Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.mft
File: JftDG4tBR2PuM_rfKY5GoHjjJDI.mft (raw, json)
Hash identifier: Iay6Jo4YjhNslpIea4PKpoZSaEcwpuZZ6X9SJiY9Sro=
Subject key identifier: 3E:84:ED:40:BD:9E:F0:5F:EB:7E:8A:6E:C7:37:3B:30:E9:DB:38:0B
Authority key identifier: 25:FB:43:1B:8B:41:47:63:EE:33:FA:DF:29:8E:46:A0:78:E3:24:32
Certificate issuer: /CN=25fb431b8b414763ee33fadf298e46a078e32432
Certificate serial: 019F9549C60EC1C69E6CAAC7DB5399890832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JftDG4tBR2PuM_rfKY5GoHjjJDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:07 +0000
Manifest this update: Fri 24 Jul 2026 18:01:07 +0000
Manifest next update: Sat 25 Jul 2026 18:01:07 +0000
Files and hashes: 1: 1-8zDLGIBUdttuzongUFSJyrBHyI.roa (hash: NA/2OMk9mJUUPDfOuqk/HqeM1Jw1QwBMqIBpT7majag=)
2: JftDG4tBR2PuM_rfKY5GoHjjJDI.crl (hash: z+7pldDJx/iSupgDqAzcXXeUwkj4+pjMoBftfYZexa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JftDG4tBR2PuM_rfKY5GoHjjJDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:c6:0e:c1:c6:9e:6c:aa:c7:db:53:99:89:08:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fb431b8b414763ee33fadf298e46a078e32432
Validity
Not Before: Jul 24 18:01:07 2026 GMT
Not After : Jul 25 18:01:07 2026 GMT
Subject: CN=3e84ed40bd9ef05feb7e8a6ec7373b30e9db380b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:77:c9:b9:5b:67:67:44:79:9f:cc:57:91:
13:ba:03:62:9e:47:ac:3e:9d:66:58:20:87:9d:11:
ca:bb:5e:bb:ed:e6:48:6f:a0:0f:2e:64:43:d9:5d:
c8:7a:8a:87:e5:8c:89:30:63:5e:73:09:5f:06:33:
0a:ab:a6:62:26:f7:1a:70:7a:5c:e9:6f:3f:42:ba:
b3:ee:9a:15:2f:d0:43:b6:b5:b9:db:71:76:fb:90:
84:20:2a:85:fb:a7:65:f3:b6:bc:77:be:63:b3:52:
e7:b0:6c:b6:cf:89:26:2a:ce:1f:b1:dd:a6:24:ce:
5e:28:b2:2d:68:bd:63:45:65:ba:55:1d:65:de:72:
14:59:34:d7:5b:72:b9:e5:f8:a9:c1:ab:30:12:e7:
dc:d2:98:80:c0:57:d7:9c:45:c7:8a:81:7d:ea:b4:
24:c6:17:63:ce:be:8a:3b:08:0c:ae:24:63:75:86:
91:3a:e1:4a:57:70:5b:58:54:eb:e1:76:01:ad:d0:
e9:dd:af:ae:40:2c:3d:be:0e:5d:34:f6:e8:64:49:
29:5f:ac:21:0b:47:31:85:40:33:6a:ad:44:88:bf:
e8:ac:f3:5f:dc:c5:d5:3d:4f:cf:c5:33:3c:1c:cd:
4f:61:83:32:35:54:3b:5f:0e:e6:02:13:63:1f:bc:
2b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:84:ED:40:BD:9E:F0:5F:EB:7E:8A:6E:C7:37:3B:30:E9:DB:38:0B
X509v3 Authority Key Identifier:
keyid:25:FB:43:1B:8B:41:47:63:EE:33:FA:DF:29:8E:46:A0:78:E3:24:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JftDG4tBR2PuM_rfKY5GoHjjJDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7b:8d:1e:79:3e:46:03:e2:b2:dc:a1:dc:66:3d:f8:dd:b3:
9a:fd:b9:10:88:a7:0b:74:d9:eb:67:7b:2f:c1:2e:f6:dc:a0:
44:bd:5d:f3:5c:bf:6b:2e:ea:d1:c3:3e:9a:0f:6e:52:8c:4b:
bf:0b:16:dd:c3:e8:44:aa:9b:0c:be:42:6e:41:3c:40:ba:d9:
3f:ab:22:95:73:1b:e6:10:8b:9e:d1:84:f7:a7:7b:01:cf:f3:
1b:4c:a0:1b:4a:d8:83:23:ee:a7:1c:36:3d:2a:d8:bf:dd:54:
87:44:3b:e4:2b:9e:c9:cf:ac:b8:b3:b3:ad:9c:a3:ba:1d:93:
94:84:de:d9:62:21:a2:21:2b:29:98:7a:01:36:95:e8:f7:7d:
e3:a5:f4:ea:45:2d:36:f9:f5:9a:b0:8e:b0:3d:17:11:ee:94:
f0:4e:0a:b0:9c:32:59:8f:a0:50:b6:9c:6a:9d:ff:5e:28:d0:
81:51:fd:e0:82:05:5e:eb:f6:a4:6b:26:d3:ea:8d:8c:e0:75:
43:4c:99:8e:9f:35:ef:d3:be:a1:8a:0e:1d:1c:56:55:0f:57:
17:54:9c:a0:9e:12:48:76:c2:07:ef:e2:79:39:9c:b7:c3:0d:
a6:6d:e3:7b:ef:df:46:4d:4e:ab:5e:6f:02:fa:0b:3d:50:4f:
f5:d8:c5:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VScYOwcaebKrH21OZiQgyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZmI0MzFiOGI0MTQ3NjNlZTMzZmFkZjI5OGU0NmEwNzhl
MzI0MzIwHhcNMjYwNzI0MTgwMTA3WhcNMjYwNzI1MTgwMTA3WjAzMTEwLwYDVQQD
EygzZTg0ZWQ0MGJkOWVmMDVmZWI3ZThhNmVjNzM3M2IzMGU5ZGIzODBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrp3yblbZ2dEeZ/MV5ETugNinkes
Pp1mWCCHnRHKu1677eZIb6APLmRD2V3IeoqH5YyJMGNecwlfBjMKq6ZiJvcacHpc
6W8/Qrqz7poVL9BDtrW523F2+5CEICqF+6dl87a8d75js1LnsGy2z4kmKs4fsd2m
JM5eKLItaL1jRWW6VR1l3nIUWTTXW3K55fipwaswEufc0piAwFfXnEXHioF96rQk
xhdjzr6KOwgMriRjdYaROuFKV3BbWFTr4XYBrdDp3a+uQCw9vg5dNPboZEkpX6wh
C0cxhUAzaq1EiL/orPNf3MXVPU/PxTM8HM1PYYMyNVQ7Xw7mAhNjH7wrbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6E7UC9nvBf636Kbsc3OzDp2zgLMB8GA1UdIwQY
MBaAFCX7QxuLQUdj7jP63ymORqB44yQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmZ0REc0dEJSMlB1TV9yZktZNUdvSGpqSkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lNWRmYTktNTE5Ni00OGNkLTkxNzgt
NWEzMWY2MjBiMDRhLzEvSmZ0REc0dEJSMlB1TV9yZktZNUdvSGpqSkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9lNWRmYTktNTE5Ni00OGNkLTkxNzgtNWEzMWY2MjBiMDRh
LzEvSmZ0REc0dEJSMlB1TV9yZktZNUdvSGpqSkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3uNHnk+
RgPistyh3GY9+N2zmv25EIinC3TZ62d7L8Eu9tygRL1d81y/ay7q0cM+mg9uUoxL
vwsW3cPoRKqbDL5CbkE8QLrZP6silXMb5hCLntGE96d7Ac/zG0ygG0rYgyPupxw2
PSrYv91Uh0Q75Cueyc+suLOzrZyjuh2TlITe2WIhoiErKZh6ATaV6Pd946X06kUt
Nvn1mrCOsD0XEe6U8E4KsJwyWY+gULacap3/XijQgVH94IIFXuv2pGsm0+qNjOB1
Q0yZjp8179O+oYoOHRxWVQ9XF1ScoJ4SSHbCB+/ieTmct8MNpm3je+/fRk1Oq15v
AvoLPVBP9djFAw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:24:56 2026 by rpki-client