Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.mft
File: jLsZbctbQbLDX2jNw9CKcj-OMKc.mft (raw, json)
Hash identifier: ODbcVuy7B1P6FBSntqriE4EWv7HY3xCQeJIlEFqz/SQ=
Subject key identifier: 33:21:22:D9:00:BF:35:EA:3A:A3:A5:05:1E:95:7A:92:65:2A:CC:33
Authority key identifier: 8C:BB:19:6D:CB:5B:41:B2:C3:5F:68:CD:C3:D0:8A:72:3F:8E:30:A7
Certificate issuer: /CN=8cbb196dcb5b41b2c35f68cdc3d08a723f8e30a7
Certificate serial: 019F8F7EE1F56FBB8471C50C396A52D522E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLsZbctbQbLDX2jNw9CKcj-OMKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:25 +0000
Manifest this update: Thu 23 Jul 2026 15:01:25 +0000
Manifest next update: Fri 24 Jul 2026 15:01:25 +0000
Files and hashes: 1: jLsZbctbQbLDX2jNw9CKcj-OMKc.crl (hash: vZNi45EgV9xjKSgcK65rlddEng/874O/ZcaW3KCmxD8=)
2: pjDwdQHNJVDo70btJAsKcL2t8Wc.asa (hash: 9hs9uCk4t0lY0AxWzX7WklKc5C2LiY8Jejt1rMjXdhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jLsZbctbQbLDX2jNw9CKcj-OMKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:e1:f5:6f:bb:84:71:c5:0c:39:6a:52:d5:22:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbb196dcb5b41b2c35f68cdc3d08a723f8e30a7
Validity
Not Before: Jul 23 15:01:25 2026 GMT
Not After : Jul 24 15:01:25 2026 GMT
Subject: CN=332122d900bf35ea3aa3a5051e957a92652acc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:9a:32:23:49:5a:69:07:31:9d:e1:25:b1:
68:eb:24:85:2a:ec:4c:18:ba:c9:c5:cd:43:ea:fb:
ea:b0:ea:0d:96:05:5f:7d:a0:70:d8:b2:3d:05:87:
8d:fd:d8:48:48:5f:bb:0e:8f:a4:a7:31:4c:08:1a:
75:be:3f:d6:20:24:80:04:c8:38:ce:1b:f3:72:36:
7a:c4:31:99:f1:4a:b2:f3:7d:1e:76:e4:3e:ac:79:
49:bf:be:17:42:4b:80:9b:53:bb:0c:fb:29:5f:d4:
8a:c2:c0:60:39:9f:89:fc:be:d5:5d:95:4e:47:df:
43:cd:6e:9b:de:37:4a:50:03:fd:ed:6d:8a:bf:3e:
ef:37:0d:a7:c8:0b:7f:09:e4:b5:75:47:60:25:02:
97:44:26:6b:62:04:57:af:53:5c:db:b6:5f:37:2f:
6e:2e:54:35:54:36:98:e0:e5:b5:d3:30:4c:2c:a2:
8a:b9:6b:13:aa:7e:98:bd:01:95:ff:81:5b:1b:2b:
4e:46:23:51:27:4c:c2:4f:d3:93:d0:e3:99:07:88:
8b:75:be:82:76:84:d5:d9:97:4a:56:15:71:81:62:
64:bb:07:cb:8b:13:0d:13:71:3f:fe:cd:d6:d3:14:
eb:20:2a:c8:db:34:dc:91:5c:9f:f9:90:e2:a2:8b:
84:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:21:22:D9:00:BF:35:EA:3A:A3:A5:05:1E:95:7A:92:65:2A:CC:33
X509v3 Authority Key Identifier:
keyid:8C:BB:19:6D:CB:5B:41:B2:C3:5F:68:CD:C3:D0:8A:72:3F:8E:30:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLsZbctbQbLDX2jNw9CKcj-OMKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9a:8a:25:99:dc:1e:48:23:e6:c1:5f:c0:b4:62:0e:1d:50:
ae:a7:1e:92:bb:fa:71:15:26:49:77:6c:f3:b9:62:d8:a0:0e:
ed:8a:5c:70:0a:48:76:31:b0:2e:02:6c:ad:58:3c:25:81:57:
27:9e:b1:46:04:08:aa:3e:2c:f0:2b:70:71:bc:e6:40:0f:62:
91:7e:04:33:84:ff:02:9c:42:5e:e2:8c:b1:fd:e4:60:3d:ce:
23:93:8d:45:b5:ba:f9:af:71:37:fb:52:2b:51:8e:63:ac:1f:
51:32:86:dd:39:af:f3:80:78:fd:08:06:e0:55:b0:c7:5e:13:
34:3c:79:02:6d:86:d2:9d:a5:b3:1b:13:f0:f5:13:b6:1d:b6:
49:1b:db:d7:cd:eb:18:3c:e1:44:0a:78:0a:12:a7:d1:87:3a:
14:54:90:e1:8c:06:52:05:4a:bd:01:de:2c:d1:56:24:56:14:
f5:c3:08:e0:74:ca:59:db:e3:43:dc:15:ff:c7:bc:ce:59:4f:
36:6a:8c:8f:95:a1:9a:5f:57:e4:ef:4c:f0:4a:e8:61:79:12:
8b:3f:5e:fa:9d:cc:03:37:47:d5:31:ee:15:6f:1b:a0:18:a8:
23:0c:43:59:01:94:6b:3e:d0:98:85:6f:48:a4:5f:86:39:15:
a4:22:e9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:35 2026 by rpki-client