Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
File: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft (raw, json)
Hash identifier: 5R2szHgl11gD30CwCA3D3ywCgWX3U53UT9OHEx81yjU=
Subject key identifier: 3B:5A:17:44:4A:17:01:AA:D4:AB:34:CE:63:B4:58:8C:E6:7A:25:E8
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 019F927F0A44F1C94A90AEE2549F8DA82287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
Manifest number: 16D4
Signing time: Fri 24 Jul 2026 05:00:26 +0000
Manifest this update: Fri 24 Jul 2026 05:00:26 +0000
Manifest next update: Sat 25 Jul 2026 05:00:26 +0000
Files and hashes: 1: 9ROo0iC15VlIOvkEDWyQwJOCacY.roa (hash: X5stVJ1ytEh0HyvZJyffab9oO2fx+fQjNKYB1CriIiQ=)
2: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl (hash: Ibl48T/gAoSuZaTYYodHHj7RcX86vtyuwlv2ulaV3TE=)
3: nZXVAEhAwzesGngGVae3JHM5UNg.roa (hash: JJvr3kNnqWeUrrnpiI7ivzQbH103rdFaTcpNQ7xPtuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:0a:44:f1:c9:4a:90:ae:e2:54:9f:8d:a8:22:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Jul 24 05:00:26 2026 GMT
Not After : Jul 25 05:00:26 2026 GMT
Subject: CN=3b5a17444a1701aad4ab34ce63b4588ce67a25e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d0:ab:87:ae:64:5e:6d:98:fe:df:81:cf:b3:
cb:9c:60:8f:54:a0:3c:80:5b:7c:d3:f9:f1:94:e7:
2f:57:30:dc:47:88:32:46:49:13:29:fe:1f:53:7d:
9a:70:7a:2d:ee:73:5e:1a:e2:b5:8a:5f:d1:86:de:
ce:80:45:48:d8:10:fb:ff:dd:6e:49:59:c5:9d:80:
5d:56:50:73:19:65:7a:50:f8:a5:4a:80:07:15:94:
04:2f:46:2a:3e:bf:92:2a:59:61:07:da:94:c1:53:
3d:69:b5:be:48:90:77:7a:df:c1:ac:16:7d:d9:43:
28:d4:a7:98:9c:a8:05:ee:a3:f0:df:93:40:ed:70:
46:0d:f6:06:ce:4c:53:bb:e9:bc:3c:44:c5:7b:ce:
7d:f1:e2:2a:7f:0d:8c:a0:11:c3:09:45:67:72:75:
89:d2:6a:45:de:56:02:ec:7d:61:95:f1:f6:fe:6c:
c5:9b:08:38:53:cd:95:70:4b:b3:87:5e:74:64:e3:
56:ae:df:eb:90:8b:d7:d5:5d:8c:8f:dc:f5:b3:4e:
e4:8f:0a:32:57:fc:83:a0:e8:11:62:19:18:b7:31:
ec:c0:17:b9:8c:5d:fd:fc:fb:2c:f5:78:2b:fa:32:
e6:be:e2:37:82:4f:61:50:62:95:1d:57:7e:bc:80:
67:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5A:17:44:4A:17:01:AA:D4:AB:34:CE:63:B4:58:8C:E6:7A:25:E8
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:5a:c0:08:74:8f:ba:d6:6a:b2:24:87:67:2f:27:3f:42:6d:
6d:16:65:fb:d3:0b:75:34:df:6d:26:9f:c1:25:78:01:a2:ea:
d8:fd:d6:2b:07:17:58:a9:ac:d3:64:99:54:3e:73:2d:c2:0d:
4b:42:c0:7c:c6:eb:0a:70:94:cd:76:c3:d0:af:21:e4:e9:b3:
07:fc:45:5a:f6:65:75:1c:43:6a:b5:7e:42:82:e2:e2:82:23:
e9:67:6a:db:ec:2b:5a:48:8d:36:6b:2a:36:6a:ff:16:c2:61:
0d:f3:bc:14:f9:85:22:d4:08:e0:01:15:43:7a:6d:0c:c1:09:
a5:61:99:78:d6:a4:53:fd:4f:8e:55:c7:a9:22:95:51:61:cc:
b6:95:9c:be:39:ba:da:c2:ab:e6:bc:4a:7c:3c:1f:02:d8:00:
9d:4b:a5:9a:57:cf:21:77:18:47:ba:bd:9e:ea:b9:39:2b:5c:
99:90:74:c8:0c:6c:b9:86:5a:fd:38:b5:41:c9:08:af:d9:59:
46:8a:d2:c1:0c:26:15:49:6d:ea:79:33:69:f0:7b:1c:1c:cf:
5c:4c:7a:11:52:e5:02:cb:39:f7:17:7d:54:ac:ea:62:15:b7:
2f:42:f8:66:b5:80:4d:b7:cd:55:94:c2:c8:b4:ce:52:b7:57:
2e:70:42:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:51 2026 by rpki-client