Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
File: JQ599DyC0SChPTyGXx8G9JZEseE.mft (raw, json)
Hash identifier: u43/rZVLishg8/JQ4CdCH7TV3iPWgzAIwhwDFS8KMIU=
Subject key identifier: 93:0B:43:77:BE:45:57:B7:63:4B:E0:52:74:00:0F:6F:32:A5:79:CF
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial: 019F91DAB72249B02A90C5DCD6F442F78A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
Manifest number: 11AC
Signing time: Fri 24 Jul 2026 02:00:57 +0000
Manifest this update: Fri 24 Jul 2026 02:00:57 +0000
Manifest next update: Sat 25 Jul 2026 02:00:57 +0000
Files and hashes: 1: JQ599DyC0SChPTyGXx8G9JZEseE.crl (hash: VZBy0XZapjjMto5de9o1ksluXosf/PjXV4fTS4+nj1c=)
2: egsIufM9DiHj_9SSdU6nff71R8Y.roa (hash: e9a1PO48oO66qDrGOo9Li3VvtXwHdcVqPnuihXWNVoQ=)
3: wSDNzntcWhNUBixkb6aX20BeB6s.roa (hash: jjJjLDXdJiAxkXQhCjVcOuaYUcxyHYmIDSfSBzcXqDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:b7:22:49:b0:2a:90:c5:dc:d6:f4:42:f7:8a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Validity
Not Before: Jul 24 02:00:57 2026 GMT
Not After : Jul 25 02:00:57 2026 GMT
Subject: CN=930b4377be4557b7634be05274000f6f32a579cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:69:85:bf:7c:5d:88:4d:73:11:54:57:e1:49:
c7:ad:93:a4:04:e2:ab:5f:12:f6:54:31:eb:b7:c1:
72:7c:e7:51:08:7f:b4:fe:81:05:cc:08:a7:0e:68:
a4:57:cf:08:c9:99:d8:39:94:93:ee:f0:6c:c8:ab:
7e:38:4b:92:db:85:a1:8b:70:dc:52:3c:6d:34:8b:
34:1e:b1:70:8e:a2:3c:76:ea:6b:52:49:f6:e8:ab:
a4:ec:9a:65:e0:b9:f5:af:97:2a:cd:9e:af:52:3f:
80:b7:07:f6:71:c3:26:56:84:78:ce:e7:30:a3:36:
2a:cf:ae:8d:04:53:b9:8a:07:17:0f:89:e5:ee:8a:
6c:ed:fb:f6:e5:2e:da:ec:53:03:35:b4:4a:22:51:
7b:eb:f1:3c:4b:6d:8b:1b:e5:e9:18:9e:9e:69:b6:
79:aa:49:6f:d6:ff:25:83:ba:a4:c9:0f:fd:ec:ff:
41:ce:90:87:b0:02:86:e6:3f:b6:11:f3:35:66:dd:
c1:ea:2e:b1:20:32:59:13:7a:33:c4:ee:54:e3:ef:
04:6f:98:6d:4f:2c:59:d6:0a:69:17:e6:24:17:ba:
a2:ec:0c:a8:e7:2f:61:6b:80:8d:a4:2b:99:61:b1:
c6:24:de:4b:7c:5e:4c:84:58:1e:85:a6:38:2f:cf:
0d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0B:43:77:BE:45:57:B7:63:4B:E0:52:74:00:0F:6F:32:A5:79:CF
X509v3 Authority Key Identifier:
keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:88:af:51:e9:34:5c:ec:41:f0:9c:26:f8:1e:c2:07:1d:9d:
54:ce:58:97:f0:f0:e3:82:ce:21:06:b3:46:03:81:52:3f:22:
33:c0:67:eb:39:33:50:0f:3e:f3:f4:83:ef:d2:11:e7:48:79:
53:1c:a2:aa:df:0f:8a:be:f4:9f:e6:5a:22:6e:f3:bd:fd:7a:
b3:c5:1f:da:6a:d8:35:99:5a:5e:e2:ee:0c:1b:de:1c:89:81:
90:54:a3:51:41:d0:04:9e:0c:63:2e:2b:2d:26:04:9a:75:e0:
30:22:b6:d1:9d:aa:c7:4c:4f:d0:e3:91:33:c8:27:d5:0a:76:
95:00:69:26:ce:a4:63:49:74:2f:95:33:14:51:6b:ca:38:f1:
74:44:14:8b:34:1b:96:20:43:1e:36:05:ab:47:fc:89:f5:2d:
7c:c6:b7:b1:1c:58:52:1f:06:68:73:6c:f3:64:ba:b7:a9:2b:
f2:7b:c2:68:e1:90:5d:65:ed:8c:06:7f:01:7e:91:05:f4:73:
40:99:1d:4f:bd:c2:02:fb:3f:68:fc:ad:33:7d:96:b9:63:d2:
ef:16:cc:cf:20:89:09:b3:29:21:c6:b4:b5:a7:bf:cb:a3:0e:
b9:2c:c7:ab:52:ef:8d:4b:3d:63:fb:fb:b2:5f:64:5c:22:6d:
26:aa:46:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:22 2026 by rpki-client