 23 15:01:11 2026 GMT
Not After : Jul 24 15:01:11 2026 GMT
Subject: CN=29feee9785972233ded148663f838294386a0db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:66:58:07:18:80:06:11:38:f1:f7:e4:74:
cb:fa:94:34:87:8a:03:cf:d0:b5:d7:25:0a:95:50:
13:84:0a:7d:10:4f:e1:2f:b5:50:27:11:d8:6c:f3:
2f:b8:46:79:69:d4:e1:37:74:01:89:b8:9a:a2:4b:
af:cf:a9:de:dc:f2:2a:78:67:05:72:53:22:b4:ed:
44:69:39:67:c8:7d:28:dd:1f:18:6f:03:84:39:7c:
98:45:54:59:26:89:6f:17:cc:15:f3:bc:a9:7d:b5:
79:60:ce:93:a7:35:73:f0:f1:1f:9f:df:01:b1:26:
72:4b:d7:43:6d:f5:df:52:49:93:78:8b:54:25:6e:
69:f2:4a:88:66:e9:15:75:97:ff:45:e0:99:20:64:
92:b6:a5:7e:b1:6c:d7:39:2c:95:7c:5e:12:ed:3a:
7c:d5:ad:29:5f:1b:07:5e:05:c8:3e:9b:00:b8:bf:
32:9b:6a:eb:0c:f2:79:95:41:ff:8a:9c:0d:22:1b:
2b:9e:1e:35:c2:90:28:d6:3d:e4:be:25:3a:e4:7e:
04:9d:d0:1c:c2:1a:98:99:d6:24:9a:f0:fe:3e:a8:
63:3d:8a:22:70:b4:bb:77:35:a3:fc:c0:54:53:6e:
99:35:4e:bc:46:d1:fb:67:4f:93:3f:d6:1f:c8:e7:
b0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FE:EE:97:85:97:22:33:DE:D1:48:66:3F:83:82:94:38:6A:0D:B2
X509v3 Authority Key Identifier:
keyid:25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:99:0e:65:f7:ed:ef:17:ac:1c:f7:fd:8d:79:32:7a:bf:c3:
b0:d8:10:f9:a2:e0:07:ca:1a:cc:cf:f3:c3:bd:7a:99:2a:b5:
f1:ce:54:93:e3:dd:2c:9c:4e:b1:9b:fc:47:ca:75:31:49:2f:
3b:a9:4c:95:e4:08:45:32:a0:f5:22:21:d6:5d:21:7d:b7:00:
07:cd:9c:fd:f3:6f:1f:4f:69:40:db:aa:85:5c:ed:ae:df:21:
42:d9:40:df:40:28:85:b8:83:ac:9e:55:2f:5a:c2:23:5e:90:
9d:73:93:4f:4f:48:d6:55:d5:90:0d:b1:e1:ca:a2:db:8e:56:
5c:da:8a:7d:b4:f6:6b:cf:b6:55:6b:c1:4d:4a:29:32:62:6d:
57:4f:79:a9:66:d5:ef:93:31:7d:b8:5e:7c:97:8c:ce:54:be:
86:8a:e9:3f:b7:fe:4a:42:09:19:b8:56:2c:66:a6:15:48:f4:
14:ab:82:37:ab:2e:ed:92:c6:64:30:de:fd:db:39:46:13:c5:
57:c7:4e:45:46:26:69:db:6f:61:0f:50:c1:6f:eb:32:ac:28:
c8:00:cc:6a:af:32:11:ae:3e:dd:ad:18:89:43:8d:a0:44:f6:
c2:06:2c:83:03:f3:8c:33:56:3c:ae:b7:6e:fc:c5:44:e9:b5:
13:0c:56:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfqvZwXsadJhT92lm3ewtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YTlmZjFjNmY2ZTJjODUwYzI5OTExNzlmZTUyMWJjMTE2
Njc3MDMwHhcNMjYwNzIzMTUwMTExWhcNMjYwNzI0MTUwMTExWjAzMTEwLwYDVQQD
EygyOWZlZWU5Nzg1OTcyMjMzZGVkMTQ4NjYzZjgzODI5NDM4NmEwZGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKlmWAcYgAYROPH35HTL+pQ0h4oD
z9C11yUKlVAThAp9EE/hL7VQJxHYbPMvuEZ5adThN3QBibiaokuvz6ne3PIqeGcF
clMitO1EaTlnyH0o3R8YbwOEOXyYRVRZJolvF8wV87ypfbV5YM6TpzVz8PEfn98B
sSZyS9dDbfXfUkmTeItUJW5p8kqIZukVdZf/ReCZIGSStqV+sWzXOSyVfF4S7Tp8
1a0pXxsHXgXIPpsAuL8ym2rrDPJ5lUH/ipwNIhsrnh41wpAo1j3kviU65H4EndAc
whqYmdYkmvD+PqhjPYoicLS7dzWj/MBUU26ZNU68RtH7Z0+TP9YfyOew0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCn+7peFlyIz3tFIZj+DgpQ4ag2yMB8GA1UdIwQY
MBaAFCWp/xxvbiyFDCmRF5/lIbwRZncDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmFuX0hHOXVMSVVNS1pFWG4tVWh2QkZtZHdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAt
YzIzZjczMTM2MmNlLzEvSmFuX0hHOXVMSVVNS1pFWG4tVWh2QkZtZHdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAtYzIzZjczMTM2MmNl
LzEvSmFuX0hHOXVMSVVNS1pFWG4tVWh2QkZtZHdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZkOZfft
7xesHPf9jXkyer/DsNgQ+aLgB8oazM/zw716mSq18c5Uk+PdLJxOsZv8R8p1MUkv
O6lMleQIRTKg9SIh1l0hfbcAB82c/fNvH09pQNuqhVztrt8hQtlA30AohbiDrJ5V
L1rCI16QnXOTT09I1lXVkA2x4cqi245WXNqKfbT2a8+2VWvBTUopMmJtV095qWbV
75MxfbhefJeMzlS+horpP7f+SkIJGbhWLGamFUj0FKuCN6su7ZLGZDDe/ds5RhPF
V8dORUYmadtvYQ9QwW/rMqwoyADMaq8yEa4+3a0YiUONoET2wgYsgwPzjDNWPK63
bvzFROm1EwxW7w==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:57 2026 by rpki-client