Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: Alb4ScWu58EL8I5EpkEFBXdx6Z3nFuUcZgER9WOm3UA=
Subject key identifier: 47:B4:C3:CE:09:B0:48:28:5E:EA:5E:67:3C:E3:D2:7A:B9:B0:81:8B
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 019F965C1705B54907BE73CC4C8B6BEB5792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 23:00:45 +0000
Manifest this update: Fri 24 Jul 2026 23:00:45 +0000
Manifest next update: Sat 25 Jul 2026 23:00:45 +0000
Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: nKpr/YV623YMY3Y9U0qdtm9rAgomho+uClvcZgaqGUU=)
2: psZNmPYVql98KxRd5_J9v8TyFDo.roa (hash: 83pmxITkPLNCEyrAljxQNeti1DcWIEULoY0Jkfv3Y08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:5c:17:05:b5:49:07:be:73:cc:4c:8b:6b:eb:57:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Jul 24 23:00:45 2026 GMT
Not After : Jul 25 23:00:45 2026 GMT
Subject: CN=47b4c3ce09b048285eea5e673ce3d27ab9b0818b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:45:9a:80:03:70:f3:2c:90:e8:70:ac:6a:dc:
81:9b:3d:10:82:ad:59:fb:3d:b4:7d:cd:c8:c1:85:
5d:3b:df:b4:1e:79:b5:69:d1:af:af:03:47:ca:60:
41:74:d1:12:7a:2e:1a:78:7e:bd:b6:29:b0:0d:74:
14:9c:6e:8d:4f:ed:6f:1d:d1:53:6c:99:bf:6a:a0:
d1:65:f3:cf:e4:b1:ba:6c:56:e5:25:e1:d5:b0:91:
4d:8e:25:c7:e9:c9:ea:e9:6f:87:33:da:6a:04:e6:
70:cd:fb:d5:62:32:22:4a:92:b4:ba:de:3e:29:76:
84:97:7f:40:2b:d4:24:37:61:18:1e:3c:a1:2d:bf:
d9:80:9c:be:ab:8b:56:60:a0:31:0f:bf:36:47:13:
23:df:6c:3e:b5:c4:9f:02:49:4c:2d:2c:f9:db:7f:
1e:8b:3e:e5:db:74:82:7a:9a:a1:9a:5d:be:cf:c6:
11:64:36:84:2b:be:0e:84:9d:bd:8b:6f:39:6d:14:
07:bd:35:ff:e2:c6:8d:53:fa:1e:fd:8b:38:db:3e:
e1:77:09:1b:3f:f9:49:30:81:02:27:ea:ff:40:1b:
d7:1c:e6:c2:c3:6b:ce:dc:3c:8e:90:a4:66:9d:d4:
ad:81:e1:9c:18:a3:2b:8a:86:95:2d:23:cf:63:57:
68:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B4:C3:CE:09:B0:48:28:5E:EA:5E:67:3C:E3:D2:7A:B9:B0:81:8B
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:80:78:0f:7e:21:ad:8f:79:fd:4d:0a:f2:73:2f:cc:1c:d5:
69:27:e1:1c:f2:21:cd:e7:70:06:55:88:78:92:da:bf:af:4a:
64:33:c5:d3:f1:5e:c5:82:e1:a8:0a:13:18:72:55:01:36:3c:
25:0a:e9:3f:6e:d2:e7:eb:9a:1e:26:e3:77:bc:62:ba:2c:72:
1c:9f:11:df:cb:5d:10:34:4e:f7:ac:2d:6b:76:63:ba:0d:92:
50:a2:eb:76:0b:2c:e4:30:18:4d:02:32:62:bd:21:04:b3:e0:
14:0a:98:ac:ac:2d:48:a8:85:82:28:51:c1:7f:57:45:e5:01:
b2:84:bd:58:7e:7f:10:f4:93:1b:8d:6c:52:0f:7d:17:3c:5b:
a8:f3:18:dd:a0:9b:50:24:a3:8f:84:5c:aa:c9:14:be:93:02:
73:6d:10:0f:f0:df:06:78:3c:7e:42:98:b3:52:d2:e7:dd:61:
01:e4:11:9c:cb:9a:aa:f7:35:8f:b7:c2:1d:e0:e4:f4:79:bd:
c4:e2:12:47:88:b2:08:90:6d:9a:2d:9a:2e:f5:8e:8e:31:4c:
c0:de:b0:b4:6e:be:d3:b3:09:ae:46:79:79:51:c7:dd:62:cb:
c5:57:34:23:d8:1c:bd:a5:03:75:a9:00:c1:cd:da:37:b4:80:
f9:6d:b5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:47:45 2026 by rpki-client