Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File: josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier: pxX3LCynAk+p71gDkvuS2tZvfidGZH/SAJQHIDK+bPU=
Subject key identifier: C2:66:24:31:05:E8:66:FB:F3:99:27:BA:B2:71:4E:12:30:E0:D7:20
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 019F909134DE076B77BF1429451F8F0C3A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number: 173D
Signing time: Thu 23 Jul 2026 20:01:03 +0000
Manifest this update: Thu 23 Jul 2026 20:01:03 +0000
Manifest next update: Fri 24 Jul 2026 20:01:03 +0000
Files and hashes: 1: 9X-2FIRMAaSRhZQ-wkavy4syAOk.roa (hash: GKpv6cKMd+W76zaEdJM3JhhiCbwjlSXMqstxMp4WwMU=)
2: YCngamdKmrL7RtnLOsCOvdmjrwU.roa (hash: xwesi5tZd9dA95ma72FCibPLwuYV0Ls74wsQh7Krag0=)
3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: KUPzqMIwiOlBxQBrfysqE4j/ga3eXobE7jfuSEzJqt8=)
4: xYUdIY0z9xKFX5ufCiqZob2LPK0.roa (hash: nFxhIHiYHhqKXMN0ILHetz/JCzJHXnOEztqoKdJ2imI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:34:de:07:6b:77:bf:14:29:45:1f:8f:0c:3a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Jul 23 20:01:03 2026 GMT
Not After : Jul 24 20:01:03 2026 GMT
Subject: CN=c266243105e866fbf39927bab2714e1230e0d720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:dd:5e:79:c8:97:b0:9d:e6:5a:ee:44:51:
53:fc:6c:35:e4:e6:0f:89:e6:47:ca:b9:1f:36:f3:
fe:c8:ba:cb:c2:80:e2:85:a9:4b:9f:57:3b:ec:9d:
c3:36:63:c2:9c:29:93:1c:ab:c2:7f:c3:69:a6:a2:
02:7f:2f:69:4f:9b:63:f2:b8:ff:4b:ea:96:0f:f6:
f2:61:29:67:06:71:cc:cc:13:37:79:76:00:ff:cf:
eb:39:67:2d:2c:ee:7b:30:da:7a:86:70:dc:24:ac:
71:08:a5:02:92:7f:98:c3:ab:c7:2c:0f:dd:bc:d0:
36:96:49:a5:89:ab:8a:5e:70:a5:c9:8c:b0:a1:47:
13:69:50:86:8a:40:77:0b:dd:2e:73:01:83:66:38:
80:b0:a2:97:59:75:2d:25:29:48:02:11:f3:ef:4d:
d6:74:0b:62:93:5f:9a:97:dc:9b:16:bb:35:dc:0e:
d0:91:8a:2d:00:b2:c8:2d:ed:d8:99:67:14:aa:51:
8f:3e:58:d7:3f:1a:ef:cb:34:9c:97:36:61:e9:57:
53:8b:30:e3:f5:57:3b:68:2d:45:8d:9b:90:7e:24:
5a:0f:f2:0c:52:24:db:a3:22:d0:2a:92:b8:11:9e:
c6:cc:6b:58:c8:f0:e0:3f:72:63:fa:99:ed:e7:5a:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:66:24:31:05:E8:66:FB:F3:99:27:BA:B2:71:4E:12:30:E0:D7:20
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:20:fd:6e:56:27:a0:ac:26:ed:69:7a:25:cd:83:68:14:0d:
07:77:6c:50:4b:97:c8:f6:db:24:a7:b2:47:fe:f9:85:96:45:
26:2d:d8:5d:6f:5c:ef:cd:47:1b:c7:35:78:16:bc:c9:9f:36:
83:d0:bc:ac:94:b2:aa:40:e1:dd:ea:69:9d:10:72:f7:cd:3f:
0b:ee:b2:90:16:45:cc:da:f1:9b:75:97:09:66:d4:dc:7c:44:
58:9e:6b:04:f8:36:4e:1f:c3:f2:f7:a9:9c:ed:83:73:be:c7:
04:fb:bb:ce:10:8f:de:c8:36:c6:d4:d2:f2:22:a8:0c:7c:d1:
ce:2b:0f:a9:02:40:18:38:8a:a5:ea:14:71:24:c7:ce:fb:d8:
c4:3d:dd:b9:00:46:62:66:c3:67:2c:62:2a:b1:b5:7f:f8:97:
a8:a0:71:8f:de:c2:8a:dd:fe:06:3c:01:56:e3:b1:b4:62:1e:
cd:1b:b5:1e:2a:5c:5b:83:43:50:a6:8c:69:9b:87:be:9e:0f:
f4:47:92:e5:bc:fc:03:31:5e:21:c4:42:ff:21:39:50:fd:78:
c5:e1:df:6a:a4:30:af:62:00:db:4d:4d:c3:20:3a:6b:86:61:
50:2a:37:3b:a1:d0:e7:2c:40:2b:56:da:76:b6:3f:ce:3c:8c:
f9:b4:97:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:23:21 2026 by rpki-client