Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
File: jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json)
Hash identifier: RWcXW5Gt1lEPG/rmo+2SO+OxKLNDjNwxkxb3CUXXkxE=
Subject key identifier: 5A:76:89:B2:F8:30:FC:4A:64:E2:08:2B:AB:CF:7A:A7:12:67:B8:11
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 019F916DA91B49B8F934C1715FFAC53C6F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
Manifest number: 1A12
Signing time: Fri 24 Jul 2026 00:01:50 +0000
Manifest this update: Fri 24 Jul 2026 00:01:50 +0000
Manifest next update: Sat 25 Jul 2026 00:01:50 +0000
Files and hashes: 1: GCLSbZ4WxTfUOBV-fc0SMjtNYyQ.roa (hash: Y6dHUh2Hb2V1XitGNTZxZbxQzcG8Rh+QdevOx5L7qSw=)
2: IPD7v-J9c376oyXeNIKc_aWnNmQ.roa (hash: EEItVG+CeXn/JupxjY6OK4AdQvnwdrYLgxk2U0ldhpY=)
3: R_vcKb1Y3OVUOhgcnTj9SSJfqww.roa (hash: XO05SKBMj3JiSbINglJIVoADEMMaDqJEw7rnY2nqPeQ=)
4: ZBZd2Q5bGwHK_Dg2oikZZiqgRuE.roa (hash: c/sKdqGiU7G8qhtiizb8CdzGOvbzH+34+IqK7jLdymI=)
5: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: cZmdMIrgwK6IBtJPObMFt3nqGhTmgfDKSSNLsT0n5z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:a9:1b:49:b8:f9:34:c1:71:5f:fa:c5:3c:6f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jul 24 00:01:50 2026 GMT
Not After : Jul 25 00:01:50 2026 GMT
Subject: CN=5a7689b2f830fc4a64e2082babcf7aa71267b811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:5a:49:54:e1:99:6b:ca:3d:52:04:42:4f:
e7:dd:8e:5c:e3:ad:95:71:f2:43:2f:e4:40:be:93:
a7:85:3b:f1:ad:2a:81:08:7e:41:b7:4a:95:f7:d6:
a8:b6:f7:3a:1c:1d:00:bc:b4:b5:32:05:8e:7a:8f:
66:5c:00:78:36:4b:a7:f0:23:71:61:93:b2:bf:92:
e8:7a:90:2d:49:db:f3:c9:f1:68:a3:3a:1a:2c:9e:
19:01:f9:1e:41:54:45:c5:18:ec:92:1c:a8:d8:31:
eb:3b:be:a8:70:47:bd:e3:d4:ad:0f:ea:30:26:76:
83:20:9f:29:57:ff:13:09:fd:82:a6:95:e1:9f:40:
27:93:a1:09:44:c8:40:12:0a:84:81:f6:ea:ba:e1:
ea:a1:eb:6f:2a:b4:53:23:4a:54:b5:67:82:e9:ef:
64:c6:c3:4a:0e:6f:b7:21:26:8f:41:3e:c5:35:f4:
ff:28:74:d9:71:12:b1:84:83:40:ca:90:44:01:e3:
8a:61:61:90:57:45:29:c7:7c:fe:a8:af:b0:98:9a:
58:e4:0a:bf:22:10:fc:fb:aa:a6:32:ea:1d:a9:82:
08:97:53:75:26:54:d3:09:49:14:96:26:cc:1a:87:
06:30:f1:e9:ad:9d:64:40:07:a0:b6:3e:18:54:25:
38:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:76:89:B2:F8:30:FC:4A:64:E2:08:2B:AB:CF:7A:A7:12:67:B8:11
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:69:18:47:34:bd:6e:62:b7:1c:51:1f:c6:66:f6:12:27:40:
86:6d:09:5f:97:f8:52:76:0d:73:c2:3f:c6:c9:b5:da:76:bb:
30:b2:7f:ec:ba:cc:a0:75:dc:19:5b:24:4a:5d:fd:1f:d6:1b:
8f:ad:1a:35:75:56:7e:f5:f5:77:a4:5b:35:d7:7a:62:66:93:
f1:40:f1:92:32:fa:0e:60:42:e4:20:ce:87:c5:ab:f8:fa:cb:
48:5d:c1:ca:4f:6d:29:0e:b4:ff:db:0b:7b:30:b6:1f:06:e6:
83:f4:37:e9:cf:7c:54:c2:5c:b5:a9:70:4f:9a:29:3a:53:ec:
04:ae:1c:f9:9e:a7:3d:7b:e1:72:e1:90:2b:90:8a:af:29:d4:
f2:e1:e4:f9:3d:c6:71:39:8a:64:73:73:75:af:de:0e:37:5e:
69:9e:8e:78:42:a1:d2:14:e5:c8:46:1e:b6:1a:3a:98:c5:1e:
b6:31:f7:ac:92:62:a1:4a:5b:04:66:56:8c:45:dd:fc:c1:8e:
21:ed:bd:43:f2:05:7f:ee:dc:2c:a1:f8:39:44:b8:96:7e:8e:
00:7c:6e:21:17:c7:1e:f1:31:b8:7f:3e:34:df:23:39:34:ea:
c7:f3:38:7b:f2:4f:47:4a:fe:f6:06:2f:29:f9:20:84:c1:64:
19:9e:ef:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:42 2026 by rpki-client