Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
File: J5M1a3LBBBztecoRRZUreMtGb8A.mft (raw, json)
Hash identifier: SqRragL+fYUg1Fhmi6yJ/4pPjImivMLn9PH4eltJe7w=
Subject key identifier: C2:67:50:E2:CF:7C:1D:A7:1F:18:8D:99:70:D1:F8:7F:60:11:EB:F7
Authority key identifier: 27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
Certificate issuer: /CN=2793356b72c1041ced79ca1145952b78cb466fc0
Certificate serial: 019F916D14D90791CAB7338E84276120335A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
Manifest number: 010C
Signing time: Fri 24 Jul 2026 00:01:12 +0000
Manifest this update: Fri 24 Jul 2026 00:01:12 +0000
Manifest next update: Sat 25 Jul 2026 00:01:12 +0000
Files and hashes: 1: J5M1a3LBBBztecoRRZUreMtGb8A.crl (hash: PLRQ1g6qIGPb0OuMwbs0SiFeaZnyOJnESW80DOGWgaw=)
2: iXFt1KY0aqsyx-9Vdc9e4RKOA5Y.asa (hash: UPxLBpOmrMbXDNQ7hogNRA77L99FxDK6/MOEI7JjMOY=)
3: nqLy6vXc7QJkT8qVeO-NeJ41RTQ.roa (hash: UPdkXkVzcf45jUKtURLaO9b8juj9XHNGGiuikA8ZS84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:14:d9:07:91:ca:b7:33:8e:84:27:61:20:33:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793356b72c1041ced79ca1145952b78cb466fc0
Validity
Not Before: Jul 24 00:01:12 2026 GMT
Not After : Jul 25 00:01:12 2026 GMT
Subject: CN=c26750e2cf7c1da71f188d9970d1f87f6011ebf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:8a:60:79:61:c6:08:d5:28:54:e7:d4:74:
cc:b1:ed:c1:53:2d:a5:7f:d7:fe:25:bf:75:44:ec:
e8:02:d0:32:bd:06:ec:fd:2b:cb:94:1e:cc:d2:5d:
9f:2a:78:57:74:b8:15:bd:8b:13:93:79:e9:1f:ce:
a3:fd:a9:41:e0:af:0f:03:54:d3:e5:61:91:ac:ae:
13:4d:04:95:6e:31:b6:a0:79:97:e9:45:2a:7f:5c:
c5:b0:6a:25:70:52:16:f6:fe:d7:61:78:55:7b:ac:
e1:1a:6a:14:f1:8a:56:ea:75:f2:ff:60:1b:85:fa:
6e:15:02:b5:53:88:0e:32:fd:09:4d:5c:0e:06:da:
64:66:7a:b5:04:de:3f:95:de:c4:cb:69:47:40:05:
42:1f:6f:a4:14:7a:a8:14:46:2d:00:0f:7c:aa:6e:
03:0c:77:8f:99:35:31:be:40:b4:73:15:1d:fd:1e:
93:b8:0f:95:a3:eb:1d:08:5a:b1:50:01:f3:a2:c0:
85:9a:1b:99:36:aa:94:16:21:93:53:c7:09:3c:99:
0a:88:d9:bb:b4:26:26:bb:24:b3:3b:44:a3:c6:f4:
51:f0:74:19:1a:8f:bf:3d:fc:a4:7e:16:c4:0d:00:
68:2f:74:16:c7:18:5a:dc:d6:a5:73:86:2f:af:3d:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:67:50:E2:CF:7C:1D:A7:1F:18:8D:99:70:D1:F8:7F:60:11:EB:F7
X509v3 Authority Key Identifier:
keyid:27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:55:1d:f6:46:67:e5:67:2b:37:5c:41:16:b6:2f:93:6f:b1:
e9:ce:72:3f:7a:a4:c3:4b:0e:79:a5:e5:43:bf:52:a6:12:81:
c6:3b:45:a7:11:62:4a:7d:71:22:86:12:ba:ed:99:14:e3:d5:
d2:7f:1a:78:e7:c7:46:6b:f4:34:f3:b3:44:1c:95:10:34:73:
04:e8:cf:a1:11:0e:7e:71:2c:a1:f9:52:8d:df:e2:7a:d8:25:
77:bc:76:6a:cd:53:67:e6:d5:df:e7:9b:b5:6c:5f:09:dd:e3:
96:25:00:5d:14:bf:79:93:7c:5a:34:d7:c3:34:5c:a0:28:bd:
48:c3:41:ee:fa:90:01:7d:34:2e:49:14:2f:03:93:7b:4c:47:
6d:9f:15:02:8d:ad:f7:60:aa:9d:55:42:c2:4d:4d:66:10:9d:
7f:e3:49:77:8d:17:0a:b8:d8:ae:23:6f:65:ba:d9:5e:d9:fe:
73:06:35:aa:ed:99:cd:2c:30:cb:c0:8e:8f:be:9c:3a:7d:e0:
c5:a6:42:ef:fe:81:ca:c7:47:84:dc:3d:4d:57:05:6e:b9:41:
4b:3d:b3:20:53:02:e5:b2:9c:82:89:ff:e5:5a:2f:fe:a8:be:
47:d8:c1:62:dd:71:52:a0:b2:9a:07:2b:9d:5b:47:42:c1:49:
8f:0e:0f:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbRTZB5HKtzOOhCdhIDNaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OTMzNTZiNzJjMTA0MWNlZDc5Y2ExMTQ1OTUyYjc4Y2I0
NjZmYzAwHhcNMjYwNzI0MDAwMTEyWhcNMjYwNzI1MDAwMTEyWjAzMTEwLwYDVQQD
EyhjMjY3NTBlMmNmN2MxZGE3MWYxODhkOTk3MGQxZjg3ZjYwMTFlYmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYyKYHlhxgjVKFTn1HTMse3BUy2l
f9f+Jb91ROzoAtAyvQbs/SvLlB7M0l2fKnhXdLgVvYsTk3npH86j/alB4K8PA1TT
5WGRrK4TTQSVbjG2oHmX6UUqf1zFsGolcFIW9v7XYXhVe6zhGmoU8YpW6nXy/2Ab
hfpuFQK1U4gOMv0JTVwOBtpkZnq1BN4/ld7Ey2lHQAVCH2+kFHqoFEYtAA98qm4D
DHePmTUxvkC0cxUd/R6TuA+Vo+sdCFqxUAHzosCFmhuZNqqUFiGTU8cJPJkKiNm7
tCYmuySzO0SjxvRR8HQZGo+/PfykfhbEDQBoL3QWxxha3Nalc4Yvrz25kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJnUOLPfB2nHxiNmXDR+H9gEev3MB8GA1UdIwQY
MBaAFCeTNWtywQQc7XnKEUWVK3jLRm/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjVNMWEzTEJCQnp0ZWNvUlJaVXJlTXRHYjhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83YTBiYTMtYjVjZS00MjliLTk5OTAt
NTAwYTllYjllNDBmLzEvSjVNMWEzTEJCQnp0ZWNvUlJaVXJlTXRHYjhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy83YTBiYTMtYjVjZS00MjliLTk5OTAtNTAwYTllYjllNDBm
LzEvSjVNMWEzTEJCQnp0ZWNvUlJaVXJlTXRHYjhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFUd9kZn
5WcrN1xBFrYvk2+x6c5yP3qkw0sOeaXlQ79SphKBxjtFpxFiSn1xIoYSuu2ZFOPV
0n8aeOfHRmv0NPOzRByVEDRzBOjPoREOfnEsoflSjd/ietgld7x2as1TZ+bV3+eb
tWxfCd3jliUAXRS/eZN8WjTXwzRcoCi9SMNB7vqQAX00LkkULwOTe0xHbZ8VAo2t
92CqnVVCwk1NZhCdf+NJd40XCrjYriNvZbrZXtn+cwY1qu2ZzSwwy8COj76cOn3g
xaZC7/6BysdHhNw9TVcFbrlBSz2zIFMC5bKcgon/5Vov/qi+R9jBYt1xUqCymgcr
nVtHQsFJjw4POA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:59:40 2026 by rpki-client