Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: n6PbANBEWIHAzwmWrLbaqk3o6Wt2Xwo1HgviLBw//PA=
Subject key identifier: 8F:C2:60:0A:DE:3C:95:14:5F:01:BF:02:ED:13:DF:5C:68:F1:68:9E
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 019F93C8E4EA01759525AFB6E9A7BF78BEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 1822
Signing time: Fri 24 Jul 2026 11:00:44 +0000
Manifest this update: Fri 24 Jul 2026 11:00:44 +0000
Manifest next update: Sat 25 Jul 2026 11:00:44 +0000
Files and hashes: 1: 6H-9AoNqSrBI_cHU_8jwycSpvuQ.roa (hash: KiQDrwuKHeqxHDHuFUTDtaD1ZiwMGGrMOy/IRx+eThE=)
2: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: xqlJv5mxN2DmX/kc6/Z0+wgO95MlGIr0np3Zi5udzsw=)
3: _zWse9VeR2Ks8Tmud0pKUxt54Rs.roa (hash: nVGx0eRXA+P6cmYQPgwiiD4iTa2vIfOtyuiTU3+mtfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:e4:ea:01:75:95:25:af:b6:e9:a7:bf:78:be:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: Jul 24 11:00:44 2026 GMT
Not After : Jul 25 11:00:44 2026 GMT
Subject: CN=8fc2600ade3c95145f01bf02ed13df5c68f1689e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:e2:8b:f3:f3:e7:c2:bb:04:41:34:5e:c6:
a7:5b:c1:4d:bd:8c:d9:98:08:29:78:cf:e3:a0:90:
ee:5e:fd:aa:78:b2:4a:25:56:82:f0:c4:0f:7e:73:
26:ce:a7:ce:45:cb:be:83:94:28:2a:5c:4c:7a:c9:
33:e9:b1:a2:0d:60:e9:2e:fc:77:aa:0a:20:6c:c2:
d5:5f:ef:07:ca:63:ae:9a:b3:5c:84:5f:aa:7f:5b:
15:e8:8c:ee:24:c5:34:e9:49:95:99:18:77:db:fb:
9e:29:23:99:9a:8d:a7:7a:9a:7c:eb:fc:ec:80:ca:
26:34:90:db:4b:f7:3b:8d:22:d6:5f:f0:41:b6:b3:
09:24:d6:88:ab:1d:5c:5d:bc:48:0c:1d:70:b0:15:
cf:40:9c:16:29:03:b2:a5:be:89:7f:66:7d:c8:29:
0f:a3:9e:3b:6f:74:86:7e:a9:bc:d8:82:02:ef:5a:
bb:d5:d3:96:e4:ae:f6:fb:82:1f:cb:57:75:83:7f:
53:84:ed:5e:26:23:1f:89:36:00:8c:96:b9:82:58:
b5:23:71:11:b1:c5:35:c3:28:4d:68:aa:6e:82:29:
71:de:68:26:d5:21:1e:ea:53:bd:3c:7e:39:35:40:
9b:fc:2e:04:ee:31:79:20:fb:68:81:59:23:65:fe:
e3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C2:60:0A:DE:3C:95:14:5F:01:BF:02:ED:13:DF:5C:68:F1:68:9E
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7b:88:23:1e:57:ac:4a:8e:1d:6b:47:a2:7d:de:84:d4:90:
bc:48:89:d5:69:2a:65:f1:6d:a4:8f:81:d2:cf:b0:96:10:71:
2d:18:bc:e8:c5:d2:0a:ae:d3:a3:dc:aa:1d:4a:b3:2f:11:0c:
6c:7e:e5:75:85:93:4b:12:c8:8e:6f:3c:05:74:74:24:9c:c9:
d1:f5:ee:4c:f0:3c:af:6f:a5:9d:2d:94:b8:6e:fe:3f:59:65:
f0:36:6a:6d:e5:ef:2d:6d:1a:07:6e:8f:0f:48:71:e9:d1:68:
c0:4f:2d:9b:a4:8c:e1:94:09:72:cb:c8:57:f1:0d:6d:aa:d9:
d8:45:ed:b9:bd:19:af:9c:3b:b8:bc:e3:2f:5c:1a:38:cf:5c:
42:d6:bd:1d:40:97:74:05:12:b2:1f:16:5c:77:53:76:c2:bd:
33:12:e5:ec:bc:fc:b4:24:44:8b:d9:1f:9f:09:c4:81:1d:08:
6b:8d:7f:a9:a7:a8:e8:19:99:d0:44:66:6a:1c:fe:6e:f6:f3:
cf:d3:60:f2:61:4c:0e:b3:b1:6c:7d:a5:e2:35:99:56:d0:17:
13:a1:3f:73:be:6a:37:0a:8f:8c:c1:6d:7e:c8:c8:f6:9d:d0:
2c:74:7e:9d:80:75:c6:69:aa:b4:78:76:89:2f:88:58:c8:50:
04:1f:b4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:23:18 2026 by rpki-client