Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
File: jFh6LAkWf52nMnTSmPmf210od3s.mft (raw, json)
Hash identifier: 2OuiU8rty7y2nXYGzjVz6ldZNVFgXqsbtCBkQCCHXks=
Subject key identifier: 5E:BB:D9:6A:40:D5:16:17:07:5A:CC:9D:6F:42:7C:55:98:B0:23:3D
Authority key identifier: 8C:58:7A:2C:09:16:7F:9D:A7:32:74:D2:98:F9:9F:DB:5D:28:77:7B
Certificate issuer: /CN=8c587a2c09167f9da73274d298f99fdb5d28777b
Certificate serial: 019F94370BC4726A3DE2ABBD6C750A2FAE5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
Manifest number: 79
Signing time: Fri 24 Jul 2026 13:01:03 +0000
Manifest this update: Fri 24 Jul 2026 13:01:03 +0000
Manifest next update: Sat 25 Jul 2026 13:01:03 +0000
Files and hashes: 1: IeUZpA_cRarzmmAKl1mTNeS2w6Q.roa (hash: Zxv/aB//3mF6nuzItLAr8aMXf7kFc9bokYqKElvga2c=)
2: jFh6LAkWf52nMnTSmPmf210od3s.crl (hash: oApDWDzIRiEuckZ2Ky4wjU+LwlJPk75BGXExsYoF+W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:0b:c4:72:6a:3d:e2:ab:bd:6c:75:0a:2f:ae:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c587a2c09167f9da73274d298f99fdb5d28777b
Validity
Not Before: Jul 24 13:01:03 2026 GMT
Not After : Jul 25 13:01:03 2026 GMT
Subject: CN=5ebbd96a40d51617075acc9d6f427c5598b0233d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:56:91:17:0b:9a:ef:91:18:59:3a:7f:f4:84:
b6:97:92:30:11:e5:e5:49:1b:1f:d0:72:51:f1:cb:
b8:c7:2b:85:14:34:10:26:d7:f0:cf:47:f3:00:2b:
3b:b1:44:42:61:b3:c0:e8:24:8e:62:40:53:d0:ca:
d3:0e:4b:0c:cb:9d:50:cd:5b:35:27:78:e1:09:a1:
88:98:7d:d9:2b:1f:2b:c4:fd:77:76:52:79:19:8d:
51:1f:52:47:b3:8e:55:2c:24:30:56:f1:92:0b:d1:
bf:2e:49:34:c6:e0:19:19:d2:d0:a4:8a:6c:c1:2f:
67:6a:72:f9:26:7a:78:bf:dd:72:3b:c2:11:d7:17:
45:31:b3:4d:66:e4:94:57:3f:75:09:e8:64:6e:be:
9a:93:6b:52:c9:89:30:4d:bf:3c:0b:e2:34:01:12:
7d:7c:d1:64:39:59:03:70:5a:28:80:e4:b0:33:93:
7b:e9:9c:f6:ee:45:6f:f5:9f:de:a3:ab:3c:1a:4c:
82:1c:03:b7:f2:1f:63:46:ab:5a:11:42:0d:94:de:
95:dc:dc:dc:e6:8e:85:cc:49:22:a8:ec:4e:09:35:
cf:6b:ec:3b:2e:b0:7f:04:9c:62:42:e4:9c:43:f1:
a9:3d:9c:52:38:01:88:2f:7e:7c:5b:13:c4:79:62:
d6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BB:D9:6A:40:D5:16:17:07:5A:CC:9D:6F:42:7C:55:98:B0:23:3D
X509v3 Authority Key Identifier:
keyid:8C:58:7A:2C:09:16:7F:9D:A7:32:74:D2:98:F9:9F:DB:5D:28:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ae:5f:fa:7e:c5:af:b6:dc:2d:99:e1:69:86:78:be:f6:28:
49:41:ed:60:f9:54:e6:e2:e6:a7:1b:ee:f0:06:e3:82:38:d1:
6a:d7:bb:5b:06:f6:fa:95:46:c8:17:c2:45:e7:c8:66:76:27:
4d:65:13:6d:86:0b:37:6a:13:b7:92:37:8f:2d:5a:f8:42:64:
35:15:21:c0:19:b2:ae:81:1d:e4:99:75:12:1c:c1:ea:bc:a7:
0d:92:f8:8c:41:76:73:8e:cd:f5:98:1e:3b:9a:ee:a8:21:7f:
84:56:d2:1f:57:ae:e5:17:3b:3b:86:4f:eb:b9:d2:cf:34:d0:
cb:d2:e3:26:3f:4d:d0:cf:b9:bd:e4:af:d2:55:69:1d:9f:05:
fa:3c:ff:f6:0f:51:f3:0b:82:5e:90:e2:1b:b4:b3:63:1e:e3:
68:30:25:65:fd:98:17:c1:fb:4a:e6:50:6c:47:cf:62:8a:d8:
9d:b0:36:ca:71:e5:80:a3:f6:8e:c2:2d:40:c2:4c:13:eb:ec:
81:b3:32:2d:16:49:2b:8a:05:3c:e6:00:24:4c:09:48:d9:06:
a1:29:ca:fb:67:d5:c9:77:f4:fb:28:69:05:d0:4f:52:84:fa:
0a:e6:f3:bf:c8:d8:b4:1a:e0:90:25:af:03:c6:79:dc:33:12:
55:c1:78:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:24:08 2026 by rpki-client