Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft
File: JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft (raw, json)
Hash identifier: PzFGTvJBq5gR3wp1IZDBrZg8+dn0ACbv18tOuabA5sI=
Subject key identifier: 4C:F2:D7:B2:A7:5E:CB:7D:5D:E0:7A:3C:0B:48:8F:3D:AD:9F:11:17
Authority key identifier: 26:34:E9:F8:F7:C4:CD:D8:E7:60:A2:AB:B5:A3:53:00:69:39:F9:63
Certificate issuer: /CN=2634e9f8f7c4cdd8e760a2abb5a353006939f963
Certificate serial: 019F93C87FEFAED2CFD59006272B325D20B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjTp-PfEzdjnYKKrtaNTAGk5-WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft
Manifest number: 2A
Signing time: Fri 24 Jul 2026 11:00:18 +0000
Manifest this update: Fri 24 Jul 2026 11:00:18 +0000
Manifest next update: Sat 25 Jul 2026 11:00:18 +0000
Files and hashes: 1: CT7CUpJmJPLajKgOQIFrWv5R9bI.roa (hash: kW/49sudv3kAXReOsUWamQV3RVaaDJfvruQZFjeF4XM=)
2: JjTp-PfEzdjnYKKrtaNTAGk5-WM.crl (hash: 2+uV6fnF4yBNMOejwsCUxVat+lvDVKfdKxQnHCSzWOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjTp-PfEzdjnYKKrtaNTAGk5-WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:7f:ef:ae:d2:cf:d5:90:06:27:2b:32:5d:20:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2634e9f8f7c4cdd8e760a2abb5a353006939f963
Validity
Not Before: Jul 24 11:00:18 2026 GMT
Not After : Jul 25 11:00:18 2026 GMT
Subject: CN=4cf2d7b2a75ecb7d5de07a3c0b488f3dad9f1117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:d9:d7:c8:b0:5f:2e:dd:1f:70:bd:ce:50:
7b:b6:46:26:a7:6a:d8:cf:21:58:fc:22:ae:5e:da:
b3:ad:2d:19:75:78:f1:26:38:b3:2b:9f:fd:9c:e5:
57:d7:6b:cc:01:9e:c8:56:e1:1e:82:2d:da:f8:1f:
19:1c:b6:e8:ea:86:b3:96:d9:81:36:e5:4c:d7:43:
b9:91:7c:90:99:b7:f2:b6:16:dc:11:8c:67:5d:c6:
86:c3:59:2e:ea:04:82:35:15:02:c8:31:4e:67:3e:
e7:80:d0:10:40:8c:d9:fa:4d:fd:4e:4f:80:31:c6:
09:5e:8f:1b:e8:d4:6c:f6:a4:0c:9d:07:d7:38:3a:
67:61:e4:9e:e1:55:7d:a2:a3:a5:44:74:b8:f0:34:
5a:84:b5:db:03:dd:64:43:04:2d:7b:ce:f4:db:a0:
25:98:75:82:58:a9:76:31:a4:66:79:00:bd:66:47:
0f:62:34:db:0d:ba:3c:ce:51:8b:e7:61:45:32:44:
86:ed:17:07:51:a8:be:70:49:dd:fc:78:cf:89:e6:
96:89:9b:da:6f:d2:04:f4:7d:e5:1b:94:e5:88:e7:
89:14:8e:b9:7c:91:b1:92:98:0d:56:7f:45:c1:e8:
17:b5:d3:80:35:36:26:c1:a6:84:95:eb:cd:7c:fc:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F2:D7:B2:A7:5E:CB:7D:5D:E0:7A:3C:0B:48:8F:3D:AD:9F:11:17
X509v3 Authority Key Identifier:
keyid:26:34:E9:F8:F7:C4:CD:D8:E7:60:A2:AB:B5:A3:53:00:69:39:F9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjTp-PfEzdjnYKKrtaNTAGk5-WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:20:74:20:ce:42:62:60:d7:74:76:31:af:90:a7:79:b1:c6:
4b:cc:9f:27:e7:b3:3e:08:dd:fc:9e:32:5b:41:4d:4a:e8:5d:
03:16:e3:ad:f9:ae:14:dc:ee:e5:e6:56:e8:49:1f:fd:fd:d9:
b4:10:6c:e5:b9:0e:e3:27:a0:1b:ec:4e:b6:c2:63:0c:77:1c:
f6:16:87:76:12:5a:fa:95:db:0d:80:c3:e5:be:fd:6a:d3:6e:
66:02:c4:7a:56:0b:68:21:e4:55:7c:9a:3f:1d:31:c6:23:28:
7a:74:ab:00:20:d5:54:83:1b:0c:99:b0:8f:ed:ed:1a:18:25:
9d:26:d9:24:6a:db:f5:b9:9d:8e:9b:bb:37:7e:12:fc:80:b3:
33:61:37:bb:a7:2c:07:12:98:f5:bd:ba:ac:4b:da:06:75:32:
a7:4f:d3:64:52:d2:e2:84:dc:cd:16:6d:84:59:ea:c6:bc:c7:
9a:ee:3e:2f:43:1e:04:47:5a:8a:30:fd:7f:c7:31:34:67:cb:
e7:ba:a5:2d:08:45:b2:33:fb:19:d9:5b:96:a5:6b:7d:b8:23:
a8:2a:e0:ac:d0:a6:30:f5:ad:71:50:47:a0:56:b7:09:bb:04:
22:e7:11:4f:6f:55:c5:20:33:95:34:42:65:b7:98:87:27:33:
d2:56:42:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:44:47 2026 by rpki-client