Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
File: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json)
Hash identifier: Z/bFO542VnB8y/tKYFxxQSkFbu2fjG7MsUvcRu7rgeg=
Subject key identifier: 4D:8E:19:E5:B9:13:1C:96:35:B0:28:1A:F3:4A:FE:ED:8E:5F:F6:C9
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Certificate issuer: /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial: 019F9323B6F9713ED715D489E1F73D34547D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
Manifest number: 11F2
Signing time: Fri 24 Jul 2026 08:00:19 +0000
Manifest this update: Fri 24 Jul 2026 08:00:19 +0000
Manifest next update: Sat 25 Jul 2026 08:00:19 +0000
Files and hashes: 1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: 0RylVzGHAEi9Taeu5tLqFsmt8/KCTi6DOKVk8Zc30aw=)
2: lLxgfqurH_Hgps0nmWFaFien01Q.roa (hash: N0SnJ14VpoDgSTsYIgjlp8sX8VgDL1JD7jVAinD1cAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:b6:f9:71:3e:d7:15:d4:89:e1:f7:3d:34:54:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Validity
Not Before: Jul 24 08:00:19 2026 GMT
Not After : Jul 25 08:00:19 2026 GMT
Subject: CN=4d8e19e5b9131c9635b0281af34afeed8e5ff6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:cc:b0:f4:e4:cc:ea:9b:ab:51:45:53:99:
f6:92:20:69:55:8c:5b:93:f2:4e:06:ee:01:f9:23:
7f:74:49:e8:58:ba:92:95:f0:8c:51:50:4d:56:2c:
84:cd:8d:57:46:1e:c4:5f:ad:8d:9f:04:20:5b:6d:
36:40:25:7e:75:1a:07:3c:ef:64:ef:81:7b:35:60:
43:1c:03:fd:e7:72:f9:3e:6a:c2:5e:91:b3:ac:aa:
25:7a:5c:f9:ec:5d:5d:e5:c2:2c:4c:a3:b8:9d:c2:
37:1e:37:c1:e1:40:8a:ce:4b:e9:72:63:20:54:3a:
35:79:fa:16:17:74:84:64:0c:79:6b:ab:43:31:a2:
1d:22:40:58:56:d1:ad:ab:92:e7:e8:4e:29:43:98:
5d:b9:99:7a:c9:eb:1f:cf:3a:bc:f9:f6:26:9b:a3:
f5:b4:db:bd:29:a2:59:9a:ef:00:0f:99:34:55:00:
c3:d5:9d:64:f8:76:27:98:97:a4:78:6e:3c:a6:9b:
6b:0e:53:b7:52:40:d5:2d:3e:fb:f1:c2:2b:6c:7b:
47:8b:48:eb:99:56:37:c0:fa:58:8d:db:86:8c:e2:
54:fd:30:05:5b:1c:3c:37:66:15:7e:fb:97:39:a0:
cb:8f:81:44:37:df:26:61:75:1a:53:c6:21:ed:8e:
a9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8E:19:E5:B9:13:1C:96:35:B0:28:1A:F3:4A:FE:ED:8E:5F:F6:C9
X509v3 Authority Key Identifier:
keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:be:28:e9:5f:60:6b:1c:1c:ac:13:fe:aa:3f:fe:bb:08:d7:
41:b2:55:f5:25:34:c1:14:15:06:b4:0e:24:a6:61:16:b2:2b:
aa:5d:75:35:60:2c:e9:d9:34:a6:9a:c8:9f:40:87:f8:a5:52:
74:a1:1d:9c:ae:53:65:fb:6d:bf:bf:bc:c8:e8:72:ab:45:58:
4f:96:a7:f5:cc:ab:66:8e:5f:d6:18:aa:ab:85:17:4b:93:99:
dc:0c:25:bd:b0:08:e8:a7:8c:27:0c:f2:fe:6b:71:5b:ac:19:
d1:a6:a0:39:52:be:69:cd:1a:ae:57:24:e2:25:4e:83:c0:5a:
4b:4a:df:c4:4f:c5:01:1b:c9:6b:ca:31:da:f1:bb:73:f7:be:
5f:43:b5:ca:3b:f0:01:67:95:f7:2a:85:18:83:cc:39:36:63:
01:ea:4b:08:92:34:39:24:52:54:69:05:a5:d3:a7:54:9c:eb:
9e:fa:42:a9:7c:25:86:48:20:18:3f:75:a6:4c:70:cf:a6:3c:
75:70:c9:80:65:32:cd:1a:9e:db:11:5d:c0:52:d0:48:8e:73:
2d:bf:c4:72:f5:9d:dd:dc:e9:fa:57:1c:13:e8:de:a9:80:71:
cc:12:de:21:4f:52:7d:cf:6e:e0:90:67:d5:0c:db:d3:e0:b6:
9e:e5:59:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI7b5cT7XFdSJ4fc9NFR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2OWI4YTM3NDg0NDBjOWQ1YzJjNTA4YmQwM2I0NmQ3Mjcz
ZWVlNTYwHhcNMjYwNzI0MDgwMDE5WhcNMjYwNzI1MDgwMDE5WjAzMTEwLwYDVQQD
Eyg0ZDhlMTllNWI5MTMxYzk2MzViMDI4MWFmMzRhZmVlZDhlNWZmNmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaDMsPTkzOqbq1FFU5n2kiBpVYxb
k/JOBu4B+SN/dEnoWLqSlfCMUVBNViyEzY1XRh7EX62NnwQgW202QCV+dRoHPO9k
74F7NWBDHAP953L5PmrCXpGzrKolelz57F1d5cIsTKO4ncI3HjfB4UCKzkvpcmMg
VDo1efoWF3SEZAx5a6tDMaIdIkBYVtGtq5Ln6E4pQ5hduZl6yesfzzq8+fYmm6P1
tNu9KaJZmu8AD5k0VQDD1Z1k+HYnmJekeG48pptrDlO3UkDVLT778cIrbHtHi0jr
mVY3wPpYjduGjOJU/TAFWxw8N2YVfvuXOaDLj4FEN98mYXUaU8Yh7Y6pfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2OGeW5ExyWNbAoGvNK/u2OX/bJMB8GA1UdIwQY
MBaAFCabijdIRAydXCxQi9A7RtcnPu5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnB1S04waEVESjFjTEZDTDBEdEcxeWMtN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NGFhZTQtNzcxYy00MjlhLWE3Y2Qt
Zjg3YmMxNzNkMmFhLzEvSnB1S04waEVESjFjTEZDTDBEdEcxeWMtN2xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85NGFhZTQtNzcxYy00MjlhLWE3Y2QtZjg3YmMxNzNkMmFh
LzEvSnB1S04waEVESjFjTEZDTDBEdEcxeWMtN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn74o6V9g
axwcrBP+qj/+uwjXQbJV9SU0wRQVBrQOJKZhFrIrql11NWAs6dk0pprIn0CH+KVS
dKEdnK5TZfttv7+8yOhyq0VYT5an9cyrZo5f1hiqq4UXS5OZ3AwlvbAI6KeMJwzy
/mtxW6wZ0aagOVK+ac0arlck4iVOg8BaS0rfxE/FARvJa8ox2vG7c/e+X0O1yjvw
AWeV9yqFGIPMOTZjAepLCJI0OSRSVGkFpdOnVJzrnvpCqXwlhkggGD91pkxwz6Y8
dXDJgGUyzRqe2xFdwFLQSI5zLb/EcvWd3dzp+lccE+jeqYBxzBLeIU9Sfc9u4JBn
1Qzb0+C2nuVZWw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:40:01 2026 by rpki-client