Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: I1sL9vNDq1LX41Ze9qIelabQvRhXDW1ySd8eIVfe4P4=
Subject key identifier: 80:CE:C6:AD:65:54:A8:FB:1C:FC:64:7B:9F:83:1A:60:31:0F:6E:85
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 019F935BDDDC867DD7429689E889DC6694EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 1575
Signing time: Fri 24 Jul 2026 09:01:39 +0000
Manifest this update: Fri 24 Jul 2026 09:01:39 +0000
Manifest next update: Sat 25 Jul 2026 09:01:39 +0000
Files and hashes: 1: 2zatrSnboczgSJyqZMZSlWLUtgU.roa (hash: X83ll2h7XLvQkyBb5b0DZRoRK6wcb/CaXhRs2FxEIUI=)
2: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: a0G0Enx+F3drP+Zgto+o7/gwCa6Bn9G8rYbNGDM+N1Y=)
3: RrW3iZFpgHFuK1USxDsMnM1LusA.roa (hash: /DqnuC18dHwT7Z+hUMZE9xD1UgRrxpE5xwXXr5v68Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:dd:dc:86:7d:d7:42:96:89:e8:89:dc:66:94:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Jul 24 09:01:39 2026 GMT
Not After : Jul 25 09:01:39 2026 GMT
Subject: CN=80cec6ad6554a8fb1cfc647b9f831a60310f6e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:f2:b1:94:61:7f:0c:72:c0:a3:ba:b7:76:
f4:12:91:3d:f4:52:19:f2:6a:c4:34:5b:d4:8a:27:
9e:a1:5e:2b:10:7f:31:e0:3b:1c:61:26:2e:72:99:
bb:0e:73:17:c2:1e:04:d2:d6:89:fc:cc:82:83:a6:
c4:71:2e:5a:70:72:4f:a0:47:25:fb:53:a3:35:8f:
6f:6a:6b:6b:a0:9f:ba:d1:e3:06:cc:29:0d:40:43:
84:b7:cc:b8:55:f5:54:88:e9:1b:f2:09:35:be:06:
68:23:e5:5e:b7:e1:2d:9e:ad:e3:c6:d4:df:1e:44:
ac:6b:94:6b:f6:40:fa:48:85:fe:e2:36:f7:64:ca:
a7:58:10:63:4f:46:ce:80:1f:19:2c:ba:11:2e:85:
bc:f2:87:e5:8a:24:63:56:6c:40:46:6c:42:f5:86:
77:05:a6:a5:e9:3c:88:c5:0b:d5:1b:56:e9:66:33:
fb:57:d2:19:8b:c1:01:b3:b7:b4:fb:b4:eb:f5:15:
cf:32:e4:2c:19:0f:1b:fb:63:cf:87:fb:31:fd:20:
71:14:d0:87:f8:a6:9a:2e:ef:ae:17:87:71:98:b2:
e0:c9:d1:c6:f5:cf:34:c4:21:dc:c8:08:d0:e6:c2:
73:07:5b:87:3a:ae:ed:fd:95:9b:13:42:b3:b8:fb:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CE:C6:AD:65:54:A8:FB:1C:FC:64:7B:9F:83:1A:60:31:0F:6E:85
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:55:91:38:fa:6f:d7:56:78:96:d5:f6:65:37:65:f4:26:a5:
48:80:6d:1c:35:0e:99:b4:b8:40:a8:35:f8:47:99:3e:33:9f:
97:52:ca:4f:b2:40:7f:d0:68:69:0a:fe:70:f1:61:a3:17:4f:
a7:de:90:91:4f:d7:9c:4d:0f:3f:02:d1:37:96:1b:dd:09:55:
65:cd:6e:e9:3e:98:30:77:c1:b4:a1:89:09:9f:d9:e3:a7:92:
65:f0:b8:e7:f0:43:f5:07:b9:dd:52:aa:da:a4:b1:aa:d2:8a:
e1:41:61:80:f9:94:fb:4c:13:d8:16:c6:98:8f:ed:ad:aa:45:
80:f2:59:e4:2a:18:3e:cd:91:ca:86:b1:fe:11:7a:f5:d2:97:
d8:40:5f:b6:83:b7:84:2e:61:ba:e3:c3:34:ce:00:f3:f2:5b:
4e:8b:78:06:73:eb:75:0c:78:30:73:f2:dc:05:a9:e0:57:a9:
06:5c:b8:a8:17:d5:2b:74:0d:7f:b1:c0:a9:88:b1:20:a3:8b:
10:60:b8:de:22:5b:5f:6b:6d:95:30:55:a6:47:2d:a1:23:29:
be:a5:3b:c3:45:fa:bf:0f:13:86:5d:6e:5f:b0:45:06:91:66:
9a:ed:55:43:6e:7f:2b:78:9b:74:93:a0:fb:f8:89:84:5a:f4:
64:0e:4b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:09 2026 by rpki-client