Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier: 1DbsaoirobWGfvvhyfyBhhJu+Kekr9+RHSRiDt8DH1k=
Subject key identifier: 79:37:BD:DB:50:DD:AB:B8:E8:2B:A2:18:31:7E:D8:B9:CB:4E:7C:73
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 019F946E07336B7A28ABB82AF2DEB5AB423D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 14:01:06 +0000
Manifest this update: Fri 24 Jul 2026 14:01:06 +0000
Manifest next update: Sat 25 Jul 2026 14:01:06 +0000
Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: sna3PsuR6H3Y+NO8cU5P/boKWnTDPZKQGXTFgmMOc+o=)
2: gZ_db6GfXmBOp4kcCy-i3uexrlk.roa (hash: ThO+Sk/jrlZwpr+FgeFErC3/Gl+3M/mev1BE/Xmuy2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:07:33:6b:7a:28:ab:b8:2a:f2:de:b5:ab:42:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: Jul 24 14:01:06 2026 GMT
Not After : Jul 25 14:01:06 2026 GMT
Subject: CN=7937bddb50ddabb8e82ba218317ed8b9cb4e7c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f6:57:d8:21:d8:d6:59:84:e2:29:74:df:3d:
41:d8:18:86:b5:0a:cd:e4:cf:39:9b:a6:16:98:66:
00:a3:aa:51:65:9c:59:11:a9:61:d7:34:de:cf:89:
cc:4a:14:53:f3:84:3d:e0:42:b8:c3:da:b5:d6:f7:
23:65:3b:87:62:a7:5c:65:af:6b:c9:2b:9e:ac:ba:
b4:e9:e5:f1:94:e4:a1:49:a5:0f:ae:3e:0f:1e:29:
38:5b:b4:87:97:e0:56:04:37:f5:1a:c3:38:bc:36:
af:51:88:fa:4d:4f:30:85:0e:53:46:f7:1e:7e:72:
06:9b:35:f6:ea:a8:70:bd:fe:1e:95:87:45:af:dd:
ad:96:42:e0:79:0e:3a:0a:71:9e:98:2f:57:45:03:
9e:0d:e1:80:83:6a:0b:ea:03:1b:72:db:85:c7:83:
d1:25:eb:56:33:6d:c3:0b:5f:ec:82:8f:4d:9d:97:
33:8d:82:49:95:4d:35:12:e2:45:1f:15:da:db:9e:
91:88:19:43:fb:43:b6:26:c3:12:92:9c:fe:a0:58:
f0:e6:0d:04:22:49:c6:b0:50:fb:03:a1:f5:38:d0:
10:6a:9f:65:01:65:4a:5a:79:da:eb:84:c1:90:0b:
02:0f:ed:11:23:95:f6:dc:9f:fc:aa:2a:d4:48:e4:
10:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:37:BD:DB:50:DD:AB:B8:E8:2B:A2:18:31:7E:D8:B9:CB:4E:7C:73
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8d:1f:0d:2d:79:d8:f5:33:bd:49:d7:e3:4a:c1:26:ec:c3:
cf:ae:47:77:61:f3:fb:49:40:19:73:a7:79:a8:b8:4e:22:e2:
ee:1f:79:a9:5a:98:0f:fd:85:9d:43:d9:6e:4e:dd:08:a0:af:
33:3f:ca:95:de:27:70:32:60:83:1f:b3:5f:b7:fd:2b:fd:92:
35:14:35:1d:b2:81:64:9e:1b:82:64:ab:0a:87:b4:d7:e0:34:
bf:4a:3d:d7:9c:42:e0:db:a4:cc:46:73:c6:69:80:d9:7c:8e:
f9:e1:57:7a:39:45:3c:2b:4c:b1:84:9a:17:99:8e:40:0c:37:
23:e5:52:6c:7a:54:22:8e:1e:c3:ea:8d:c2:14:34:d4:b4:0e:
14:4a:7b:29:cc:d1:e2:36:26:a9:e0:d9:40:db:23:f2:89:a9:
d9:27:6e:14:61:54:11:e1:b0:a6:47:e3:8e:4b:49:2a:98:e7:
3c:0b:e1:c9:fd:3c:b9:42:fc:8e:c6:9d:50:c7:fe:56:82:07:
28:c9:5d:ae:23:f5:70:62:65:77:87:44:c2:42:c8:92:b0:95:
79:32:db:cf:4e:99:00:19:1d:74:f6:6b:17:43:2f:5f:34:f5:
fc:23:7a:50:dd:b9:ef:73:5b:eb:fa:4b:b3:63:07:74:c3:7c:
c6:53:99:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:13 2026 by rpki-client