Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier: yEhKifVD6zenLp/V1fEqgUlXcx4J/ohw6ppZdCpYe+M=
Subject key identifier: C7:29:62:FE:F9:BA:1B:09:65:E7:E0:DE:9D:3C:70:44:1F:42:9F:EB
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 019F946D5A0C8787CE3E107C7AC1FCA2E017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 14:00:22 +0000
Manifest this update: Fri 24 Jul 2026 14:00:22 +0000
Manifest next update: Sat 25 Jul 2026 14:00:22 +0000
Files and hashes: 1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: /Mtw3ltaSsq6ciJXXPoac8hgLJlcBKPcpoLtJScz0fM=)
2: lSlG7rI2eJuiPKf-HzKcyhBPp1g.roa (hash: 53i2XoHaeuLLxKqYVRpE4lR9h2EBCgSQcRQiDH1i//M=)
3: scC5gNxexOD9_MYBJVYJT8pP6Ag.roa (hash: yC68S8mkaapsGvYB3k9kgiLL9Ie9a4V0LG7QX9QvJvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:5a:0c:87:87:ce:3e:10:7c:7a:c1:fc:a2:e0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Jul 24 14:00:22 2026 GMT
Not After : Jul 25 14:00:22 2026 GMT
Subject: CN=c72962fef9ba1b0965e7e0de9d3c70441f429feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:9b:ce:1c:1e:15:2a:83:e3:06:d7:d9:4c:
95:36:b3:51:52:1f:16:df:f6:3e:68:91:1d:89:e9:
a2:e5:bd:b0:c0:3c:d4:b8:93:68:81:5f:8f:94:b9:
22:00:2a:a5:09:56:c7:d9:5e:4a:04:38:09:7a:dd:
5b:55:08:d8:23:09:07:65:73:6d:90:c5:18:42:b6:
c4:2f:23:0d:84:d8:73:1d:33:f7:e6:f0:7e:c3:8f:
07:fc:6b:e8:99:fd:20:2b:4d:4c:5a:ac:df:7d:60:
f3:28:7c:f7:03:31:f8:85:44:a8:05:4e:84:d4:55:
b9:89:03:a7:08:7f:22:87:5a:8d:50:16:12:ad:9f:
7c:a9:02:c4:5f:ae:3d:bb:4b:52:4d:04:3b:57:02:
d3:fc:79:7d:ac:be:82:90:a4:65:0f:bd:7c:7d:10:
90:e2:fc:4b:f9:6b:32:4d:bc:03:86:b2:c8:5d:8f:
4e:f0:3b:1e:68:8f:cf:fa:1e:bc:13:5f:33:ed:0b:
43:7d:f8:5f:1e:3e:4d:b7:07:34:aa:46:5d:ce:18:
40:68:3f:b9:41:fc:3f:bc:c9:6f:08:d1:66:6b:d0:
3a:ac:d6:b3:e3:c1:73:90:2a:0b:d0:5a:8a:fc:99:
f9:43:29:72:05:8d:48:d3:2e:5a:69:06:5b:f4:98:
f9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:29:62:FE:F9:BA:1B:09:65:E7:E0:DE:9D:3C:70:44:1F:42:9F:EB
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:35:63:7b:cf:74:99:95:90:fa:a8:96:b6:ab:5d:04:6a:82:
ad:00:48:cc:89:75:56:91:2b:d7:bd:b7:ff:e6:0e:cd:be:f8:
83:55:79:c5:54:f7:65:ba:a5:39:f8:29:0f:f6:f0:3c:e2:30:
07:d9:0b:5e:b5:28:ea:38:63:27:22:f3:c7:07:dc:7e:4c:bd:
75:3e:40:f6:00:ae:94:e4:02:93:28:71:0a:23:66:ee:8f:da:
7c:f3:67:f8:3a:cd:c3:97:56:2e:69:4e:5c:48:72:82:00:f8:
21:59:dd:d9:99:82:d8:c0:b9:b3:b1:d7:98:32:8e:03:d8:2d:
dd:8e:34:75:f7:95:71:28:a0:bf:a7:89:35:c4:53:5f:b8:e1:
83:3f:12:fe:0c:a7:27:1d:bf:e0:fe:94:0a:76:c6:ae:2c:51:
6b:e1:8e:b7:ef:b3:de:0c:bb:d7:9d:df:c6:c3:bd:72:57:33:
10:b1:b2:af:cf:a3:66:2e:8f:e1:dd:fc:9e:0d:27:fe:8c:d3:
39:05:b2:96:55:24:37:32:66:3e:01:b6:82:8a:e0:ab:97:c7:
dc:f9:24:bc:fe:85:57:7e:25:f5:4a:48:0c:3c:71:09:e2:19:
94:03:b8:23:a6:dd:89:54:68:48:e4:f8:65:7e:ba:58:10:fe:
95:a7:31:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UbVoMh4fOPhB8esH8ouAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZGNmMjZmNzQ4NjA1ODhjYWM2YmFlMTdmOTlkZTIyZGJj
NDlhZTYwHhcNMjYwNzI0MTQwMDIyWhcNMjYwNzI1MTQwMDIyWjAzMTEwLwYDVQQD
EyhjNzI5NjJmZWY5YmExYjA5NjVlN2UwZGU5ZDNjNzA0NDFmNDI5ZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSSbzhweFSqD4wbX2UyVNrNRUh8W
3/Y+aJEdiemi5b2wwDzUuJNogV+PlLkiACqlCVbH2V5KBDgJet1bVQjYIwkHZXNt
kMUYQrbELyMNhNhzHTP35vB+w48H/Gvomf0gK01MWqzffWDzKHz3AzH4hUSoBU6E
1FW5iQOnCH8ih1qNUBYSrZ98qQLEX649u0tSTQQ7VwLT/Hl9rL6CkKRlD718fRCQ
4vxL+WsyTbwDhrLIXY9O8DseaI/P+h68E18z7QtDffhfHj5Ntwc0qkZdzhhAaD+5
Qfw/vMlvCNFma9A6rNaz48FzkCoL0FqK/Jn5QylyBY1I0y5aaQZb9Jj5+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcpYv75uhsJZefg3p08cEQfQp/rMB8GA1UdIwQY
MBaAFIzc8m90hgWIysa64X+Z3iLbxJrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kNWIxYTctNDY2ZC00NzFjLWE3MGMt
MmZiMjVhYmZkYzUzLzEvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9kNWIxYTctNDY2ZC00NzFjLWE3MGMtMmZiMjVhYmZkYzUz
LzEvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTVje890
mZWQ+qiWtqtdBGqCrQBIzIl1VpEr1723/+YOzb74g1V5xVT3ZbqlOfgpD/bwPOIw
B9kLXrUo6jhjJyLzxwfcfky9dT5A9gCulOQCkyhxCiNm7o/afPNn+DrNw5dWLmlO
XEhyggD4IVnd2ZmC2MC5s7HXmDKOA9gt3Y40dfeVcSigv6eJNcRTX7jhgz8S/gyn
Jx2/4P6UCnbGrixRa+GOt++z3gy7153fxsO9clczELGyr8+jZi6P4d38ng0n/ozT
OQWyllUkNzJmPgG2gorgq5fH3PkkvP6FV34l9UpIDDxxCeIZlAO4I6bdiVRoSOT4
ZX66WBD+lacxrg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:02:05 2026 by rpki-client