Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
File: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft (raw, json)
Hash identifier: Fns4HHI/ICNzoNiFwO2PuJ+k6M0751lP9q9amvUl9OM=
Subject key identifier: C9:B9:A2:80:49:77:5C:85:B1:02:C8:70:B6:DC:AD:3A:A4:E3:D2:E3
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial: 019F95B76ED7543B7E94D60C5B81A6A271A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
Manifest number: 1896
Signing time: Fri 24 Jul 2026 20:00:54 +0000
Manifest this update: Fri 24 Jul 2026 20:00:54 +0000
Manifest next update: Sat 25 Jul 2026 20:00:54 +0000
Files and hashes: 1: 7HIOB7eoRAyG0ZPEZvvAbpswFrY.roa (hash: Es8A+6R1MLYeRZW+tk5RBf/7aXDiiAHZ+/2nLZtggb4=)
2: MCbnv8KJAY7dWm0UH6ulCMh-Zxc.roa (hash: 0xuvAxTJi/9kYRQK87s4orh7y9pLCa7vkuXPG3p7G24=)
3: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl (hash: kS2ae2DJ5Fazw47hIIK9AYpVgZBHBWHi98zr9mVHFV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:6e:d7:54:3b:7e:94:d6:0c:5b:81:a6:a2:71:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Validity
Not Before: Jul 24 20:00:54 2026 GMT
Not After : Jul 25 20:00:54 2026 GMT
Subject: CN=c9b9a28049775c85b102c870b6dcad3aa4e3d2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:a8:45:ec:6c:bb:45:bf:cf:29:fc:88:62:
e7:10:08:ca:4f:bb:7d:3c:f3:ba:e2:a1:7b:36:a6:
99:b3:ff:78:61:12:a8:6b:3b:5c:dc:14:5f:05:2a:
ed:3b:62:4c:62:79:e3:1f:8c:cb:41:24:09:0f:c3:
5a:b6:df:f7:a1:95:ac:31:ca:2c:b0:04:cf:d9:47:
2f:66:d7:bd:df:4a:9e:83:e0:8f:59:03:6a:6b:65:
e5:62:a6:09:20:62:12:db:e0:f2:60:6d:5e:d0:f9:
e0:5d:43:88:20:c8:c2:4d:0b:48:ad:61:39:66:46:
b7:df:a8:16:e7:c2:8d:99:ad:b2:d4:f6:0d:2b:36:
23:e6:de:c8:8b:b2:62:2d:a8:66:3e:e3:36:ed:51:
b3:46:8e:f9:bd:d7:60:33:fb:93:06:3d:8c:75:de:
b5:00:df:06:e4:9f:93:c9:7d:86:ee:17:f0:f4:2b:
ce:56:1b:4d:1e:07:c7:01:6a:5a:80:f0:50:ae:72:
15:97:d5:1a:41:86:3f:5f:e8:72:5d:99:a1:78:85:
d2:8e:22:a6:d0:6f:83:31:a4:80:74:98:73:8e:42:
60:7e:0d:6b:0f:dd:17:54:ac:e4:67:7c:36:a2:8f:
a5:c0:13:c0:b0:df:35:3b:49:e4:2d:26:06:75:3e:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B9:A2:80:49:77:5C:85:B1:02:C8:70:B6:DC:AD:3A:A4:E3:D2:E3
X509v3 Authority Key Identifier:
keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5f:39:15:8c:17:b8:47:92:dd:cf:a7:a5:3f:a0:22:00:af:
cb:4c:5f:f3:85:f4:6a:14:94:18:b4:c3:54:1c:f4:21:e5:52:
f6:bb:ff:04:8a:bb:3e:a6:09:3f:33:ca:89:97:b8:39:66:55:
21:3d:a6:5c:92:f6:1a:c8:e0:f2:36:bd:7e:df:ad:e0:ea:51:
03:5e:f7:90:e5:17:60:7b:0a:e0:f4:8e:05:62:c8:a2:aa:d3:
75:b4:40:e5:47:58:21:f1:1b:91:09:c4:82:29:6f:aa:50:4c:
6d:08:36:7c:0f:5d:d7:ff:d2:9d:7d:be:ee:61:f4:ad:0b:32:
ef:42:7d:4f:5a:64:ba:59:f4:c6:6b:6d:42:cf:4d:99:8e:c9:
1d:93:72:79:34:e6:bc:92:62:0a:d9:d4:54:28:5c:00:92:52:
a1:09:7a:19:bd:f5:93:54:aa:a7:d8:e3:4c:ad:ab:0c:15:4f:
be:ec:56:2e:8d:7c:a8:c0:0f:61:fe:7b:72:96:ae:3b:39:ea:
71:0e:c2:02:5b:44:13:25:61:b4:ed:a1:38:08:6c:b4:33:ae:
45:62:8e:fd:55:c4:02:59:30:e1:fc:b6:5a:fb:28:fa:0f:d3:
1b:88:e8:d7:b7:bc:54:94:97:ff:98:96:cd:21:92:dc:c8:c8:
a7:6a:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:53:58 2026 by rpki-client