Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: adqiMkB0/kk1aZLMbfkaGJR0n+QHoCnk/8r0cygxmW8=
Subject key identifier: 3A:E8:F5:32:30:80:DE:14:F3:87:CF:1C:BC:0E:D7:55:36:EA:65:0C
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 019F9248C0628888D5849C515E8ACD877F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 12D6
Signing time: Fri 24 Jul 2026 04:01:08 +0000
Manifest this update: Fri 24 Jul 2026 04:01:08 +0000
Manifest next update: Sat 25 Jul 2026 04:01:08 +0000
Files and hashes: 1: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: wIfOoXooVbUkdGUEBzfGDxe5ITxt5A165b0o9Z16KCg=)
2: nb4M4Vs_oRCpP6av5yHYY7ajtGs.roa (hash: cPr0jW1v5b3Y4dRV/He/q4udsj1U7jqFBGqtSVxJD3c=)
3: qz5i0x4xJkfmTe6dozsZBG3TPU0.roa (hash: ooUbJjUT5M24S8q2RLHISS9XM6QlSckyAXcafyUdbOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:c0:62:88:88:d5:84:9c:51:5e:8a:cd:87:7f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Jul 24 04:01:08 2026 GMT
Not After : Jul 25 04:01:08 2026 GMT
Subject: CN=3ae8f5323080de14f387cf1cbc0ed75536ea650c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:82:54:2a:1d:b0:76:44:24:69:d7:9e:f5:cf:
03:db:c3:16:84:7f:19:b7:d6:a4:f3:97:67:d3:18:
57:c0:a1:ad:8d:73:28:82:1d:1e:43:59:6c:e2:19:
e9:06:c1:0c:08:96:de:0a:bb:54:25:04:9c:8f:ec:
ac:25:ff:94:b6:f3:8a:15:cb:cf:8b:73:69:c4:e7:
32:84:de:be:01:fc:e5:62:82:13:db:b2:ab:1d:63:
2b:ac:46:73:6b:d2:3f:d0:cd:f5:af:ed:11:8a:33:
0e:8a:5e:d7:a6:cc:07:57:da:cf:bc:d5:a0:56:a2:
7a:b1:9b:c2:f3:1e:46:30:d8:38:fb:fb:cd:ba:c5:
f4:2e:4e:e1:75:e9:3b:7d:bc:3a:9a:f3:55:66:04:
8f:62:55:d9:98:bd:5a:b4:49:37:0c:8e:1e:b3:df:
5b:1b:77:13:57:fd:a4:0e:4e:10:33:de:f3:fe:69:
3b:dc:78:d8:df:21:d9:01:f9:f0:8e:52:0d:ff:15:
89:2d:1c:70:c2:f8:6d:79:ca:f9:b1:6a:d7:6b:32:
4f:e6:6c:e5:b1:ed:b9:0e:72:9c:b1:82:ee:0f:21:
85:d4:35:76:c8:cf:cd:71:2e:5d:de:40:13:de:6a:
3a:45:fc:86:45:d6:4e:5b:8e:31:30:7f:27:2d:f5:
15:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E8:F5:32:30:80:DE:14:F3:87:CF:1C:BC:0E:D7:55:36:EA:65:0C
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:38:9e:aa:a5:fb:fe:1e:ca:fe:fb:a1:0b:e1:75:9f:d1:1f:
6d:87:d8:3b:37:f0:9e:f7:13:b6:ef:62:86:9a:7a:f1:f2:ee:
91:3f:a3:ad:e2:27:85:0c:95:56:20:06:3b:92:0a:18:2a:17:
17:a1:f9:92:11:1f:50:04:76:71:43:e3:bc:91:79:fa:d6:5e:
74:c6:46:4a:dd:30:03:84:e6:ce:0c:59:6b:89:ad:90:c7:6f:
01:91:77:76:5c:03:7a:7b:61:1b:54:99:62:75:bf:c6:ad:d6:
b6:29:b6:f6:7b:9f:ed:12:89:2b:6b:98:63:2b:59:e8:7d:2a:
94:8a:c1:2f:55:9a:17:07:d1:4a:2e:3e:b9:8c:d8:43:33:86:
fb:fa:d7:83:7a:64:c1:91:e1:bb:5a:22:af:8b:fc:18:5d:f4:
d9:6d:8c:bd:88:bb:00:94:53:f9:a6:aa:1f:2a:fe:e2:ea:36:
f7:cf:24:bc:5a:cb:93:f5:b6:b2:81:ba:b3:a9:ab:7d:70:5b:
58:75:fb:35:42:55:fb:03:8f:e7:c6:e1:8d:1b:a4:c5:5e:e1:
5b:8e:71:f0:17:21:31:ac:b6:68:2c:be:a8:5c:71:b5:47:3d:
82:a8:af:b5:7d:77:87:0a:45:bf:4d:44:8a:42:03:a2:28:c6:
f2:28:bf:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:19:03 2026 by rpki-client