Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File: J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier: nVvvgeHUG9yrQ+49j5HQKmmGXU2Cfbfroy2B7CS0Mcg=
Subject key identifier: C2:4A:D2:5F:26:60:36:CB:E2:B7:58:8F:92:C1:DC:BE:88:F3:11:28
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 019F8EA24A337C54CCC73C5C673ADB58267C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number: 19CD
Signing time: Thu 23 Jul 2026 11:00:28 +0000
Manifest this update: Thu 23 Jul 2026 11:00:28 +0000
Manifest next update: Fri 24 Jul 2026 11:00:28 +0000
Files and hashes: 1: 91q60wwCACPLxzl7znvLX0BSGEA.asa (hash: iRTNLqZ5nQm9dIpVsbb2+nwe5a7JsQ+j5M/LXHBcYYk=)
2: EaAMsvwoHBe4yq1jbHkVSMOCcms.roa (hash: tCewwDnNFA4yqzd0eb5IKas5uAfl5Rr1tmwDJ4VUURI=)
3: IvpEH6hd1qJi0dDCHitCwtgqWwA.asa (hash: pdg3WShcX162alecCVt/x5tpVyFcxh+QQl8q0PDMBOo=)
4: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: H8J3zhxE+7jDJlUolxmCXg1eKTmfssv4TSqyft84gJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:4a:33:7c:54:cc:c7:3c:5c:67:3a:db:58:26:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: Jul 23 11:00:28 2026 GMT
Not After : Jul 24 11:00:28 2026 GMT
Subject: CN=c24ad25f266036cbe2b7588f92c1dcbe88f31128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:23:a2:75:14:17:99:0e:8f:e5:bc:3f:b4:9a:
94:a3:96:c5:84:b8:66:87:b0:75:e1:ba:4c:28:05:
9b:32:ee:83:d2:d5:24:39:14:27:2f:36:43:fc:ff:
79:ca:c8:91:9f:9b:f5:bd:1c:df:62:b1:ee:e3:18:
12:78:57:25:e9:ca:e9:31:64:ce:e3:97:36:de:ee:
d0:0b:2a:4c:65:b5:82:7e:4e:fb:63:62:69:9b:f0:
1a:d2:71:2b:0e:0b:ab:10:d2:38:f4:75:6e:f9:7f:
9b:84:73:f6:39:2c:1e:dd:d5:3e:ff:1c:cc:5a:34:
ad:ea:fb:32:34:ff:c0:32:84:69:f9:93:27:b5:4e:
d3:a0:85:6a:86:32:3f:31:af:2e:f0:dd:b9:3b:be:
03:1e:56:7e:ff:ff:24:a7:60:88:4d:1a:be:10:b7:
09:be:3a:80:a2:31:6f:35:02:d6:63:59:d3:a2:99:
c8:1f:aa:10:b5:d3:25:37:3d:ff:23:de:9f:f1:32:
40:c7:1e:46:52:db:00:b8:df:c3:dc:80:ca:9e:43:
50:00:0f:59:ca:35:d9:10:53:e7:32:1e:d7:eb:62:
60:8d:65:8a:b4:3b:81:44:2a:9a:bb:d6:55:c3:66:
64:a0:8d:d1:f9:74:0a:dc:2c:66:d8:ef:4d:e2:fb:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4A:D2:5F:26:60:36:CB:E2:B7:58:8F:92:C1:DC:BE:88:F3:11:28
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9f:24:d9:2f:ba:84:04:31:eb:ed:43:fe:c3:b2:7f:61:de:
63:7e:66:9e:68:d6:f9:99:90:5f:de:e0:e2:22:5a:d3:8b:8d:
0e:a6:28:e1:53:40:8b:05:c1:01:ca:db:1d:0c:1d:c6:7f:76:
7d:13:f9:aa:b6:ae:e5:6b:f8:fc:0b:e1:80:5a:9f:a7:e4:08:
ce:92:96:94:0e:d8:19:47:46:38:b8:9d:82:11:0d:cf:e7:cb:
8d:d3:79:af:1a:ab:b8:83:c4:a8:41:4c:0a:91:2d:f5:30:71:
1d:a5:bb:f7:dd:51:5a:b2:3c:37:f6:1a:3e:ac:45:f5:33:41:
96:15:af:68:93:f2:97:c8:9d:ca:0f:64:8c:72:9a:95:52:87:
e6:88:15:16:4c:3a:6f:a9:e3:27:30:4e:7c:00:36:fe:17:f6:
97:84:55:8c:ef:37:f7:02:f1:5e:ff:34:6e:35:06:ba:f7:bf:
24:f0:a9:1f:6b:38:76:f7:39:5a:d6:8b:d2:6d:e7:57:3f:da:
9f:5d:fd:a3:bf:15:72:93:97:e0:68:c5:6f:89:da:e0:ba:51:
cc:fb:a0:17:16:e2:07:21:69:8e:e6:67:ab:bc:89:ca:16:90:
97:cb:1e:d3:e8:3e:c0:ed:69:0f:83:28:79:d5:82:69:14:7f:
df:ae:d1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:59 2026 by rpki-client