Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
File: joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json)
Hash identifier: J084nhZZWnXMiiJf0oFYfADiNh+1I8GxQgLBPSEhaaA=
Subject key identifier: BE:C5:A4:D2:34:A6:9D:A4:7E:E4:0A:A6:AD:70:5E:7E:1C:59:67:A5
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 019F8F10F4A422CA35B93284034FBD714C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
Manifest number: 0C93
Signing time: Thu 23 Jul 2026 13:01:20 +0000
Manifest this update: Thu 23 Jul 2026 13:01:20 +0000
Manifest next update: Fri 24 Jul 2026 13:01:20 +0000
Files and hashes: 1: VonIBij0yRwrRDr8qNAy1e4NkTc.asa (hash: XHC+gatrojCnYMfiZp2We5SigI6aUJwD2ilzVv+oSzo=)
2: i-2Qajd4m8riLuobvPBkDzzfa5s.roa (hash: kJTbL3ROqa3RXxMLEUptXN8oatw6z/BtfYm3rGnRJXI=)
3: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: ROkN0iv0/Srs2ObMUAq9uCR6DPqjk4hMwcqC+ptBp0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:f4:a4:22:ca:35:b9:32:84:03:4f:bd:71:4c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: Jul 23 13:01:20 2026 GMT
Not After : Jul 24 13:01:20 2026 GMT
Subject: CN=bec5a4d234a69da47ee40aa6ad705e7e1c5967a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fa:e1:96:0a:41:be:53:92:b1:4a:4a:b5:12:
d7:26:d7:a1:d5:c6:bd:72:7e:40:b1:96:30:06:b0:
29:12:eb:ba:20:5f:1f:65:d5:05:dc:24:3d:d5:d9:
1c:f4:92:b2:7d:0f:e4:a3:29:4d:3d:8a:da:48:de:
a5:d1:ab:77:09:a3:76:d5:44:65:c4:b5:90:61:51:
3d:3e:6a:49:a8:c1:29:b3:59:84:10:a5:4b:b7:2f:
ea:67:ed:09:d0:8b:ec:bc:79:21:2b:d3:21:34:d3:
f4:c5:f1:ed:da:19:99:ff:2a:d2:e2:2e:88:29:8f:
55:4d:fd:ae:fd:5c:3f:a8:d3:25:cc:1d:f6:58:a5:
2e:2f:2e:29:e6:88:ee:e3:a5:0d:1c:6d:4c:e1:86:
a4:45:bd:30:1f:f1:60:45:2d:45:c5:17:16:21:0d:
88:c7:22:73:f7:d0:de:5c:01:ea:3c:e6:d8:57:49:
5a:a3:00:0b:00:43:3f:fa:24:bd:9e:e2:c6:6f:fe:
a5:b4:d2:c1:de:e0:f6:2e:3d:df:3b:f6:12:68:a6:
5a:61:76:a1:6a:8c:93:7e:31:8a:94:58:41:5c:fb:
ce:6d:36:a2:13:f7:3b:e9:b0:43:a0:df:66:3b:a3:
4c:b1:12:f8:06:06:9d:25:56:69:ff:b8:c2:a7:67:
07:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C5:A4:D2:34:A6:9D:A4:7E:E4:0A:A6:AD:70:5E:7E:1C:59:67:A5
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5a:cd:fc:d8:d0:5a:08:74:0a:77:da:40:6b:79:9c:e2:05:
f0:d9:8f:6c:1d:4d:f5:cd:d4:93:c5:d9:45:0a:58:7b:ed:4c:
9d:9f:f6:1a:0e:f1:16:02:b6:be:91:5f:5c:fd:32:51:b2:9e:
dc:71:ae:18:00:83:e5:ea:fd:21:32:b4:db:fd:70:bc:64:6d:
22:c0:39:9d:71:59:18:f8:3f:9c:8f:5f:3b:ba:85:74:77:ee:
45:7f:79:aa:c9:b7:43:c6:d1:dd:fd:f1:8f:1e:56:da:2d:32:
57:cb:59:28:0e:7a:28:1b:ef:f2:c1:f8:91:5a:93:a7:18:49:
20:9c:00:f3:ea:3f:ef:9a:ac:f8:3f:40:c7:ea:ed:8d:d9:f1:
79:f5:f5:89:07:0b:61:3e:29:06:29:44:0c:41:74:9e:bb:3a:
13:f1:0a:46:ac:ae:db:18:1e:3a:8d:89:43:6a:76:72:13:16:
d2:1f:89:14:ef:61:cd:9a:39:a3:03:8d:b8:9f:79:e2:2a:62:
0e:d4:43:bd:3e:da:af:4b:e4:a7:05:5a:49:62:db:93:0e:ae:
1b:cd:04:3f:25:8e:b2:6d:89:c0:a4:be:7b:12:6b:a1:55:99:
f3:08:95:a7:f6:12:12:b2:6c:50:c7:65:68:ae:f1:5d:d9:73:
ab:63:2e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:47 2026 by rpki-client