Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
File: jriXJ_n47Oad-b7EzBHKvO4WS8M.mft (raw, json)
Hash identifier: xA1Aw79rZgT3fKKJtBFegfPbxRrRxzEtWXwkRDWUSEk=
Subject key identifier: 5F:5C:3F:9E:7D:E1:FE:FB:F6:75:88:E4:43:A7:FC:A2:8D:23:0E:ED
Authority key identifier: 8E:B8:97:27:F9:F8:EC:E6:9D:F9:BE:C4:CC:11:CA:BC:EE:16:4B:C3
Certificate issuer: /CN=8eb89727f9f8ece69df9bec4cc11cabcee164bc3
Certificate serial: 019F935B994454C35B8461C541CBD5A83124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:21 +0000
Manifest this update: Fri 24 Jul 2026 09:01:21 +0000
Manifest next update: Sat 25 Jul 2026 09:01:21 +0000
Files and hashes: 1: KE3GupBR2iGoEZP8QqZIbP9I-xE.roa (hash: Xuer3yKNUbClZo8SA2R+1gQjYc7yVthlpiw4kBX8aYY=)
2: Oj8K8XHrsDfS-eldRMcH11WQYyQ.roa (hash: ifdd2pi8EShwVYLbGy/N4X0jrvCVRCdXziJXaPvLXA4=)
3: jriXJ_n47Oad-b7EzBHKvO4WS8M.crl (hash: XIpoqgz3W7cc2onNYXUeIzz5OoNuJ61bGA6UajZdcMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:99:44:54:c3:5b:84:61:c5:41:cb:d5:a8:31:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb89727f9f8ece69df9bec4cc11cabcee164bc3
Validity
Not Before: Jul 24 09:01:21 2026 GMT
Not After : Jul 25 09:01:21 2026 GMT
Subject: CN=5f5c3f9e7de1fefbf67588e443a7fca28d230eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:88:c7:cf:c6:8a:08:34:d0:a6:e0:ba:99:
30:47:80:bc:52:10:52:1f:6b:96:f4:a1:39:dc:a6:
cb:af:54:5c:c2:e6:2c:c7:f6:95:6a:ac:ff:35:66:
dc:43:e3:ac:5e:c5:e6:8e:66:c1:36:9f:fd:fd:f8:
24:49:66:b9:0b:13:a9:72:fe:10:38:11:80:1c:2d:
6d:8d:f4:7e:b4:31:52:9a:fb:96:95:6f:30:37:d7:
35:f6:f3:0f:bd:bf:04:78:0d:e3:44:e8:d6:b2:b2:
bc:55:14:ea:a9:e2:a7:01:05:68:8f:3f:88:c0:ab:
1f:d3:7a:a0:2a:9f:4f:28:e8:5b:25:a8:c2:48:fe:
0a:e0:3c:49:67:6b:e4:58:e4:5b:93:b2:87:cb:10:
61:be:f5:65:44:46:31:0e:c4:18:56:0a:c0:63:86:
9c:18:34:bf:99:5b:d7:49:7a:5a:ce:e9:31:4b:cf:
7d:3a:cd:40:37:55:f8:fb:a4:db:3a:13:51:96:f8:
2c:e8:11:3c:df:f9:38:7b:73:51:9b:f0:95:45:83:
b7:f0:2e:9c:72:76:6f:24:80:c6:6e:8a:ab:83:7b:
9e:fc:73:28:08:15:da:e1:11:a3:4a:b9:74:58:65:
3e:7d:63:98:f5:cd:46:29:42:b0:8b:d6:a3:51:18:
dd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5C:3F:9E:7D:E1:FE:FB:F6:75:88:E4:43:A7:FC:A2:8D:23:0E:ED
X509v3 Authority Key Identifier:
keyid:8E:B8:97:27:F9:F8:EC:E6:9D:F9:BE:C4:CC:11:CA:BC:EE:16:4B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:74:a2:ff:22:c6:70:ec:e9:60:5d:d6:8d:ab:3d:2e:9f:2e:
87:16:13:62:ed:5f:88:2e:81:73:21:dc:5b:4b:a5:f0:f2:64:
bd:d8:63:bb:07:86:0a:f9:ee:58:ff:6d:24:52:21:27:f0:e1:
97:bf:bd:2d:89:95:20:e6:69:08:05:1b:bf:cf:76:6e:01:cb:
e6:c7:4f:cf:80:b1:ec:e4:2e:a3:7a:5a:de:4d:4d:8a:85:49:
1d:58:99:ce:2a:41:be:8f:60:48:4a:47:b8:6e:70:dd:a8:5f:
8c:ff:0b:ea:f1:84:8b:f5:2a:fa:4c:40:00:64:29:b7:7b:cc:
17:56:10:ca:60:54:43:89:f2:93:e5:92:51:c0:af:61:98:99:
03:7c:24:3d:c0:b5:14:b5:a6:eb:d9:3f:c7:ee:4d:0a:3e:03:
91:2c:34:60:56:e1:1a:1e:4c:a9:e8:f5:6b:43:a2:f4:9c:94:
6d:5d:79:a0:aa:0d:5b:f8:a2:b0:55:a0:aa:8f:c3:83:90:ca:
d1:b9:2b:9f:44:5d:4f:a6:9a:29:a1:87:3e:6f:67:53:29:59:
81:e8:8c:c9:01:e4:4c:ab:ca:11:6d:15:52:8f:a7:48:91:32:
c5:16:b2:16:43:58:ce:5b:ee:a9:ef:c1:d4:04:bf:7b:ea:23:
4e:71:92:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW5lEVMNbhGHFQcvVqDEkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjg5NzI3ZjlmOGVjZTY5ZGY5YmVjNGNjMTFjYWJjZWUx
NjRiYzMwHhcNMjYwNzI0MDkwMTIxWhcNMjYwNzI1MDkwMTIxWjAzMTEwLwYDVQQD
Eyg1ZjVjM2Y5ZTdkZTFmZWZiZjY3NTg4ZTQ0M2E3ZmNhMjhkMjMwZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAWIx8/Gigg00KbgupkwR4C8UhBS
H2uW9KE53KbLr1RcwuYsx/aVaqz/NWbcQ+OsXsXmjmbBNp/9/fgkSWa5CxOpcv4Q
OBGAHC1tjfR+tDFSmvuWlW8wN9c19vMPvb8EeA3jROjWsrK8VRTqqeKnAQVojz+I
wKsf03qgKp9PKOhbJajCSP4K4DxJZ2vkWORbk7KHyxBhvvVlREYxDsQYVgrAY4ac
GDS/mVvXSXpazukxS899Os1AN1X4+6TbOhNRlvgs6BE83/k4e3NRm/CVRYO38C6c
cnZvJIDGboqrg3ue/HMoCBXa4RGjSrl0WGU+fWOY9c1GKUKwi9ajURjdXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9cP5594f779nWI5EOn/KKNIw7tMB8GA1UdIwQY
MBaAFI64lyf5+Ozmnfm+xMwRyrzuFkvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJpWEpfbjQ3T2FkLWI3RXpCSEt2TzRXUzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgt
MTcxNTkxOTU2N2M5LzEvanJpWEpfbjQ3T2FkLWI3RXpCSEt2TzRXUzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgtMTcxNTkxOTU2N2M5
LzEvanJpWEpfbjQ3T2FkLWI3RXpCSEt2TzRXUzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHSi/yLG
cOzpYF3Wjas9Lp8uhxYTYu1fiC6BcyHcW0ul8PJkvdhjuweGCvnuWP9tJFIhJ/Dh
l7+9LYmVIOZpCAUbv892bgHL5sdPz4Cx7OQuo3pa3k1NioVJHViZzipBvo9gSEpH
uG5w3ahfjP8L6vGEi/Uq+kxAAGQpt3vMF1YQymBUQ4nyk+WSUcCvYZiZA3wkPcC1
FLWm69k/x+5NCj4DkSw0YFbhGh5Mqej1a0Oi9JyUbV15oKoNW/iisFWgqo/Dg5DK
0bkrn0RdT6aaKaGHPm9nUylZgeiMyQHkTKvKEW0VUo+nSJEyxRayFkNYzlvuqe/B
1AS/e+ojTnGSPA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:39:39 2026 by rpki-client