Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: cndWarPGfPRIalBaCy5+ysSU16YD+SNhiz+fbxvh2TA=
Subject key identifier: A6:1D:83:EF:A9:37:2B:CD:94:CF:59:DC:11:B8:CE:55:E9:EB:1C:30
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 019F93C96A272F5461E151A59F655B7127D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 19D1
Signing time: Fri 24 Jul 2026 11:01:18 +0000
Manifest this update: Fri 24 Jul 2026 11:01:18 +0000
Manifest next update: Sat 25 Jul 2026 11:01:18 +0000
Files and hashes: 1: 2qzM6x9baKtwfCTVUC_vOHhaD9Q.roa (hash: slF8umIXO8u1xfM7uQvlWuXSbFnPY4ktqm1QtTsVvaw=)
2: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: GhxJJtj2VpwTLeh16n4Q1ICbSxRHh3oP5qgx8Xw7osE=)
3: qj22xyeLu60pShMzvtnaPDnNQis.roa (hash: Fv9rfv3pioycRBue2RhOjkBOSKLXM7H4+uyv5DM79wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:6a:27:2f:54:61:e1:51:a5:9f:65:5b:71:27:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Jul 24 11:01:18 2026 GMT
Not After : Jul 25 11:01:18 2026 GMT
Subject: CN=a61d83efa9372bcd94cf59dc11b8ce55e9eb1c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:51:26:b6:8b:f7:6d:d9:93:f5:5d:84:ba:
5e:f8:0d:df:c3:2e:72:42:2f:8b:7d:e2:09:30:3b:
7a:ce:2e:59:4e:28:6f:45:a9:94:60:88:d9:ec:66:
93:17:4c:91:db:36:e5:5a:06:b3:66:6a:dd:1c:94:
d6:9e:30:e3:27:6c:9a:e4:c4:e6:fe:ce:36:25:5f:
73:d5:a6:e4:2c:fa:9c:25:8d:45:21:ef:ff:9a:be:
c0:d9:a6:e9:36:0a:85:f9:22:d5:4e:18:14:8f:e3:
ec:f5:f5:78:0a:3f:9f:5e:22:27:8a:64:3f:04:40:
38:42:9f:a5:fd:34:c6:35:d9:b7:7d:fe:b8:a5:14:
8f:74:80:5d:bd:39:7f:78:2a:34:76:52:4a:75:8d:
af:b0:c7:88:6c:4a:b2:c7:f6:16:0a:0f:95:c2:02:
7a:f3:ee:33:3a:0e:6a:a1:94:e3:16:b6:2c:26:99:
f0:7c:f3:25:d4:57:f8:4f:18:58:fb:da:e6:96:9f:
1a:86:e8:91:71:5b:5f:50:dd:37:75:b6:6c:21:bf:
5e:d6:79:9e:83:18:f1:f7:49:4d:d4:dc:3f:bf:d7:
39:80:25:be:59:f7:f0:e2:f5:c2:c3:51:b2:21:ce:
6a:71:05:fe:fd:b4:40:8a:2e:a4:fa:ec:48:ba:e9:
34:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1D:83:EF:A9:37:2B:CD:94:CF:59:DC:11:B8:CE:55:E9:EB:1C:30
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9c:7e:35:2a:08:b5:99:2a:15:4f:41:54:98:49:3c:b3:fe:
30:4c:98:1a:16:47:ed:60:dc:ab:a9:1c:1b:6d:1f:71:6b:e1:
29:09:3e:4e:30:2b:78:fb:53:ed:41:8e:fe:29:fd:f0:5d:87:
75:b2:35:e5:78:4a:ad:4c:dc:ba:f5:b3:bb:b9:27:bf:33:3c:
47:88:60:a8:b8:fd:a1:e0:cf:3c:2b:67:0c:70:a7:66:58:6d:
3d:0d:01:e1:fb:2b:7d:8d:fc:e5:a6:e1:8c:24:a4:e6:f1:8f:
8a:a2:7c:fb:21:24:44:0c:24:f6:ed:ad:12:10:22:b9:63:d8:
23:1b:48:bd:05:90:a3:13:a8:2c:3c:cc:85:2a:92:76:57:fb:
73:c6:72:a3:74:a6:57:01:e2:04:b4:a7:1d:03:c5:d4:dc:21:
98:3d:94:2a:23:1d:ac:fb:86:0c:54:97:ee:e5:f1:45:c4:84:
b2:96:05:90:b2:44:f0:19:83:1a:73:cf:f3:9a:41:7c:fe:eb:
92:d4:29:d9:85:7f:56:9d:db:71:05:c9:4e:7c:a3:34:66:cf:
90:b3:ea:6c:1c:17:0e:3f:30:7e:20:71:05:3b:14:6b:27:d6:
48:7a:30:2e:43:68:9c:56:dd:fe:cb:bd:65:89:0b:af:26:1f:
98:60:0f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:46 2026 by rpki-client