Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
File: J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json)
Hash identifier: PK7GbZKFmEiSowOMqSpuqL523Mb5NBtzJHDNiqHypb4=
Subject key identifier: BE:5A:5F:F1:5E:42:54:CA:9A:D5:4E:B8:59:4A:E5:76:24:DC:09:2B
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Certificate issuer: /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial: 019F8FECC69CC9AC0C417A6C70E45501271E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
Manifest number: 0FE7
Signing time: Thu 23 Jul 2026 17:01:26 +0000
Manifest this update: Thu 23 Jul 2026 17:01:26 +0000
Manifest next update: Fri 24 Jul 2026 17:01:26 +0000
Files and hashes: 1: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: NcXqzuB7OIYCJ2m0fLkN8gS+QCfnt0kGTKxIcheTfZE=)
2: iE4PQgRjpLQVuICAA3DM5HMD4dA.asa (hash: 7+oS6U+AgY0TPyB7aEzZVmVleVk45DEZaf8PoCW8nYU=)
3: vemKapMmkStR7tolVhfdLCFIHqo.roa (hash: dA21yuRu1C5aB1w0/kkdpqei9cBkSg/W6yABWc5Hwig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:c6:9c:c9:ac:0c:41:7a:6c:70:e4:55:01:27:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Validity
Not Before: Jul 23 17:01:26 2026 GMT
Not After : Jul 24 17:01:26 2026 GMT
Subject: CN=be5a5ff15e4254ca9ad54eb8594ae57624dc092b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:74:df:3f:cb:e4:a5:fb:4d:89:19:bc:7f:f7:
b7:ee:d8:7c:02:b5:0c:93:cf:cb:34:e5:55:e1:a8:
57:ee:79:a8:38:31:f0:94:0e:29:0c:84:2d:af:63:
3b:56:57:f6:24:7a:b6:2d:96:b5:e6:46:92:00:8f:
b6:dd:8b:cd:2b:53:7e:39:8c:fa:14:c5:79:f4:4a:
dd:d2:8a:64:3c:52:59:2d:cf:9e:8a:c8:48:dd:38:
d1:10:30:a0:db:55:ee:62:1f:15:3c:e1:d1:64:bf:
55:41:84:b7:4a:79:81:b0:a3:cd:73:1c:68:b7:c7:
88:b9:a4:38:6b:70:28:a5:01:b6:a1:af:a4:4a:f3:
3d:84:7c:ca:51:6d:03:e8:e2:ae:08:05:73:ef:da:
d9:41:58:01:d5:4e:93:60:21:fd:73:5a:79:1e:5c:
00:f5:c4:ea:e1:7a:d4:e8:8d:bb:91:b4:ca:ca:b7:
07:b5:5e:8b:47:ed:54:7e:46:c6:a0:be:a2:5f:87:
3c:40:67:83:9a:7c:4c:de:ab:c8:14:04:c2:2e:c1:
00:ce:7e:8f:59:75:47:f1:d1:05:d4:a8:4e:2b:f8:
56:b7:ab:52:98:54:69:8e:be:37:4e:3f:33:d1:f7:
dd:9b:3e:18:9d:be:6b:0e:66:ba:f5:d0:05:a0:0a:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5A:5F:F1:5E:42:54:CA:9A:D5:4E:B8:59:4A:E5:76:24:DC:09:2B
X509v3 Authority Key Identifier:
keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:98:77:95:c2:65:5e:9e:dd:c8:8e:43:ac:35:86:69:44:2b:
8c:5d:26:2c:b0:1f:e9:42:cb:dd:7a:9a:e3:bd:10:7d:32:09:
bb:e8:c2:66:d6:40:e9:9e:59:7e:97:80:a2:f9:57:84:16:68:
35:21:3d:6c:68:3c:fa:13:67:7d:85:09:db:f8:bf:ec:6f:c7:
75:78:00:f3:11:5e:ff:ef:e0:25:b0:97:1f:5c:c9:35:f9:ad:
e5:72:33:f1:87:7b:a2:40:2c:e0:85:44:28:6f:4d:e3:3a:9c:
ef:5d:2a:56:91:9e:71:3b:d9:01:5e:9c:08:83:46:45:5f:2e:
f0:1a:cd:0d:a6:d8:bd:32:2b:f2:58:51:f7:1f:2d:c1:51:59:
7d:f8:8c:57:4c:12:66:50:ca:0f:1a:51:ce:cb:a0:ec:73:db:
62:b1:88:64:20:17:34:8c:6b:36:81:d8:27:fd:df:af:19:01:
0a:ad:6d:d2:a4:55:05:da:05:ec:20:6c:f3:c8:ca:f5:18:26:
8c:6c:74:c6:f6:eb:04:83:75:6a:85:27:88:ac:28:b2:43:8e:
fb:26:85:87:b4:84:55:e2:7a:b4:7f:7d:27:87:cc:f9:be:02:
9b:96:47:18:08:32:aa:32:bf:c0:8f:67:6f:51:b3:71:78:dc:
81:03:3b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:57 2026 by rpki-client