Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
File: jsSmfb7XRE3dJ-gA-2whATpbEcY.mft (raw, json)
Hash identifier: iu6zLXvFO9iBNOT7un4WiRK6KkyFmDcCE5vIs2+/sqc=
Subject key identifier: 79:19:C8:AE:D8:C0:14:52:47:3D:03:E9:75:26:BC:B5:1D:B9:CB:6B
Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Certificate serial: 019F91DB24D7C30512AE9EFC2229EBEDB357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
Manifest number: 16F8
Signing time: Fri 24 Jul 2026 02:01:25 +0000
Manifest this update: Fri 24 Jul 2026 02:01:25 +0000
Manifest next update: Sat 25 Jul 2026 02:01:25 +0000
Files and hashes: 1: LL_AxmtYZZoPVDJOgngQ3xheZAg.roa (hash: SlYQb5afBreMgIamUgnc8eCfbQSDhHvoVK81024PSGE=)
2: jsSmfb7XRE3dJ-gA-2whATpbEcY.crl (hash: ka/QFfs9hVDVk5d/0iSejAl5810E+fFy5HuaHc7XeNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:24:d7:c3:05:12:ae:9e:fc:22:29:eb:ed:b3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Validity
Not Before: Jul 24 02:01:25 2026 GMT
Not After : Jul 25 02:01:25 2026 GMT
Subject: CN=7919c8aed8c01452473d03e97526bcb51db9cb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:bb:59:5f:5a:ee:c4:4e:9d:ed:5d:7c:d7:
8d:d6:ca:9d:d8:5a:7b:83:19:60:b9:23:1d:01:8e:
75:61:1b:35:3a:c6:bc:7a:19:44:24:15:90:03:9d:
ba:b3:0b:c1:ed:64:20:46:45:35:08:db:05:43:ac:
05:db:b2:8d:7c:c7:1d:17:b8:9c:e5:2e:e1:21:4d:
0e:64:cb:19:f2:d4:35:a9:04:ca:68:a4:bb:a4:c2:
a3:99:f2:f9:23:51:c5:b6:4e:2a:c8:8b:a7:98:59:
e2:99:4b:9c:aa:35:99:b6:31:ca:41:9e:03:4d:47:
4e:63:32:57:82:63:a5:10:b0:22:84:f3:5e:a8:07:
d1:d5:c6:89:1f:ae:f0:be:6c:d4:63:f3:98:59:0f:
f6:b9:be:47:34:f2:cc:4d:be:c1:3e:f4:e4:2f:0a:
ae:81:16:d1:81:67:c4:af:e7:48:d0:07:19:4a:7b:
e6:1f:ae:0e:17:e6:b4:6e:a7:3a:0e:cc:4d:5e:32:
39:5f:40:3a:52:50:56:fe:f5:13:90:55:10:a8:fe:
ed:2f:f5:4b:db:2d:b4:bc:12:f6:5b:65:01:64:8f:
64:e4:94:e8:98:91:52:10:22:78:b6:2b:97:b5:61:
0c:bb:0e:58:be:8c:43:aa:11:1f:99:39:93:6c:89:
38:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:19:C8:AE:D8:C0:14:52:47:3D:03:E9:75:26:BC:B5:1D:B9:CB:6B
X509v3 Authority Key Identifier:
keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1f:44:18:d0:6e:1c:35:c0:01:9d:35:e9:ce:76:c3:98:4a:
98:2d:6a:ff:10:ba:61:0d:13:62:69:52:66:31:4d:b1:43:ad:
d7:9e:f1:66:4c:ef:6b:4c:01:73:92:5a:10:2d:c9:82:54:67:
c0:ad:20:87:36:32:73:f9:db:ec:a7:e5:23:5b:5d:7a:9c:83:
5e:d9:7a:7f:41:b2:53:2d:d7:9a:bf:b9:e6:25:0f:07:5a:8c:
76:87:39:1c:8b:dd:f2:f5:7b:99:9a:12:a9:97:e1:86:b3:a5:
1b:70:f1:4e:a2:29:6d:73:b2:61:3e:ee:e3:7d:c5:04:70:7f:
3a:e3:08:67:77:1b:c2:53:af:44:52:66:d0:5b:87:0e:52:fa:
1b:fd:5e:48:ca:f9:53:c2:9a:6d:33:d8:0c:66:2e:55:e1:97:
ee:ba:9a:ff:3f:a8:15:e5:83:88:27:30:bd:3b:00:15:2c:51:
f1:c5:67:6c:75:76:fe:c7:b3:e7:eb:46:9c:f2:23:e0:20:11:
58:5a:7a:b7:5a:7b:e4:d6:26:ec:a1:32:4e:44:d1:4d:a2:1e:
cc:57:7c:80:41:b7:b9:6e:ba:05:8f:f5:bf:5e:68:ba:ac:1f:
12:ff:d1:97:2b:9e:bd:5c:2d:1c:46:25:be:f4:48:fe:82:01:
ba:4a:f2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:05:09 2026 by rpki-client