Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
File: sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json)
Hash identifier: In1cFDQeYyOllEX2g+SWk8idcxjR4s+mcWhC5tk4j7w=
Subject key identifier: 36:7D:05:BF:9F:4E:E7:8C:CA:DE:82:A9:AF:C9:0F:3B:C0:29:13:86
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial: 019F91357B57789016DB53ED7E1857CBBE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
Manifest number: 19D1
Signing time: Thu 23 Jul 2026 23:00:28 +0000
Manifest this update: Thu 23 Jul 2026 23:00:28 +0000
Manifest next update: Fri 24 Jul 2026 23:00:28 +0000
Files and hashes: 1: 4ugY9PI_m6eOsD-Mx-tvHs43wxY.roa (hash: 5C991dyiRExbUxUE3jh7duuCkFVGkEv4KlbSfP+17rs=)
2: CvdJK5OT8GtA-xh7l9tdYncfRDc.roa (hash: 3p6vjzHMzoQ2xfV5P6Ow9qn/DbQ1xG3hoqj2RJOaMPk=)
3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: Ejke0cGEkW+QJ5B3I/wntlDaMTPShjVXlPWdYGjrjCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:7b:57:78:90:16:db:53:ed:7e:18:57:cb:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Validity
Not Before: Jul 23 23:00:28 2026 GMT
Not After : Jul 24 23:00:28 2026 GMT
Subject: CN=367d05bf9f4ee78ccade82a9afc90f3bc0291386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:c3:05:14:11:57:61:ab:83:72:0d:9d:47:
50:e9:cc:2e:97:71:89:16:f2:5c:df:9d:3e:c4:0f:
8b:60:07:d5:4b:0c:4d:54:c8:e7:97:43:3d:5b:ec:
08:8f:00:fc:4f:bd:ae:db:54:f3:e9:ad:02:fd:b6:
ba:a3:59:0c:35:00:b7:d3:ec:8e:fa:42:2f:0b:63:
48:09:d1:0e:e8:be:dc:60:63:29:dc:05:ea:c6:d0:
f5:9a:1c:2a:74:a7:36:86:9f:6a:e2:eb:9b:03:f3:
cc:f9:73:8b:86:68:50:3b:8f:14:2a:a9:4d:ba:89:
6e:d9:cd:de:39:b5:bd:d8:58:69:09:63:a5:c2:aa:
7c:3e:91:71:02:67:97:01:8b:fe:3e:ad:60:67:53:
0b:00:29:7f:89:26:8b:4e:6c:70:c2:b1:cb:40:ea:
04:6b:93:c6:1e:88:0c:71:1f:3b:92:98:ab:2c:9b:
c5:15:08:47:c3:94:78:24:93:f4:94:21:77:af:f3:
1f:b2:08:16:f1:8b:b4:46:0c:be:45:52:41:b0:33:
b1:67:f1:fc:b1:1b:f9:bf:8e:8f:14:a1:ab:78:97:
e0:8a:b4:f0:3f:b3:6d:ef:39:2f:7c:6e:19:66:2d:
7f:19:df:c8:fc:80:74:83:8e:41:bf:a2:cd:b3:40:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7D:05:BF:9F:4E:E7:8C:CA:DE:82:A9:AF:C9:0F:3B:C0:29:13:86
X509v3 Authority Key Identifier:
keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:86:07:cd:b1:6a:12:dd:b1:cc:62:25:b6:f1:e4:d9:7f:66:
b0:77:95:4a:8c:dc:ec:77:e6:06:a1:10:7a:96:08:a7:ae:72:
e7:cf:e1:9c:f9:7f:c1:60:f4:1a:72:19:8e:ca:01:aa:78:da:
d4:78:22:a4:1d:09:bb:60:4c:61:c2:99:bb:ac:23:31:61:50:
36:52:7d:bb:1d:bf:e0:38:ad:71:f4:cd:23:42:46:f2:4a:5d:
50:67:8d:45:b7:b9:5b:af:8a:21:06:23:3f:09:b9:03:46:82:
23:9c:04:b7:05:15:e8:5b:d0:fe:32:2f:24:fb:7c:bc:38:06:
93:3d:7b:a9:b4:69:f7:1e:fb:86:85:88:fb:af:06:9c:cc:0a:
78:d1:5c:36:86:31:ec:0f:5d:78:6e:cd:b5:0c:97:8f:72:f1:
f6:85:01:03:35:48:42:e1:df:c4:5d:1e:75:3d:95:8e:10:6c:
07:6c:36:ae:6a:06:91:f7:1b:9d:33:9a:c8:82:dd:1e:6e:51:
8c:2c:69:9f:c6:95:b1:52:38:9e:4a:25:92:4c:74:af:16:a9:
77:87:3f:55:ac:b6:57:ee:1a:14:0a:22:a5:1a:45:3f:89:7a:
4b:c7:2a:52:81:bd:9f:a0:d1:5e:0b:8a:93:7e:e3:4c:a4:86:
91:99:7a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:55:30 2026 by rpki-client