Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
File: J0PbfuNKwtTtV49JXgCWy5iv9xw.mft (raw, json)
Hash identifier: HIMphUQYoDg/NvacHiY1BAS6gAMuBhoO40+SXJU5vKM=
Subject key identifier: FA:C1:2A:90:34:F7:54:55:EB:06:BD:59:63:C0:89:01:82:36:9A:94
Authority key identifier: 27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
Certificate issuer: /CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Certificate serial: 019F9090EF8CB56B33CB9940707CC0976614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
Manifest number: 0511
Signing time: Thu 23 Jul 2026 20:00:45 +0000
Manifest this update: Thu 23 Jul 2026 20:00:45 +0000
Manifest next update: Fri 24 Jul 2026 20:00:45 +0000
Files and hashes: 1: FSCr9rK0vEudDS9_bQ3O-hGkqrk.roa (hash: ddVmg0mXECaptmy2zncQhSGmVK6AKxm9h3sGTc6VHOM=)
2: J0PbfuNKwtTtV49JXgCWy5iv9xw.crl (hash: No/uO5DGrH9XYY7OVviz7Imp+91qFIRHz3HEhtkpMck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:ef:8c:b5:6b:33:cb:99:40:70:7c:c0:97:66:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Validity
Not Before: Jul 23 20:00:45 2026 GMT
Not After : Jul 24 20:00:45 2026 GMT
Subject: CN=fac12a9034f75455eb06bd5963c0890182369a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:3e:3a:23:16:7c:24:8b:aa:8c:db:1b:8e:
e0:a8:d1:2a:e0:ee:e5:a3:78:d8:e1:59:75:d9:0e:
15:8e:4d:00:9b:72:44:2d:20:4d:73:6b:00:69:ae:
47:18:3b:29:f3:fe:c5:5c:62:d8:60:0f:3f:4f:82:
95:23:48:86:94:7a:7d:27:90:7d:e8:fa:c8:09:cb:
bf:db:ee:4d:34:44:d0:83:4e:25:54:22:10:6b:38:
01:92:ad:29:a3:e1:2c:ae:c3:95:36:92:f2:ba:4d:
aa:22:94:28:b2:54:e3:16:82:8e:b2:53:fa:c2:82:
cf:d8:4e:03:4c:48:2b:c3:61:7b:a2:ab:cc:ff:f7:
ae:d2:65:a6:69:15:96:96:3d:27:f9:bf:45:b4:fc:
7f:cb:e2:9d:05:a5:55:e2:60:d8:7b:d7:26:cf:1a:
e5:fd:5a:34:04:eb:f7:46:11:09:e7:02:1b:7b:b8:
89:d6:d1:db:74:b0:6c:ed:d9:11:7d:a0:3b:45:6c:
ad:e8:53:3d:af:53:2f:c1:84:50:80:e8:48:d2:58:
46:7c:10:25:1c:d3:be:82:b5:88:98:3e:f9:07:4c:
17:03:7e:e5:9b:a6:4f:3e:2d:c2:4e:9e:2e:e9:c0:
41:d6:9b:cb:08:0a:6f:d8:e0:28:81:1e:eb:7f:1e:
60:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C1:2A:90:34:F7:54:55:EB:06:BD:59:63:C0:89:01:82:36:9A:94
X509v3 Authority Key Identifier:
keyid:27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:02:d4:3b:4b:c1:ce:62:3c:5e:c3:52:2c:b3:28:ef:21:3e:
43:29:09:f9:db:2d:d1:af:60:3b:e9:30:62:ac:ea:b9:0d:1d:
81:b3:47:4e:73:0f:cc:b8:bd:62:be:78:f5:c4:35:ab:c2:9d:
64:c8:b1:97:10:bb:b6:1e:f5:0d:be:cf:00:23:46:35:40:3b:
e3:c8:3f:95:54:67:71:d0:ec:10:99:1e:1e:71:e8:39:66:1b:
85:b9:6c:c5:6d:97:81:8a:4b:2c:a9:b3:f4:ff:5b:61:af:f2:
fe:c4:9d:f0:31:da:ac:dc:3a:ca:81:2a:e2:5d:0f:11:68:76:
2f:23:0b:22:b3:e3:e0:34:67:c3:9a:8e:15:f8:b9:33:94:bf:
b5:f1:09:d1:07:97:d4:7d:04:5a:82:70:aa:6a:05:06:40:69:
2e:95:65:b6:ca:44:9a:de:73:62:7b:20:da:8e:17:ab:a9:9f:
61:a3:d7:86:47:5d:39:65:88:21:f4:13:1f:ef:59:7c:97:53:
e8:0b:aa:d3:4d:0c:f8:0e:89:b6:14:73:8f:85:10:17:b8:d1:
06:ff:28:38:2c:e2:52:84:ca:59:29:22:d9:7b:a8:36:9e:86:
bd:5b:38:06:90:7d:e7:83:1d:e8:b5:7f:cc:0b:66:14:9a:8d:
e0:5a:15:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:07 2026 by rpki-client