Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: nwpftS7/Ync1GBElZSnm3uSUNSqmaEWNnYMD7J5Gs88=
Subject key identifier: FC:00:35:A9:B5:A2:D5:C9:31:E0:41:07:18:E7:97:CD:3B:CD:F4:45
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 019F90FF9396F7233181D10DD402F1701A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 1496
Signing time: Thu 23 Jul 2026 22:01:36 +0000
Manifest this update: Thu 23 Jul 2026 22:01:36 +0000
Manifest next update: Fri 24 Jul 2026 22:01:36 +0000
Files and hashes: 1: 0MDmf31Geq28sqW5uhK6N30LoZg.roa (hash: EpA+5vkgIFjeVI3itIuTpuLJ6aAzCK55k0xhYt0MpnY=)
2: 2pu1vkKFjna4Dm_cwSi5R4FE2g4.roa (hash: FM1p/9Yj7KBBXqnWBSoCV4VhHGxp22FujL3gdqNAgz0=)
3: Xvepx433VAtdgPI_baO5XGR3A8U.roa (hash: Hb64A6S05X/K5EFwUyHoMmk1FNOpGqOBloL7O8dOS+s=)
4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: 7CVV4ufyLpceuvaGKN1nNBYb1cKpe0UbDAXGolB23p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:93:96:f7:23:31:81:d1:0d:d4:02:f1:70:1a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Jul 23 22:01:36 2026 GMT
Not After : Jul 24 22:01:36 2026 GMT
Subject: CN=fc0035a9b5a2d5c931e0410718e797cd3bcdf445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:44:fd:56:dd:e4:a7:e7:49:bb:6c:46:5a:
88:81:76:7e:57:5b:06:0e:cf:a0:dd:68:44:0b:9b:
67:7c:00:43:dc:88:dc:07:eb:29:5a:23:e1:b7:06:
5e:14:20:bd:52:df:d3:60:b7:47:fc:e0:be:ae:63:
1e:75:4f:10:a3:bb:e7:a9:d0:3f:f7:99:13:4a:31:
05:49:37:48:df:48:86:2e:5b:d6:9f:f0:ea:70:d9:
da:0c:49:d8:b3:1c:28:fd:9a:47:c2:09:dd:ae:6f:
7b:07:ca:3e:b4:eb:ba:b7:f6:09:74:5d:ef:bf:d5:
86:2e:a8:00:7b:86:af:02:cd:11:45:a0:41:77:00:
fe:f3:51:30:17:2f:e2:39:23:d8:4e:83:6a:15:eb:
2b:3c:ce:88:b3:90:b5:6f:5f:98:5b:2c:a4:f0:be:
96:2e:2b:47:5a:23:16:b3:21:7c:9b:e0:ef:6a:8f:
4d:6c:d0:56:0a:a6:85:d3:d8:36:64:0f:dd:17:82:
9e:ea:0b:03:82:b9:48:1d:73:78:81:98:bf:1c:b8:
79:78:67:74:02:c6:a2:cf:ed:c4:9d:c1:59:fe:d9:
f8:8c:57:ca:74:e9:da:65:ed:c4:b2:e6:6b:f1:4a:
25:9c:3e:6a:f6:89:66:9c:6a:4d:ef:c7:43:7a:ee:
d1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:00:35:A9:B5:A2:D5:C9:31:E0:41:07:18:E7:97:CD:3B:CD:F4:45
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:81:b1:60:dc:f0:d1:ff:4a:06:49:cb:71:17:5f:22:62:bf:
f0:d0:98:31:d3:f4:28:12:68:43:42:4a:c3:93:00:77:5b:07:
fd:25:be:06:27:cc:f7:a7:c0:b3:36:f9:3c:34:03:d5:04:de:
d2:9c:9a:42:63:68:aa:34:d5:57:7f:a6:51:7d:7c:b8:33:7a:
9e:dc:0f:38:1e:31:99:d1:fe:f9:e7:03:a6:20:89:72:00:1b:
1d:87:5a:83:79:38:54:61:7c:5c:3d:2a:a6:65:b6:b9:88:04:
27:99:1f:d8:7f:b0:23:6a:9c:5b:77:ec:47:33:53:1b:9d:1b:
ad:58:c6:6f:79:5a:e1:05:7d:ad:cf:04:a9:c8:82:9c:18:80:
6a:56:22:f5:a3:92:8d:12:64:f1:35:19:bb:e8:23:4b:08:2a:
0a:4b:f3:98:2f:c0:13:c4:c2:d4:89:f1:f6:fe:16:b3:95:22:
a0:e6:1f:8f:cc:cf:62:76:ad:a0:22:a3:5d:42:b4:ac:24:2a:
27:12:e6:67:52:26:df:22:ae:dc:d3:4b:2e:b3:97:68:3f:7b:
02:17:99:21:7b:79:2e:9a:47:a4:a1:aa:d8:10:8f:2f:05:09:
0b:e5:7a:0b:ad:29:ff:43:3a:30:ee:94:be:c0:d2:9e:10:2f:
ee:fe:eb:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/5OW9yMxgdEN1ALxcBpdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOTA5MmJiYzJjYWNhZTI0Nzc3NGY2MmIwZmRiZGM0NGE5
NzRjZjIwHhcNMjYwNzIzMjIwMTM2WhcNMjYwNzI0MjIwMTM2WjAzMTEwLwYDVQQD
EyhmYzAwMzVhOWI1YTJkNWM5MzFlMDQxMDcxOGU3OTdjZDNiY2RmNDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNRE/Vbd5KfnSbtsRlqIgXZ+V1sG
Ds+g3WhEC5tnfABD3IjcB+spWiPhtwZeFCC9Ut/TYLdH/OC+rmMedU8Qo7vnqdA/
95kTSjEFSTdI30iGLlvWn/DqcNnaDEnYsxwo/ZpHwgndrm97B8o+tOu6t/YJdF3v
v9WGLqgAe4avAs0RRaBBdwD+81EwFy/iOSPYToNqFesrPM6Is5C1b1+YWyyk8L6W
LitHWiMWsyF8m+Dvao9NbNBWCqaF09g2ZA/dF4Ke6gsDgrlIHXN4gZi/HLh5eGd0
Asaiz+3EncFZ/tn4jFfKdOnaZe3EsuZr8UolnD5q9olmnGpN78dDeu7RIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwANam1otXJMeBBBxjnl807zfRFMB8GA1UdIwQY
MBaAFKyQkrvCysriR3dPYrD9vcRKl0zyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9jOTYzNDktMGEyMi00MjQ3LTk5NDMt
YTNmYzE5NmFhYmIzLzEvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9jOTYzNDktMGEyMi00MjQ3LTk5NDMtYTNmYzE5NmFhYmIz
LzEvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4GxYNzw
0f9KBknLcRdfImK/8NCYMdP0KBJoQ0JKw5MAd1sH/SW+BifM96fAszb5PDQD1QTe
0pyaQmNoqjTVV3+mUX18uDN6ntwPOB4xmdH++ecDpiCJcgAbHYdag3k4VGF8XD0q
pmW2uYgEJ5kf2H+wI2qcW3fsRzNTG50brVjGb3la4QV9rc8EqciCnBiAalYi9aOS
jRJk8TUZu+gjSwgqCkvzmC/AE8TC1Inx9v4Ws5UioOYfj8zPYnatoCKjXUK0rCQq
JxLmZ1Im3yKu3NNLLrOXaD97AheZIXt5LppHpKGq2BCPLwUJC+V6C60p/0M6MO6U
vsDSnhAv7v7r5g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:26 2026 by rpki-client