Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
File: J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft (raw, json)
Hash identifier: X3Fkc6Z0iQ3TKreX738jcNil/lXhRUAKdccQKheufCw=
Subject key identifier: D4:3F:1E:87:64:92:C6:3D:3A:0B:86:83:67:85:7A:BF:9B:69:47:77
Authority key identifier: 27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
Certificate issuer: /CN=2747c171786e883167d862be101f352135b923b4
Certificate serial: 019F8F7F89E864B6B1355FF4546BE7219212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
Manifest number: 0119
Signing time: Thu 23 Jul 2026 15:02:07 +0000
Manifest this update: Thu 23 Jul 2026 15:02:07 +0000
Manifest next update: Fri 24 Jul 2026 15:02:07 +0000
Files and hashes: 1: J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl (hash: MG122T7728gsKv0dZQCB4zFZX5z7eJ5VlMriNbxro7Q=)
2: O_GvhJ3AIu5IJuqpQ4uX03ArEEA.roa (hash: GC8qNwD4vLhbf1Ux7vQLpVBwBRtyOha518PQltW/PIg=)
3: hFukJ1Me328-WPvDybOfx7SqLNM.asa (hash: HFJhYuc006ijF+saTkFV1K0a6wbtr7JpRGOKmayJt1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:89:e8:64:b6:b1:35:5f:f4:54:6b:e7:21:92:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2747c171786e883167d862be101f352135b923b4
Validity
Not Before: Jul 23 15:02:07 2026 GMT
Not After : Jul 24 15:02:07 2026 GMT
Subject: CN=d43f1e876492c63d3a0b868367857abf9b694777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:dc:25:fb:b6:9f:8c:53:dd:59:87:ce:f3:
04:30:04:f7:88:5d:6d:23:66:fa:de:cf:1b:66:45:
a9:46:52:02:ab:cf:24:b8:1a:36:ba:f5:15:b9:d5:
4d:73:da:ef:79:aa:c8:e1:29:bb:c6:57:da:e5:75:
d8:c9:0a:ec:bd:c3:53:69:57:81:37:a8:da:5a:9d:
c9:1b:fd:1a:14:6c:b3:d1:8a:f5:8b:5e:61:6d:19:
e1:38:fa:0f:3f:22:ab:ee:89:96:ee:cc:5e:75:0d:
99:5a:0f:82:35:78:32:53:c2:e8:db:9a:cc:88:46:
00:27:b0:2b:65:71:b6:a5:93:3a:b5:48:2a:ee:59:
f5:c2:fe:fb:e8:6e:48:a7:d1:ba:50:e3:2f:d5:48:
2b:78:5a:b2:f5:0d:e9:c0:47:96:cc:d8:0a:54:28:
be:ba:c7:3f:88:91:67:b1:61:bb:6d:14:7e:81:35:
62:7e:50:5f:50:6e:f0:8e:7f:cc:1c:d9:bf:e5:9c:
3f:94:85:e2:35:ca:c3:c1:80:02:69:0f:35:4f:ba:
14:30:37:7d:8b:6b:df:18:19:35:26:b7:17:65:c6:
87:aa:55:f6:07:3a:11:1b:c0:80:88:77:19:2a:dc:
70:67:80:48:c9:6b:7d:80:0f:36:a9:9d:6f:d3:41:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3F:1E:87:64:92:C6:3D:3A:0B:86:83:67:85:7A:BF:9B:69:47:77
X509v3 Authority Key Identifier:
keyid:27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7b:b2:71:34:64:31:69:68:ab:17:58:89:fe:f7:97:a6:1d:
70:e4:e0:b9:7f:e7:bc:79:0d:b3:6a:df:37:01:5d:e0:49:47:
68:94:29:16:2c:a6:16:13:f5:5a:a5:d4:2b:32:2e:8e:b3:9a:
8f:e2:a4:ec:fc:55:8c:94:d8:fa:3f:a7:45:02:91:aa:c0:c9:
d8:43:ab:2f:26:74:0e:c1:1e:0f:8f:aa:bc:5a:92:4b:12:30:
18:5f:8f:25:e3:4d:36:24:1e:0f:22:95:96:fd:29:30:49:7c:
f6:6e:6a:ab:60:16:e1:e8:8f:38:b5:3e:be:bd:3c:3b:df:dc:
e0:15:31:7f:de:b2:44:eb:cf:60:11:1a:67:db:09:cf:a9:37:
f2:a5:0b:75:ed:3d:aa:e0:3d:a9:3b:cd:29:ce:72:a5:73:62:
36:63:7b:59:05:ac:01:9f:dc:17:1e:aa:8a:d9:47:39:f6:b5:
06:d6:2d:82:d4:e4:db:54:db:85:7e:fb:e8:08:32:20:b6:cc:
cb:8b:bd:f9:59:ea:05:ae:f3:77:2b:ad:67:39:e3:3b:56:2b:
86:6f:35:18:65:7b:61:1a:ae:60:d3:64:7d:bc:e3:cd:20:b4:
62:46:ae:e4:e8:f9:df:63:60:1c:5e:80:ab:5a:c2:e9:b9:3e:
34:78:41:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:06 2026 by rpki-client