Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
File: JjycXuMYJkcwl2-vxykVM-vasK4.mft (raw, json)
Hash identifier: VFCRu6RIk6pv8+AFyaWJnvYVy3lYuiOcJ/xp76kVboM=
Subject key identifier: 70:06:86:DC:56:C6:5F:8F:DE:DC:EC:1F:B8:9F:C2:5C:E1:36:15:CD
Authority key identifier: 26:3C:9C:5E:E3:18:26:47:30:97:6F:AF:C7:29:15:33:EB:DA:B0:AE
Certificate issuer: /CN=263c9c5ee318264730976fafc7291533ebdab0ae
Certificate serial: 019F95493D4168E8FF487C6172E96DFD0F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:32 +0000
Manifest this update: Fri 24 Jul 2026 18:00:32 +0000
Manifest next update: Sat 25 Jul 2026 18:00:32 +0000
Files and hashes: 1: 3s2ZJUQAOdZQJN2QTpFD73M4leg.roa (hash: +xm6BHzusOZzGKozAQdu+MZkDVhhL6TdcM7wkPQ8Ae0=)
2: JjycXuMYJkcwl2-vxykVM-vasK4.crl (hash: JmG34CBsQZHiis4CX7a/mCljdAun0Ns6NH7h0PzFwoA=)
3: sijAZFXqLEAsSi2rQmlGly-OpqE.roa (hash: nt4ShhsIrV0zPjcFLpG+lSg9q9cr8DdHdWhyP7LPzjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:3d:41:68:e8:ff:48:7c:61:72:e9:6d:fd:0f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=263c9c5ee318264730976fafc7291533ebdab0ae
Validity
Not Before: Jul 24 18:00:32 2026 GMT
Not After : Jul 25 18:00:32 2026 GMT
Subject: CN=700686dc56c65f8fdedcec1fb89fc25ce13615cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:b9:29:82:a9:30:93:4d:8d:2f:e5:66:4a:
1f:50:0d:30:cc:35:27:46:4f:50:ce:a9:51:a8:31:
07:53:10:9d:08:c9:72:db:57:f2:38:4d:67:70:34:
1f:79:d4:06:7a:a7:c8:67:3b:02:60:85:9b:f9:d7:
72:ab:a9:f2:c0:02:e1:72:d5:3a:d6:e7:11:f0:3d:
b1:9f:8f:84:08:78:fc:ea:e8:d9:e9:45:fd:dc:39:
d1:21:3e:d5:4b:97:93:54:c2:d0:b8:e8:47:ac:75:
10:06:3d:f7:04:c6:d3:64:55:22:10:be:5d:f0:eb:
2d:4d:bc:bb:6b:96:0f:70:8b:3e:47:89:d8:88:28:
40:61:09:72:91:68:b0:70:d5:5e:2a:a2:40:6a:00:
b7:0b:5e:d4:d3:91:dd:3f:1e:2d:95:b2:d2:b4:b4:
df:d8:db:d7:84:ce:72:7a:22:8a:bb:96:72:29:fe:
9d:78:01:59:4b:a0:bc:a1:49:19:2d:14:bf:17:fc:
86:8f:58:4a:dd:45:ab:d9:7a:c6:80:24:b5:fb:19:
c0:60:e2:40:a2:fb:5d:d8:f5:fa:bb:0c:60:d3:a2:
77:47:e6:ea:75:bd:06:50:01:aa:c6:d6:5e:db:94:
44:c2:4c:8b:c2:37:e7:9c:23:b4:62:01:3b:3a:a7:
9b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:06:86:DC:56:C6:5F:8F:DE:DC:EC:1F:B8:9F:C2:5C:E1:36:15:CD
X509v3 Authority Key Identifier:
keyid:26:3C:9C:5E:E3:18:26:47:30:97:6F:AF:C7:29:15:33:EB:DA:B0:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:30:3f:e1:d7:de:b0:c9:fe:a3:09:41:b2:3b:2a:23:2d:2b:
a9:15:0f:79:aa:d9:49:b9:3e:23:7e:9f:d7:c6:41:3f:b8:08:
9c:2d:7b:83:0b:e3:78:a2:b4:ff:61:87:51:eb:3b:b3:0e:b2:
d3:a6:b6:c9:c5:71:56:f8:2a:81:60:91:de:99:75:b3:8a:10:
70:32:59:49:d3:03:07:96:ad:fc:1a:63:d4:4b:75:bd:e8:2a:
6b:83:ef:0f:ca:47:c1:f2:54:25:0f:71:da:21:0d:30:5f:9c:
ae:fc:47:8b:e7:26:9d:6b:b4:9f:f7:a4:10:c9:80:ae:b6:3d:
70:0d:13:bd:cf:7c:bc:6d:8d:1b:5c:a5:1e:fd:dc:95:e0:46:
f4:8f:1c:48:67:67:98:bc:49:e7:1f:ba:81:17:d4:89:97:c5:
87:e8:b2:75:12:25:08:85:43:e5:57:b8:a5:d5:12:2e:13:42:
81:64:d7:13:91:b3:7d:10:c0:bc:e4:84:23:be:b7:12:db:6c:
85:64:02:86:de:32:50:69:39:97:e5:08:24:73:a7:90:7f:0a:
62:87:26:4a:a8:65:1c:bc:47:91:04:da:c3:5a:1d:e6:dc:f2:
5b:ff:0b:c7:1f:10:e4:96:a2:97:b1:9c:02:72:a6:17:02:9f:
0d:59:4f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:55:21 2026 by rpki-client