Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8490a4-87c1-4b8c-8344-2ad02eb04915/1/jBfwTpxAdFinrJrRX3oMzqURulI.mft
File: jBfwTpxAdFinrJrRX3oMzqURulI.mft (raw, json)
Hash identifier: ubH51bUgVyob/4jXD/03/jN2XHDEU4VYpK1zggJXQMc=
Subject key identifier: D1:C1:40:3A:B4:6A:FB:30:FF:76:C6:9E:33:8D:12:9A:70:8F:51:63
Authority key identifier: 8C:17:F0:4E:9C:40:74:58:A7:AC:9A:D1:5F:7A:0C:CE:A5:11:BA:52
Certificate issuer: /CN=8c17f04e9c407458a7ac9ad15f7a0ccea511ba52
Certificate serial: 019F8F479E9FF5A27D3B0A4C5E7C1DDAD8D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBfwTpxAdFinrJrRX3oMzqURulI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8490a4-87c1-4b8c-8344-2ad02eb04915/1/jBfwTpxAdFinrJrRX3oMzqURulI.mft
Manifest number: C2
Signing time: Thu 23 Jul 2026 14:01:03 +0000
Manifest this update: Thu 23 Jul 2026 14:01:03 +0000
Manifest next update: Fri 24 Jul 2026 14:01:03 +0000
Files and hashes: 1: 2bWQetsOp_s4jpJEEFvCx5F2EqY.asa (hash: KEmdifHkduxMh992nvA3n4s/PROXkkmxFqnNTxj0Np8=)
2: YIr7vHC2bGtjaGYrfIq4xc4SY1w.roa (hash: szj1ZQWcHg/rNeW4UE66lqJF6Ui02P9VIF4rG837XFI=)
3: eVKy09rq3QfhUu366x-o_l_W4r4.roa (hash: i7w7tNXg2Wg88yWl33GjEN2bIhic797RLFz99Aiw73A=)
4: jBfwTpxAdFinrJrRX3oMzqURulI.crl (hash: MoJ0D2KLnm8+eQRjuB72JimVuKobsF98LnmrMtEvqRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8490a4-87c1-4b8c-8344-2ad02eb04915/1/jBfwTpxAdFinrJrRX3oMzqURulI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8490a4-87c1-4b8c-8344-2ad02eb04915/1/jBfwTpxAdFinrJrRX3oMzqURulI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBfwTpxAdFinrJrRX3oMzqURulI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:9e:9f:f5:a2:7d:3b:0a:4c:5e:7c:1d:da:d8:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c17f04e9c407458a7ac9ad15f7a0ccea511ba52
Validity
Not Before: Jul 23 14:01:03 2026 GMT
Not After : Jul 24 14:01:03 2026 GMT
Subject: CN=d1c1403ab46afb30ff76c69e338d129a708f5163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:55:95:eb:a9:5f:f8:38:08:5c:04:1b:06:7d:
98:e0:88:0a:49:b2:53:b3:f9:f5:55:21:ec:f3:66:
f9:b9:8a:11:43:59:02:ea:d6:ff:4e:bb:05:18:16:
68:9d:dc:65:7c:f4:74:c8:f1:7c:e9:0f:b9:d6:7a:
f5:e0:9a:3c:d7:18:0f:00:cd:98:23:89:d8:1f:ea:
32:22:6a:b8:6d:89:c3:3e:2b:62:2e:64:20:09:9c:
17:ec:56:64:d8:74:c5:04:d4:3a:8f:d1:86:32:4d:
ec:4c:ca:02:34:e3:b2:be:29:81:30:48:07:12:c7:
56:b6:d0:9e:b5:f9:91:7b:a9:31:b6:62:11:51:b2:
b4:0d:b4:87:df:c1:88:a5:2e:bb:28:de:13:73:9f:
e5:25:b4:cb:f8:c5:ae:ff:8c:0f:de:99:11:f1:37:
be:6a:dc:23:16:f3:4e:eb:e7:30:92:37:52:d4:e4:
29:22:1c:31:72:de:7a:29:13:f8:94:ea:7a:46:89:
fa:b6:6c:cc:c4:36:92:bd:ca:27:a7:96:74:9f:41:
82:3f:a9:23:0d:f4:54:ed:b8:af:5f:21:24:10:36:
5e:f7:bb:ce:86:ad:9f:4d:1c:45:c8:bd:67:f5:91:
60:13:79:53:fc:74:9a:f7:42:22:64:ff:e8:0c:f9:
f6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C1:40:3A:B4:6A:FB:30:FF:76:C6:9E:33:8D:12:9A:70:8F:51:63
X509v3 Authority Key Identifier:
keyid:8C:17:F0:4E:9C:40:74:58:A7:AC:9A:D1:5F:7A:0C:CE:A5:11:BA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBfwTpxAdFinrJrRX3oMzqURulI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8490a4-87c1-4b8c-8344-2ad02eb04915/1/jBfwTpxAdFinrJrRX3oMzqURulI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8490a4-87c1-4b8c-8344-2ad02eb04915/1/jBfwTpxAdFinrJrRX3oMzqURulI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:7c:9d:54:21:86:dc:49:37:3b:d4:1c:6d:e7:a4:5e:03:3c:
44:9a:54:21:99:10:70:68:cc:20:b8:77:0f:db:02:d6:3b:00:
2c:2b:36:74:e2:df:e8:87:19:11:ec:26:54:9b:5e:6d:55:72:
0c:b8:79:58:2c:57:dd:85:3c:9d:28:33:a7:cc:55:55:9a:d1:
16:2c:59:a5:d2:da:fa:4c:ba:7e:b1:9e:1a:d0:a7:21:c3:6b:
ee:ff:a3:4f:11:69:6e:a0:57:80:4e:ca:79:b5:af:c5:42:00:
24:27:41:e3:fa:2c:b3:64:58:3a:7b:a6:a2:f0:e0:73:2e:d0:
84:51:88:77:12:40:c1:be:04:b1:04:14:9f:93:a9:e1:1b:fd:
e4:ab:d8:77:50:68:ad:2d:9e:9e:21:41:71:ae:4c:34:4b:16:
1e:d2:67:a8:e0:68:de:75:ce:67:d1:7e:60:10:b6:aa:32:28:
f4:ad:6a:a7:b7:45:8b:8a:26:99:cb:d9:cf:3e:5b:07:b2:6a:
b4:64:76:f8:e3:2a:e0:1b:3c:e3:e0:24:8f:13:6f:85:89:c4:
97:cb:c6:cb:db:d1:8f:27:62:0c:b0:dd:75:f2:b9:0a:9e:36:
e1:2b:09:dd:13:7c:d3:40:37:b3:d7:a8:1a:22:09:4a:5b:14:
03:ba:9f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:50 2026 by rpki-client