
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.mft
File: Jg12BCKSiW-WU6ponkFgeUKzT4c.mft (raw, json)
Hash identifier: fKMUAdTsdQZ6+Tbz18gwyUgkv8J62mHLgy4P6ZPVpsU=
Subject key identifier: 52:4F:0F:00:0A:BC:F1:9E:23:36:16:A0:F6:B1:E4:D2:25:23:76:C8
Authority key identifier: 26:0D:76:04:22:92:89:6F:96:53:AA:68:9E:41:60:79:42:B3:4F:87
Certificate issuer: /CN=260d76042292896f9653aa689e41607942b34f87
Certificate serial: 019F94A4CEDE7333AEE2AB22627DED140DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jg12BCKSiW-WU6ponkFgeUKzT4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.mft
Manifest number: 32
Signing time: Fri 24 Jul 2026 15:00:56 +0000
Manifest this update: Fri 24 Jul 2026 15:00:56 +0000
Manifest next update: Sat 25 Jul 2026 15:00:56 +0000
Files and hashes: 1: Jg12BCKSiW-WU6ponkFgeUKzT4c.crl (hash: LR4e1wg04SiOO/blzNxIZFvej2uEWx0OCzIXDPz6ukk=)
2: dA5GHyWkiinW-X3ggJL5uaWKg90.roa (hash: AobSuh+m+/JdWn6/war1pe24bAV9jiWfGNJFdO8s0gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jg12BCKSiW-WU6ponkFgeUKzT4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:ce:de:73:33:ae:e2:ab:22:62:7d:ed:14:0d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260d76042292896f9653aa689e41607942b34f87
Validity
Not Before: Jul 24 15:00:56 2026 GMT
Not After : Jul 25 15:00:56 2026 GMT
Subject: CN=524f0f000abcf19e233616a0f6b1e4d2252376c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:3a:b4:fe:81:04:1c:ac:84:8e:b1:e2:c7:
7b:4a:91:3e:38:2e:ce:13:09:de:ea:46:a8:0d:28:
11:bc:e9:a0:f2:f0:d5:45:1d:ec:33:b9:9e:d2:75:
0f:0f:a2:92:61:13:54:26:e6:b4:db:12:74:82:b7:
96:8e:d1:2a:91:da:76:92:77:2d:f6:ed:56:9d:2b:
41:ce:76:62:3e:78:43:0d:f2:22:62:a7:e0:06:a3:
5a:68:e1:57:77:7a:21:27:71:d3:29:c0:17:26:6b:
ea:6c:78:54:6b:17:41:c5:4f:55:89:3d:fc:5f:25:
68:ff:f0:66:95:f2:10:23:5e:ad:9a:6a:3d:00:26:
cd:1d:48:c2:c3:90:8e:e8:8a:e2:48:a2:78:4d:ca:
00:e7:46:50:c8:87:61:e0:10:da:13:3c:95:64:4c:
2b:39:6d:c1:39:16:c0:6b:8b:c3:fc:24:ca:6a:fe:
38:9c:8a:dd:08:b4:03:9b:6f:6f:a5:93:c9:b9:f4:
52:83:8b:a4:10:f7:c2:03:e7:5e:e8:b3:92:76:4c:
43:9b:6c:87:b1:ce:3b:7f:a2:c5:6b:8f:81:da:b3:
c0:36:c6:5f:c8:bd:81:ba:84:95:b7:26:42:0e:31:
c3:ee:e7:0a:22:50:9b:5f:89:e0:ce:7e:cf:0b:71:
8c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4F:0F:00:0A:BC:F1:9E:23:36:16:A0:F6:B1:E4:D2:25:23:76:C8
X509v3 Authority Key Identifier:
keyid:26:0D:76:04:22:92:89:6F:96:53:AA:68:9E:41:60:79:42:B3:4F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg12BCKSiW-WU6ponkFgeUKzT4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0c:1d:8e:00:06:c6:6d:e5:4a:58:ee:5d:a7:84:4a:bd:d4:
2f:33:6f:b0:b8:67:08:5d:97:36:fc:48:15:0b:0c:bc:17:74:
de:58:49:4e:f0:38:bd:6b:b7:b2:6b:58:85:fa:ef:79:56:7b:
a7:ab:b1:5f:61:2e:b5:58:ae:1f:45:fc:8b:50:51:56:5f:90:
b1:7b:85:55:58:08:90:e7:89:c1:ee:20:2f:65:ec:0a:5a:66:
41:64:a5:4e:0d:4b:d8:32:ab:ea:6e:84:f4:10:d5:02:f0:78:
f1:1d:a1:94:96:a0:2c:76:9e:d0:3a:6c:5d:da:40:67:8e:88:
49:bd:f6:ac:58:28:7f:2a:d1:c5:91:74:93:2f:a7:47:57:cb:
d5:36:3c:f4:ee:11:77:6c:89:0b:03:94:77:0b:d1:54:94:24:
5f:b5:89:a0:9b:c2:f7:be:bd:29:6c:68:01:18:82:b9:5b:a0:
4e:09:38:ae:9f:c6:91:af:8c:90:c9:9a:04:3b:93:6d:6f:21:
07:53:23:bd:dc:50:be:42:fc:ab:71:1c:24:09:be:a2:64:52:
07:32:a1:07:5a:b2:fe:f8:f2:2c:de:a6:13:fe:17:0a:58:df:
fa:06:d6:24:b5:ad:81:3c:42:70:03:ff:2b:3a:e5:10:36:ff:
2e:3a:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:53 2026 by rpki-client