Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
File: j6nQXioyGuy6TsxKvsD3jqzeVbA.mft (raw, json)
Hash identifier: gwko4vevdbZYE1TjgtxkpOw/kvI+uOCdX5M5L9RMnpc=
Subject key identifier: D0:88:21:78:25:E0:C6:E0:23:6D:3C:DB:82:16:88:E7:16:AB:5E:69
Authority key identifier: 8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
Certificate issuer: /CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Certificate serial: 019F8E348DE7B8863842F5916554EFAF0610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
Manifest number: 0280
Signing time: Thu 23 Jul 2026 09:00:36 +0000
Manifest this update: Thu 23 Jul 2026 09:00:36 +0000
Manifest next update: Fri 24 Jul 2026 09:00:36 +0000
Files and hashes: 1: 0WmwmFuoCWNqsLL6k_gxBPAC3h8.asa (hash: 60+Or+X6S9hfGP6c+jd5ZM8DEfkfCWQ0yiF3OykR4jE=)
2: XiMWlcnYu15otXM1SpS0Znny3pM.roa (hash: HhN+oEh/TLjrfvVsB28CfHRheFgOREvZ8MiqN/vatGw=)
3: j6nQXioyGuy6TsxKvsD3jqzeVbA.crl (hash: RW9ftPk2ZWqKWcrKaDMohD4jJeQ0qZTL3d8KVU1gg2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:8d:e7:b8:86:38:42:f5:91:65:54:ef:af:06:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Validity
Not Before: Jul 23 09:00:36 2026 GMT
Not After : Jul 24 09:00:36 2026 GMT
Subject: CN=d088217825e0c6e0236d3cdb821688e716ab5e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:ef:ce:df:df:cb:b2:1a:1d:2c:81:fc:b7:
dd:6c:78:d2:2d:15:0a:10:22:2d:d8:3c:00:26:34:
70:0c:be:66:a0:e1:11:9d:8e:42:9b:5b:3b:b1:23:
20:d2:9d:77:61:92:f0:27:9c:6a:dd:63:8b:30:7d:
9c:8b:71:2e:4e:7c:b1:10:06:cf:94:7b:17:db:61:
4a:86:f2:7e:0b:9c:85:c6:bc:64:d6:96:ff:e8:d1:
67:37:15:c6:30:ca:55:68:50:2f:f9:9b:52:40:10:
ba:1a:7e:63:12:9a:6e:42:2d:41:4b:57:b5:8e:74:
cc:25:6e:2c:80:4b:ba:e8:1f:29:99:5c:bd:47:73:
69:15:01:0b:82:3e:43:de:fd:63:c9:ef:42:f9:61:
6f:e6:66:94:d2:2d:e9:7f:c6:40:40:72:7f:bb:17:
2a:5e:c3:70:13:61:be:48:2d:da:3a:62:a2:13:b5:
3e:97:02:c1:16:6b:c8:20:e7:54:e1:08:dd:ae:2a:
af:d3:97:dd:18:dc:cc:e4:4d:18:48:c6:9d:1a:64:
41:82:b8:10:60:aa:49:40:b2:71:8e:c8:42:d9:97:
4e:49:6e:da:ca:07:e8:a4:23:54:0f:80:e1:a2:5b:
20:2a:e6:15:d0:b6:aa:51:5d:fd:c8:ce:34:1f:a8:
35:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:88:21:78:25:E0:C6:E0:23:6D:3C:DB:82:16:88:E7:16:AB:5E:69
X509v3 Authority Key Identifier:
keyid:8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e4:36:39:19:f9:0e:30:dd:09:27:4f:84:7c:c3:a6:ed:72:
64:84:24:67:92:23:29:0a:2b:84:fa:ae:0e:04:42:06:d1:73:
3a:95:56:7b:41:d7:92:ba:41:d1:27:98:0a:f6:97:58:de:e6:
5c:c1:9e:ba:ad:99:52:39:d0:db:bb:11:65:57:61:9d:02:f7:
d7:4f:24:8c:e7:f7:b3:71:14:02:77:b7:19:a0:35:e7:00:fe:
f2:10:0b:5b:91:1a:0b:86:f5:f7:eb:dd:94:0a:90:c6:dd:22:
c4:36:1a:9c:5f:65:ee:e9:99:e0:97:91:ec:3e:74:cf:a7:41:
fa:bb:ae:bf:cd:7f:20:82:20:47:d8:f5:35:83:0e:9e:f0:0c:
cf:58:40:17:97:e8:30:7e:27:42:55:61:34:d9:6d:27:5d:0e:
e9:20:cd:d5:ec:33:fe:e0:0a:77:81:16:c2:7e:74:be:91:4c:
36:36:a3:b2:93:21:1b:5a:5f:30:22:c8:c6:11:50:0c:45:a9:
0a:d9:98:39:b6:1d:21:b3:1f:66:05:8e:62:cb:8c:86:43:1c:
be:9f:7a:3c:d8:08:53:12:e7:5f:47:ef:02:62:65:ef:4c:cb:
5c:89:93:e2:c3:b2:0d:32:d3:17:45:7a:54:8e:06:01:02:a0:
71:3c:75:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:10:34 2026 by rpki-client