Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: XMepRfSjP7cazK9cB2Z+hGBwxeuK6iWBlh4RlT2rFHA=
Subject key identifier: E4:29:B8:D2:C3:1B:92:76:35:3E:FA:DA:6F:BD:EA:6F:19:60:1B:32
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 019F92114E1B282DD2AC992C74CA80DADCD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 0856
Signing time: Fri 24 Jul 2026 03:00:35 +0000
Manifest this update: Fri 24 Jul 2026 03:00:35 +0000
Manifest next update: Sat 25 Jul 2026 03:00:35 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: jiEbvbaZ5cMUL5tfoRUnl74SJq+aiPI9TjQwc4XpnlE=)
2: ZSAjriqrsKE2YYg2ALkBE1sHfcc.roa (hash: FpdwZa7IuH64lhVGz4Lc/UmsF5GpQU9SPxwgj/w+504=)
3: g28y0lP7mHQY3_zrFQA4uIJDkhk.roa (hash: kLY9/EwIF/rD0/y9uzwAOFmWCsA9t1ocdJGqYiU1zTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:4e:1b:28:2d:d2:ac:99:2c:74:ca:80:da:dc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Jul 24 03:00:35 2026 GMT
Not After : Jul 25 03:00:35 2026 GMT
Subject: CN=e429b8d2c31b9276353efada6fbdea6f19601b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:8a:1b:c9:aa:e9:9f:71:e6:7e:c4:dc:12:
c8:59:4d:51:4c:67:6e:9e:fe:7b:2b:1e:01:f1:40:
d7:d5:aa:77:59:61:f1:3c:e2:d6:73:ff:72:86:c3:
96:3a:10:91:41:1b:a3:65:3f:68:26:21:58:21:67:
b3:73:98:9a:02:ce:9c:2f:4e:01:9d:50:1d:11:1b:
2f:e7:20:77:b1:d2:20:74:60:d6:26:89:02:aa:70:
bc:37:12:e9:4b:4b:ce:83:ae:53:52:5a:dc:47:5c:
26:16:93:e7:62:6c:72:ea:3f:45:6f:8d:2d:f3:40:
48:6c:c4:d7:52:ab:fd:9b:00:ae:75:f5:21:5f:e6:
91:a9:9d:76:c1:9f:f3:c5:35:40:45:ab:ca:8a:09:
38:c0:d1:99:01:d7:00:40:43:f2:4a:b1:e2:35:2f:
7f:7e:83:b7:51:35:9d:21:ee:ee:64:de:35:df:03:
d1:26:39:3a:dd:40:8a:3e:dc:ed:5c:79:41:a3:47:
90:a7:5b:73:8c:7a:48:07:f0:28:31:a9:75:4b:e4:
ac:24:0b:38:51:d3:6b:d2:1f:2f:38:da:7e:24:2b:
c9:16:e7:63:7e:90:20:af:5e:75:a7:d8:45:31:c9:
da:0c:34:e1:b2:4d:5f:4c:6d:be:4f:49:3e:4b:c1:
80:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:29:B8:D2:C3:1B:92:76:35:3E:FA:DA:6F:BD:EA:6F:19:60:1B:32
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:be:29:53:d9:dd:6b:53:80:c8:5d:a5:77:b4:e9:8b:18:39:
57:a8:42:7d:ec:5b:86:f2:c1:54:8a:11:85:74:7b:cd:88:2e:
ec:7a:c5:5c:d0:f9:57:ca:72:ea:76:d7:37:43:f3:28:90:54:
5d:d6:c4:01:d2:ae:48:3f:ee:be:a6:06:4a:92:36:77:cb:9f:
8c:d3:38:66:bf:bf:4b:cc:1d:4f:3e:af:75:4a:53:10:7e:f9:
aa:b0:d8:26:d3:0c:f9:06:80:20:b2:15:6f:9f:35:c9:68:e2:
68:bf:b9:84:b8:0d:56:02:ca:84:49:76:e2:f6:8b:3b:2f:fb:
89:f6:96:a8:47:e3:c0:e0:4a:4a:10:1c:72:0e:ba:6c:16:83:
a1:f1:e3:da:7b:0f:bc:09:27:f9:ec:50:ce:2a:95:61:c9:de:
c2:94:6d:ba:d2:3a:d4:26:13:ba:62:11:7e:8e:46:95:9c:56:
f4:23:57:5e:63:f3:bb:9a:fd:6b:07:6a:4d:00:4c:b8:fc:35:
61:fa:90:f0:00:aa:1b:c0:e4:b4:08:33:21:2e:e4:eb:81:66:
b5:e8:6c:ff:4c:ee:71:b8:04:73:a0:8a:95:1b:73:a0:78:ca:
6f:6d:60:73:9f:63:5e:2d:31:de:27:c7:25:d8:46:ed:83:41:
21:47:88:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:11 2026 by rpki-client