Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: 6yIfnDGBcxllAOKJb4cZDsmlkdddJe4VPYIOwV4oR5E=
Subject key identifier: 7A:5E:8A:71:9D:2D:5F:33:17:BA:C7:86:25:09:89:1B:2C:1E:A4:26
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 019F8EA279CCA51A63FFB7B8D7DB38C24A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 11:00:40 +0000
Manifest this update: Thu 23 Jul 2026 11:00:40 +0000
Manifest next update: Fri 24 Jul 2026 11:00:40 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: e4yP0ODGgc/a5fTsEMGaVTqEqxlcGgAbhsz79IXqUeU=)
2: TaLcMniYP68W_xpID_YTmpPHJQw.roa (hash: FpN6wFwhf5u/rLDXXLg50HkAwzUqczd5OywdW3G3qdY=)
3: dfxqd7-EbGdffyLZ8A8olZcFYug.asa (hash: HTZdeFHh36s+CBI2gsv3WBt1hDMpM6ApTTwTmbGKXCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:79:cc:a5:1a:63:ff:b7:b8:d7:db:38:c2:4a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Jul 23 11:00:40 2026 GMT
Not After : Jul 24 11:00:40 2026 GMT
Subject: CN=7a5e8a719d2d5f3317bac7862509891b2c1ea426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:53:4f:d6:db:72:e0:05:0c:38:1e:4e:52:
3d:0f:ff:23:a4:f0:27:1d:4e:ed:3b:67:6f:2f:cc:
5d:6b:78:cb:27:f9:b7:23:f0:6f:48:f7:71:36:6d:
c8:70:fc:63:11:b7:ec:39:ba:9d:3f:e6:d5:02:15:
33:89:e5:99:00:68:7e:20:21:57:7d:cb:57:fb:77:
a1:e5:c0:37:5a:14:a2:ea:d0:45:6a:c4:2a:95:00:
3e:a9:88:a7:53:2d:0b:1b:7d:68:2c:34:74:e8:40:
39:ca:03:3a:ca:5e:68:12:19:8c:57:40:c3:40:f2:
a1:7c:8e:b3:07:82:65:75:1c:33:7c:3b:e5:ef:0d:
54:20:d8:d9:f5:13:89:de:08:f0:06:9a:77:65:85:
2e:37:e8:c6:e3:63:e7:6c:21:aa:2e:33:97:34:17:
5c:68:a0:48:0a:64:98:d9:0d:71:a4:c9:3f:7b:d1:
aa:7b:7d:68:59:aa:1a:21:60:22:28:4e:79:7c:ea:
77:a7:03:c9:ff:64:40:47:d3:b9:cf:f0:99:36:62:
5b:90:4f:69:ff:99:e2:49:35:95:4a:26:e5:45:79:
4f:4f:e3:05:2c:96:8b:8f:4a:f5:d2:cf:92:7b:79:
d9:c6:6a:83:4a:3d:f3:b4:1b:9a:cf:f7:0f:b3:22:
8c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5E:8A:71:9D:2D:5F:33:17:BA:C7:86:25:09:89:1B:2C:1E:A4:26
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:cb:d2:5d:c3:dd:6d:26:d6:f9:54:bc:be:24:f5:65:bf:50:
a7:df:d7:de:20:c4:5d:aa:62:ab:87:98:67:8d:cd:48:58:5b:
0e:88:ab:fa:b9:36:42:63:c0:bc:a9:e6:9c:d2:83:ab:3b:aa:
fc:f0:9c:24:ab:15:c6:d5:13:7d:d2:fb:a3:33:c1:3f:af:00:
ad:72:08:07:15:5f:1f:e0:26:23:53:33:1f:c6:9b:c4:3d:e6:
04:4d:11:b8:9c:2d:55:4f:6e:d5:e7:37:a1:14:df:ac:24:2c:
36:39:79:b5:a4:41:94:20:be:0f:5b:c9:5a:ff:83:87:61:c8:
78:11:a4:ef:88:55:6c:7b:5b:0b:a8:d9:4f:54:a8:d0:23:47:
8b:f6:20:7d:e3:91:3a:8f:79:a5:46:7c:b3:12:4e:5e:c7:8b:
bc:31:4e:1f:61:5e:93:98:61:4c:e6:c1:02:dd:61:30:b3:2b:
aa:c5:36:f5:4e:db:8e:7d:4a:97:65:cc:88:72:cd:79:49:60:
e3:8f:e2:70:3a:ca:41:f3:1f:a2:91:09:1f:3b:e7:ce:4c:bb:
b7:65:e0:1f:f4:26:86:6d:36:fe:c2:a3:7c:d6:5f:ad:c7:d0:
71:f8:84:8e:dd:dc:ea:89:67:31:5e:23:d5:71:d8:fa:3b:b4:
f9:11:b4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:15:11 2026 by rpki-client