Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier: 71uFypS2miEol9dEHnPLLxH9882LMd7Vq1XRSlAO92U=
Subject key identifier: C9:E9:09:C6:9A:DE:27:99:86:FB:DE:EF:38:46:0C:B5:12:66:42:48
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 019F93FFFB0552F7D17F8E2C8405BABB1E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number: 14EA
Signing time: Fri 24 Jul 2026 12:00:54 +0000
Manifest this update: Fri 24 Jul 2026 12:00:54 +0000
Manifest next update: Sat 25 Jul 2026 12:00:54 +0000
Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: YjCdKZhYSiawnoqxIz7JLdvbkZk2FUJwZeEvgycHyTo=)
2: hWkmko9vUlZH-VtlGHJ4hUuAaoY.roa (hash: WFu8HTGZdnXJYLpBmsk/WG3sNIIitKWRuo38WyAjDOU=)
3: rHfKeO-9l9W24wGxoHPVca3O4oc.roa (hash: DOnDxDR60+CHvKP7QQ/+3OYee8LrWlLSO/yOlx6md0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:fb:05:52:f7:d1:7f:8e:2c:84:05:ba:bb:1e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Jul 24 12:00:54 2026 GMT
Not After : Jul 25 12:00:54 2026 GMT
Subject: CN=c9e909c69ade279986fbdeef38460cb512664248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cc:dd:7b:a5:cb:72:60:f1:7d:13:af:4d:8a:
a5:36:45:33:5c:fd:0c:13:41:25:82:0a:e5:b9:0b:
15:b1:ec:38:ba:c0:f0:bb:54:83:65:26:0d:e1:8f:
3d:c0:d9:1b:24:c7:4a:a3:b0:a7:9e:a8:b5:da:66:
81:77:cf:ac:c0:ec:79:31:16:eb:fa:88:43:c9:41:
c6:cd:98:21:66:c3:1d:6f:85:fd:31:46:e8:32:6b:
a4:09:4b:5a:5f:8f:2d:a8:04:ce:45:02:97:fb:83:
da:cb:4b:46:79:ac:69:04:74:66:ae:32:f0:4d:95:
ec:f4:4a:a2:f4:39:94:5b:28:67:df:27:30:51:15:
27:b9:93:df:2a:52:40:65:d1:6a:9d:17:8c:e3:1f:
ef:95:74:2d:b5:83:16:4b:f3:be:2a:0f:26:30:a6:
9b:28:08:d0:ac:78:ad:de:c0:e5:8a:b4:02:b1:10:
73:50:9e:dd:3e:e2:a9:4a:13:e0:fb:e6:a6:0c:46:
d3:46:77:12:05:94:14:c9:32:a0:6e:c8:83:b3:53:
cc:ee:e1:f0:64:99:4c:e2:99:7e:24:b8:df:53:36:
6b:31:b1:87:1b:79:e4:27:e5:b8:49:47:23:16:0b:
be:0e:e2:65:e4:0d:0c:b9:79:4b:c5:d4:f3:d8:62:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E9:09:C6:9A:DE:27:99:86:FB:DE:EF:38:46:0C:B5:12:66:42:48
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:65:ab:fd:b4:18:87:b8:dd:f6:b7:fc:e9:b2:f0:cf:22:c3:
5d:e1:dc:93:70:fb:e3:d3:22:88:62:98:5f:d1:24:7c:07:05:
47:7b:5c:bc:40:20:1c:22:84:87:c3:12:f1:fb:1d:df:69:91:
80:00:17:f9:7e:29:58:e6:32:2c:ef:9a:34:28:38:c2:cf:c7:
ae:0a:5a:da:07:bc:8d:82:5c:05:de:71:79:31:18:7e:8a:fb:
b4:61:18:d1:78:66:3e:93:33:cf:3a:dc:51:e1:1e:cd:bd:dc:
69:1d:90:24:b9:31:27:06:d5:cb:9d:ce:15:47:2e:86:0f:cb:
c9:25:b1:d0:80:5d:a0:b6:96:e1:fb:70:bb:9f:17:b8:ca:fa:
41:ca:82:1f:c0:07:a9:bf:b4:9a:0e:df:55:7e:15:f5:64:47:
49:fd:13:ff:70:d0:0f:7a:9e:c0:80:2c:50:99:4e:ae:a9:4b:
6c:16:7d:77:a7:db:18:ac:4f:d7:06:46:05:3a:46:2b:9b:d8:
de:8d:5b:54:93:cb:39:58:3f:5d:bd:4c:6b:67:f5:5a:39:3e:
ea:b8:5c:c0:1e:24:e2:22:16:09:e3:56:fe:aa:55:50:4f:db:
a8:45:5f:5d:fa:78:04:fb:33:ea:68:f1:f2:cf:60:a5:52:f6:
f9:dd:be:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:17 2026 by rpki-client