Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: 5xt3nr2HiRxwngHLAChiEt5CRsTEpwRg67i5VpECjxg=
Subject key identifier: 21:F0:57:C4:FF:DF:15:AD:81:90:A4:56:B0:23:55:76:DB:13:18:17
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 019F92ECCE5B1CBD0CD75DE44369D80BA86F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 19AD
Signing time: Fri 24 Jul 2026 07:00:20 +0000
Manifest this update: Fri 24 Jul 2026 07:00:20 +0000
Manifest next update: Sat 25 Jul 2026 07:00:20 +0000
Files and hashes: 1: 4qJQVO5xGJM4Hwo9a4t-72WANJk.roa (hash: ktLSVwEG6cBJVzhe6kIb459fjppN/37esTFhqreayZU=)
2: DIaQR8xGk_YiX6t4cr3tzmYixRI.roa (hash: P3ZeVKS0G+aV/yqQz7wSRAftClIeEK0UWSeMLvlDPyU=)
3: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: p/pCaw91TAVD/WHeVsT7NrUkH7+2O6sRJREww+FipMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:ce:5b:1c:bd:0c:d7:5d:e4:43:69:d8:0b:a8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Jul 24 07:00:20 2026 GMT
Not After : Jul 25 07:00:20 2026 GMT
Subject: CN=21f057c4ffdf15ad8190a456b0235576db131817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:f0:aa:10:30:e6:9c:1c:25:62:45:04:52:
93:ba:c9:01:34:91:db:74:0e:a8:f9:63:6b:d3:84:
c6:22:1a:cf:93:e5:96:67:c3:c6:8d:41:1d:ee:05:
c2:6f:bc:ed:50:0a:3d:20:67:40:35:7b:21:65:5f:
7b:79:72:c2:42:54:03:6f:68:79:b4:57:93:4f:cf:
85:cb:d2:a4:f2:db:64:e8:38:35:4a:21:dc:03:1e:
cf:0f:63:b4:3e:b7:e1:ee:fc:73:c2:25:e3:f8:2e:
a3:ef:c2:4f:e2:b7:78:54:d9:3a:ac:b9:03:df:12:
8f:7d:13:c2:69:d5:11:90:79:06:7a:77:66:79:ab:
cb:25:da:c9:fd:3e:69:d2:82:1e:c5:a3:24:f8:28:
23:c5:a2:d5:52:14:ba:17:8f:1e:7a:7b:0e:9e:f9:
ab:7d:20:9d:b5:41:5c:72:ca:7a:fc:fc:1f:bf:bd:
76:cf:5b:7e:96:14:43:81:42:71:66:02:fc:f4:09:
d7:da:a5:ca:44:78:56:86:26:8d:d1:b3:10:51:09:
8d:f6:c8:e7:0c:13:e4:48:8f:12:32:7d:f1:72:12:
f2:ad:9e:99:7d:41:48:7e:3c:39:c9:6c:55:b2:8e:
f4:4a:87:7d:5a:c8:4e:08:b7:b3:7f:d6:99:2e:f3:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F0:57:C4:FF:DF:15:AD:81:90:A4:56:B0:23:55:76:DB:13:18:17
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e5:45:e6:99:51:6f:66:2c:5c:4f:0e:56:26:d3:f4:b6:18:
c7:d8:d3:f4:0b:81:71:f8:3d:34:43:59:e3:f0:a7:0b:79:1d:
bc:91:a0:52:b5:8d:c4:a6:32:f6:55:63:7f:20:27:b4:6c:32:
17:76:60:6c:7f:2d:67:6e:5f:04:06:6a:39:f2:ae:a6:54:19:
46:b3:b4:84:3d:9b:95:c6:46:75:d9:2a:c2:29:0c:de:4d:ee:
ce:0a:47:f3:25:d9:00:15:60:aa:a3:65:80:fc:05:a5:4b:10:
6d:8d:64:d2:c6:2b:49:d5:42:6d:24:8d:58:be:13:b4:04:7a:
54:fc:95:5c:9f:84:19:2c:de:b9:00:47:20:13:f1:f9:2e:2c:
87:21:d3:26:1a:97:d1:e5:f9:98:be:cf:fd:44:e4:78:a8:8d:
92:46:85:96:09:4b:25:34:b5:a1:b0:f8:91:3d:38:82:f5:1c:
be:61:df:75:a8:7b:ee:f2:b5:fb:14:ba:ef:ef:76:ae:79:84:
80:f0:9d:03:f1:6c:8d:04:27:d7:52:80:02:6e:12:67:7d:ec:
dd:83:e3:49:5d:be:8c:d3:49:06:44:69:7c:ea:72:c0:d7:f7:
25:c1:22:c1:72:ea:cf:65:d0:77:0a:58:d7:71:db:99:62:54:
eb:a3:a1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:29:55 2026 by rpki-client