Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier: jyDwUPPCHO9xB5jDwE1yl5QlOj7oPYMWDrJ2iES8lr8=
Subject key identifier: C2:81:A0:8A:93:E9:4E:7F:21:23:52:4E:C6:34:D5:6F:3A:F7:35:0D
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 019F916C459678E0E9921990DDBCC4C3268D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 00:00:19 +0000
Manifest this update: Fri 24 Jul 2026 00:00:19 +0000
Manifest next update: Sat 25 Jul 2026 00:00:19 +0000
Files and hashes: 1: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: e9LBakiKPAzfqtTsbmFmfIWxUZx0XDvxnXlvm0zh0/Q=)
2: fH7jpTfOw73ogmMvWrEFRq2Avio.roa (hash: PFBzuOPj54GvMEMM5OOIFBp/nYApNQPXPXoK+zClv8U=)
3: uDCd91-kIRTx4Oler7V-1bWJeEE.roa (hash: MPw5XG6tMFKBuwGKWin9/7K5TyzvM+BrLD5tHi46a6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:45:96:78:e0:e9:92:19:90:dd:bc:c4:c3:26:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: Jul 24 00:00:19 2026 GMT
Not After : Jul 25 00:00:19 2026 GMT
Subject: CN=c281a08a93e94e7f2123524ec634d56f3af7350d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c4:0f:79:7d:3c:49:f1:e4:8f:fb:d0:c0:cb:
74:53:87:17:3b:b4:76:bf:e8:34:3a:5a:55:5a:07:
06:73:87:9b:ed:b1:70:78:ca:e7:3e:a6:29:09:b3:
9f:82:7b:71:91:da:84:16:fd:87:09:5f:ef:36:d9:
d5:3c:ed:01:77:1c:d0:4c:d1:c9:e0:90:29:a8:8d:
6e:23:f9:d7:45:c9:f9:dc:d7:07:88:ef:06:e8:d4:
a0:46:33:4d:a8:1a:3c:c0:22:e9:ea:04:f5:07:79:
b4:c9:9c:3b:4f:69:09:3f:45:c0:95:f9:37:0f:b3:
de:ee:ad:03:8f:71:41:3c:70:67:b4:c0:f2:4d:cc:
8f:6e:66:68:92:1d:14:72:9f:6b:e3:38:47:ce:0f:
5f:48:15:4c:2d:02:e8:76:bb:a9:b4:63:04:62:02:
b1:be:97:56:39:26:f5:e3:75:07:66:01:4e:48:79:
ef:5e:30:d8:ac:8b:f8:a0:ab:9c:4b:f8:72:93:97:
99:1d:8f:53:4a:43:3f:5a:43:62:06:cd:05:cf:17:
1e:13:28:5a:7a:46:21:e6:26:80:8e:70:8c:dc:f7:
6e:3d:5f:8a:c9:cc:a1:64:d9:cd:26:41:ad:76:c1:
41:13:57:ba:1d:e8:63:a8:9c:f9:31:03:29:b2:7d:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:81:A0:8A:93:E9:4E:7F:21:23:52:4E:C6:34:D5:6F:3A:F7:35:0D
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:9a:14:b2:4e:e1:38:4a:8a:81:7e:f8:db:75:61:4c:ee:13:
86:12:ee:0c:57:11:77:98:f8:53:eb:0a:b2:01:9e:d6:72:1a:
77:9e:8a:3f:01:fb:96:43:2b:89:60:c8:4d:eb:49:69:29:57:
bf:60:b9:98:24:04:c5:d2:e8:ee:56:da:5a:0d:4b:9f:be:a5:
f7:35:4f:a7:69:0b:5d:f9:d2:97:a8:c0:6c:31:7c:24:b7:ca:
95:25:c2:f5:a5:bd:f2:4e:d2:17:71:4c:f1:a8:68:8b:d3:ca:
2c:5d:7a:ab:ba:ac:3c:82:5d:82:bd:7d:86:47:b8:0c:7f:a4:
a7:da:04:4f:c0:73:95:f8:c6:49:90:47:64:61:78:a4:40:2c:
1b:69:2d:97:62:b3:1b:87:1b:b1:96:25:32:8e:bb:1b:8f:df:
69:d5:f2:78:4e:4d:13:51:f1:d6:22:b7:5a:d2:b4:8b:ab:d8:
7d:12:c2:d6:f8:01:0c:b2:94:e6:9d:93:41:c9:64:91:54:15:
86:1e:2d:39:52:1b:46:17:1f:a5:c4:ee:c2:d0:94:3c:6e:cd:
b2:62:f3:37:e3:f8:c5:b9:00:c1:1f:47:12:20:c8:86:6b:aa:
99:08:51:3c:21:02:8c:b8:3c:bd:bb:78:72:55:48:d5:b0:96:
9d:23:9c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:32 2026 by rpki-client