Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier: uYUNHOLgUeUE+k1BCT2eDbm/2Pz7lbfGK3tR7vgLuH4=
Subject key identifier: 87:F6:FC:72:0F:E3:DE:B8:DA:19:14:85:18:8F:DB:F4:F3:2C:DD:31
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial: 019F91A3CD4DBABAA72C421EA223F99A877D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number: 1479
Signing time: Fri 24 Jul 2026 01:00:58 +0000
Manifest this update: Fri 24 Jul 2026 01:00:58 +0000
Manifest next update: Sat 25 Jul 2026 01:00:58 +0000
Files and hashes: 1: 70JHdnkKgsjKCsL3ulG1wQpZGp4.roa (hash: +7UX7nSd4wTkbsTAwwas6oJrJFj4JuJ4qtAQ6S+C8Y8=)
2: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: sDSlKtOY7SNp9s4U1XOEucoW+bHlsPr9C9IGrVnc434=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:cd:4d:ba:ba:a7:2c:42:1e:a2:23:f9:9a:87:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Validity
Not Before: Jul 24 01:00:58 2026 GMT
Not After : Jul 25 01:00:58 2026 GMT
Subject: CN=87f6fc720fe3deb8da191485188fdbf4f32cdd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:8e:60:09:15:12:54:f6:94:9c:8c:2d:7f:
d8:b5:bd:8e:42:73:94:2b:be:26:95:be:ee:8d:fc:
84:29:c8:ce:df:0b:53:49:05:06:bc:d2:f1:7e:97:
d7:3d:bc:82:f7:6c:2d:e4:43:34:5c:3f:1e:96:5e:
2a:2b:6c:c7:10:f0:80:40:6d:22:63:2a:33:0b:34:
8b:b0:5c:46:78:90:f5:23:41:af:a4:bb:f4:fa:88:
ae:fa:03:81:cd:71:b4:53:ee:33:08:fa:2c:c9:ef:
d3:91:84:c8:2f:37:09:01:37:97:e1:e8:82:dc:c8:
cf:47:87:83:8a:12:45:9d:96:c0:b4:6d:5d:ae:65:
a9:3b:ec:59:4b:a4:b7:55:00:bb:42:a4:3e:57:25:
f4:5c:07:ae:6b:fc:c1:8d:74:9e:db:01:1d:6d:98:
33:dd:68:8f:5e:49:59:3a:1d:74:20:2d:40:c8:aa:
d0:03:72:48:62:9c:88:27:02:a3:94:fa:e5:f6:3b:
a0:7f:bc:3a:a3:35:99:a0:03:5f:d4:64:a1:bb:47:
34:ef:d2:75:99:54:7c:6c:f7:4e:b4:c3:0f:46:5f:
fd:e3:d0:2e:74:8d:85:d6:e1:36:a6:be:9e:1b:d4:
67:28:6f:b2:52:69:25:8f:63:e9:05:93:36:0a:ac:
ca:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F6:FC:72:0F:E3:DE:B8:DA:19:14:85:18:8F:DB:F4:F3:2C:DD:31
X509v3 Authority Key Identifier:
keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:08:0e:3c:c3:0f:57:c4:db:85:cd:5d:2f:a5:35:7b:9c:24:
99:5e:e2:e3:fc:16:b9:66:a3:c1:a9:4e:6a:db:52:62:97:13:
a1:0e:92:4a:90:76:21:92:79:9d:48:b2:d0:5b:3c:0f:62:5e:
9b:81:c6:b5:e9:bc:6b:04:d0:9d:6c:01:f1:7f:14:45:cd:65:
57:ad:15:44:ef:82:1a:96:c9:a9:82:e1:1a:a6:f0:fa:ea:66:
90:e1:a1:a6:13:35:23:49:46:67:8f:56:c6:39:f3:b3:2b:78:
90:67:12:c5:d8:d8:18:0e:67:a5:2a:9c:d0:46:f1:14:fb:4d:
e8:10:63:4f:5f:74:1b:7b:3e:08:40:6c:7b:1a:16:c1:c5:a9:
61:c9:bd:3b:9b:03:15:65:e9:55:05:23:a4:b9:f7:07:03:c1:
7f:13:2a:98:27:d3:89:62:13:e9:59:5b:f3:54:24:d7:d3:53:
57:13:af:ae:12:39:2d:39:c5:50:d3:3c:bd:06:94:0a:86:11:
81:db:f9:b2:85:cf:72:03:c1:39:e0:e7:5d:35:7d:cb:37:b6:
3e:2d:89:01:1a:68:ca:85:56:82:c7:16:45:84:13:b5:31:e4:
bc:6a:0b:25:94:c7:bd:85:0d:16:ec:a3:5b:11:a1:36:73:f1:
2f:08:fd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:03:15 2026 by rpki-client