Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
File: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft (raw, json)
Hash identifier: Qmc+i0E87dL+4UHjbdP8wOmgPaXD0to0UNw+b9thPBA=
Subject key identifier: 59:1A:EC:11:8A:EE:27:80:DA:B4:F9:7C:E4:A7:6C:74:0C:5C:98:01
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial: 019F9323BF29EF2A3D62CA45145E4E6BAAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
Manifest number: 19D6
Signing time: Fri 24 Jul 2026 08:00:21 +0000
Manifest this update: Fri 24 Jul 2026 08:00:21 +0000
Manifest next update: Sat 25 Jul 2026 08:00:21 +0000
Files and hashes: 1: bxe8_OOghXeeJNBS1LJite_JTKQ.roa (hash: SNnvmAY3MhgDBPaAU8BXN9WC/xup6duxDsZh0j7XDCs=)
2: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl (hash: GXrfYzXV2HXmCbW+/p677tX0hA6lXRf79nLLyvNaRTA=)
3: yHADJb6BZs2ak9yCDQIwsQB2apk.roa (hash: Qk1v22VZ27KbOG3oqvgp5v/wTns71MuCYehYFMsTHqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:bf:29:ef:2a:3d:62:ca:45:14:5e:4e:6b:aa:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Validity
Not Before: Jul 24 08:00:21 2026 GMT
Not After : Jul 25 08:00:21 2026 GMT
Subject: CN=591aec118aee2780dab4f97ce4a76c740c5c9801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:f2:f4:ca:9a:21:bd:70:7f:32:1d:4d:23:
96:9f:36:68:bf:1c:27:15:bc:28:32:44:e5:34:d8:
6e:54:42:40:8a:71:54:9b:c9:47:64:48:1b:66:e1:
9a:59:4c:44:92:a4:1d:df:f4:a4:9a:41:0e:76:13:
83:2e:c5:56:4b:c0:a6:4a:05:5a:45:86:99:d9:e5:
54:b3:6c:1e:c0:b0:00:54:d6:df:6e:8d:bf:5a:f3:
23:6b:66:b6:4e:2f:b9:ac:a4:25:d4:19:27:a5:f5:
f5:3c:8a:8d:70:fb:03:08:ff:48:5a:d5:31:47:56:
c1:34:b5:41:5c:5e:64:cd:ad:66:a6:b6:8d:c8:04:
03:ef:cc:41:2d:07:1a:fd:3b:f1:d2:f2:0b:bb:4d:
1b:f1:f1:b8:2f:10:56:6f:63:f3:9f:2c:b8:d2:11:
37:3b:b3:61:de:6a:81:19:ca:ca:2c:cb:08:61:a3:
3a:cd:e3:bf:1b:c7:95:65:8b:78:85:5c:9f:50:a6:
8c:1b:a4:b0:68:56:d7:8e:7b:48:02:e8:a3:93:fe:
e5:fb:89:52:b4:e1:ff:5c:91:f3:58:ba:5b:ab:5c:
f1:b1:a0:e4:27:6a:83:2f:e5:f3:23:24:38:ad:f2:
b7:0f:1c:65:c8:f9:3f:c4:86:aa:0c:31:9a:da:7d:
70:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1A:EC:11:8A:EE:27:80:DA:B4:F9:7C:E4:A7:6C:74:0C:5C:98:01
X509v3 Authority Key Identifier:
keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:87:6c:36:0a:98:78:40:a3:29:fe:fd:0b:3f:35:3f:ad:f4:
f8:6f:27:78:4f:b9:84:df:c6:20:7c:d1:7c:68:e8:d3:ba:47:
7e:8b:fe:f9:a9:e9:37:c3:59:f8:eb:6f:e2:35:94:82:ca:43:
f0:06:c2:1f:85:e0:62:fc:1a:94:89:2c:da:cf:b4:65:d1:12:
ed:5b:7b:88:31:80:d9:1f:f6:d9:70:dc:d9:54:1d:23:1f:25:
d5:0d:e0:f6:53:e8:03:1c:18:9e:8a:28:b4:dd:c4:90:cf:d6:
89:15:95:c6:32:8e:33:68:64:21:44:c3:fd:73:6e:f5:26:a5:
08:47:81:37:b7:99:e5:e5:bc:9a:51:3f:45:e6:a4:77:40:8a:
4f:7f:7f:5c:3c:73:b7:63:37:6e:75:da:61:f5:f8:71:d3:39:
ca:e9:4a:10:a6:37:cf:dd:80:1e:6c:c1:f1:13:31:d8:cb:30:
f7:d5:ef:78:9a:8b:38:be:ae:57:c5:8a:25:ec:af:ce:6c:60:
da:22:94:7b:78:c7:21:d7:8e:9f:39:50:33:f9:38:6a:ad:2e:
98:63:b0:26:ac:be:75:a2:de:eb:f3:a2:16:2d:32:a9:9f:18:
4c:41:94:48:bd:aa:e9:53:f6:ed:dd:3a:cf:a1:dc:79:55:ff:
dc:16:82:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:13 2026 by rpki-client