Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File: jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier: rVLSe2DpkkJvqJQ3igH2jQ/CkaMg4dLS516wcioBMbk=
Subject key identifier: F4:C9:9D:F1:A8:4E:04:F8:8D:2C:8E:F6:31:B3:FA:1E:04:3B:38:83
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer: /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial: 019F91DA62CFD332EA099FC46FFC9433E7F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 02:00:36 +0000
Manifest this update: Fri 24 Jul 2026 02:00:36 +0000
Manifest next update: Sat 25 Jul 2026 02:00:36 +0000
Files and hashes: 1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: z9I0Lca/a0OS9YaKod6l1UcJK1vl9ZsV7W1dbKEjnFM=)
2: twrQ972oI9ZzJB5lNnpdx6DecVA.roa (hash: R4HcQNJ+RCE6vVMBKIPOjPzd/TdNdxhTx9KPeq1FVRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:62:cf:d3:32:ea:09:9f:c4:6f:fc:94:33:e7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Validity
Not Before: Jul 24 02:00:36 2026 GMT
Not After : Jul 25 02:00:36 2026 GMT
Subject: CN=f4c99df1a84e04f88d2c8ef631b3fa1e043b3883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:40:6a:28:13:b8:bd:ef:ef:26:e9:ba:a6:
23:d8:5d:22:40:a8:d8:ec:f1:8a:91:6c:96:e5:68:
36:86:00:f7:6b:0e:e5:be:1c:84:31:c5:1d:97:d4:
15:be:6a:64:01:0a:0b:11:d9:ae:0c:c6:1a:2b:c6:
bc:3c:43:6b:fc:47:d0:bc:5d:fb:d0:42:41:bf:20:
b2:9f:a9:ca:32:89:05:22:50:7b:1c:4c:18:04:05:
ff:37:67:d8:d7:a9:72:90:23:85:ca:22:3e:3b:09:
59:a4:1c:2c:34:7d:cf:6e:3f:69:e1:51:0a:19:a5:
7e:2a:89:5c:cf:14:6a:c5:8a:40:c7:cd:e3:6e:28:
15:c0:92:f2:71:db:1c:6b:8f:80:18:71:c3:7c:ad:
dd:e7:80:70:dd:a9:7f:5d:5c:0f:94:8c:c6:90:b3:
07:d7:c2:a8:01:8d:30:12:bb:6e:48:e4:87:14:88:
e4:f7:1b:20:c6:27:47:a1:ba:fe:3d:7f:bd:7a:29:
bf:67:82:e1:ab:cd:6f:65:bd:32:76:99:09:fe:e4:
68:67:f3:d9:72:f9:00:15:44:49:cb:ef:56:da:98:
01:ab:ae:19:a3:e3:b8:a7:7a:3f:06:bd:57:96:3b:
28:3b:03:22:46:0e:4e:31:17:08:5d:22:2a:a3:fb:
92:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C9:9D:F1:A8:4E:04:F8:8D:2C:8E:F6:31:B3:FA:1E:04:3B:38:83
X509v3 Authority Key Identifier:
keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bb:f4:ab:50:89:d5:c0:cf:df:1a:b6:31:cb:ee:83:d8:c7:
ab:e3:76:28:87:77:32:15:a4:ac:d7:82:64:fd:06:26:7a:55:
b1:f7:0b:f0:cc:06:9c:f7:3c:18:be:85:59:94:22:0c:bd:8e:
d5:15:f6:6c:13:de:fb:51:03:ee:29:38:8f:31:07:35:5c:99:
c9:b4:34:ef:61:c1:47:8d:b7:bb:fa:c3:12:ae:6e:e1:3d:0e:
d0:34:c7:8c:84:b7:5e:81:55:58:a0:53:07:43:69:66:24:d3:
3a:28:11:64:8f:d2:13:a6:36:62:6a:11:a2:a6:2b:e7:f8:21:
ad:31:83:1c:1a:77:85:73:cb:11:1d:52:7f:f2:6f:ae:95:59:
ef:63:68:5f:d7:57:3e:18:27:2c:d3:b7:8d:d8:fc:48:a1:52:
8d:1e:97:fa:e6:5f:d7:fa:76:b8:cd:95:d3:40:45:e8:01:0a:
97:eb:8d:dc:44:1f:89:c3:73:3d:99:32:f4:53:c2:90:1e:43:
21:b8:b4:9f:c7:d8:ee:e8:05:93:4b:fd:5b:d0:28:31:eb:e0:
88:e9:48:7d:10:3d:fd:5b:7c:ec:82:72:3e:8f:1b:4e:f1:d0:
c5:84:3f:65:08:04:89:52:47:47:b2:47:6b:b8:55:f1:42:25:
21:67:b2:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2mLP0zLqCZ/Eb/yUM+fzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlOWIxZmUzMTJmMDA5ZjIwOGVhOGEyYjczMjBjZWE3NjVk
ZDUxOGIwHhcNMjYwNzI0MDIwMDM2WhcNMjYwNzI1MDIwMDM2WjAzMTEwLwYDVQQD
EyhmNGM5OWRmMWE4NGUwNGY4OGQyYzhlZjYzMWIzZmExZTA0M2IzODgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8lAaigTuL3v7ybpuqYj2F0iQKjY
7PGKkWyW5Wg2hgD3aw7lvhyEMcUdl9QVvmpkAQoLEdmuDMYaK8a8PENr/EfQvF37
0EJBvyCyn6nKMokFIlB7HEwYBAX/N2fY16lykCOFyiI+OwlZpBwsNH3Pbj9p4VEK
GaV+KolczxRqxYpAx83jbigVwJLycdsca4+AGHHDfK3d54Bw3al/XVwPlIzGkLMH
18KoAY0wErtuSOSHFIjk9xsgxidHobr+PX+9eim/Z4Lhq81vZb0ydpkJ/uRoZ/PZ
cvkAFURJy+9W2pgBq64Zo+O4p3o/Br1XljsoOwMiRg5OMRcIXSIqo/uSmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTJnfGoTgT4jSyO9jGz+h4EOziDMB8GA1UdIwQY
MBaAFI6bH+MS8AnyCOqKK3Mgzqdl3VGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanBzZjR4THdDZklJNm9vcmN5RE9wMlhkVVlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iYTRkYTYtMWQxZS00ODc4LTg3NmUt
YTg1Mzk5ZGI2MGJmLzEvanBzZjR4THdDZklJNm9vcmN5RE9wMlhkVVlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iYTRkYTYtMWQxZS00ODc4LTg3NmUtYTg1Mzk5ZGI2MGJm
LzEvanBzZjR4THdDZklJNm9vcmN5RE9wMlhkVVlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7v0q1CJ
1cDP3xq2Mcvug9jHq+N2KId3MhWkrNeCZP0GJnpVsfcL8MwGnPc8GL6FWZQiDL2O
1RX2bBPe+1ED7ik4jzEHNVyZybQ072HBR423u/rDEq5u4T0O0DTHjIS3XoFVWKBT
B0NpZiTTOigRZI/SE6Y2YmoRoqYr5/ghrTGDHBp3hXPLER1Sf/JvrpVZ72NoX9dX
PhgnLNO3jdj8SKFSjR6X+uZf1/p2uM2V00BF6AEKl+uN3EQficNzPZky9FPCkB5D
Ibi0n8fY7ugFk0v9W9AoMevgiOlIfRA9/Vt87IJyPo8bTvHQxYQ/ZQgEiVJHR7JH
a7hV8UIlIWeyXQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:38:34 2026 by rpki-client