Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
File: jJED0ak0JRu5ixHxacuLK97Gojk.mft (raw, json)
Hash identifier: drwoCqG+W9BVrjSGjiLVDZTY4N4ju5QriWgNkksvTic=
Subject key identifier: 2B:37:07:8E:B8:32:93:FB:E5:20:7A:0F:AA:5C:ED:51:56:BF:92:9D
Authority key identifier: 8C:91:03:D1:A9:34:25:1B:B9:8B:11:F1:69:CB:8B:2B:DE:C6:A2:39
Certificate issuer: /CN=8c9103d1a934251bb98b11f169cb8b2bdec6a239
Certificate serial: 019F935AD74E4A3700F2619EE49BF0546605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:31 +0000
Manifest this update: Fri 24 Jul 2026 09:00:31 +0000
Manifest next update: Sat 25 Jul 2026 09:00:31 +0000
Files and hashes: 1: 59pj5vxlXpnK-XW5WwGqyEvdvU4.roa (hash: JfG2EIx3IMJpZJW/JIpT9Ra8SYgVicx3XtVxcMb037E=)
2: jJED0ak0JRu5ixHxacuLK97Gojk.crl (hash: AfckVirsMQaY6m+6KR6Rap9aDJtZvOsVydedNGLw+r8=)
3: nYzmu5Mu67b3nOfjI7AnlWUe1RA.roa (hash: HUxHKo/Q8v3KIv8CGuS4MzSdG9gmRYG9CV801LmEvVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:d7:4e:4a:37:00:f2:61:9e:e4:9b:f0:54:66:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9103d1a934251bb98b11f169cb8b2bdec6a239
Validity
Not Before: Jul 24 09:00:31 2026 GMT
Not After : Jul 25 09:00:31 2026 GMT
Subject: CN=2b37078eb83293fbe5207a0faa5ced5156bf929d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:29:f2:33:e5:97:4c:b1:0d:d2:c4:a0:6b:
e6:1e:a7:62:e5:87:34:44:dc:89:11:67:1b:28:29:
84:ca:e0:43:89:9a:a2:6e:5b:b0:87:e0:03:2d:e9:
f2:d9:ae:6b:f4:c6:79:48:93:66:4f:78:3f:f1:93:
c4:5d:ec:71:30:8e:70:42:31:09:53:bf:55:85:a8:
d7:01:e2:e5:f4:1c:2c:4e:75:b0:73:83:84:94:9a:
c4:ab:e7:74:77:8a:85:84:73:79:4b:d9:c9:33:ad:
c8:15:0e:72:8d:5a:86:8d:ec:bc:8a:54:a3:47:27:
de:83:fa:57:5e:ec:03:9f:ef:bb:9a:8c:d8:03:5a:
d1:b0:29:de:ea:e1:d6:09:3b:ab:7e:58:b0:a6:13:
15:2a:3c:fd:94:ee:b3:76:c2:30:8b:65:33:5f:59:
8c:ed:99:fd:5e:3b:77:cc:90:37:44:f4:e9:84:58:
a4:60:5f:79:7b:ba:da:1e:c4:d7:60:1a:25:9f:bd:
4b:e6:4f:47:96:c5:48:9f:84:8d:3f:26:78:fc:ae:
97:63:6c:b8:7d:2d:b7:85:71:f4:0d:64:01:8c:ef:
71:9a:1d:4c:2e:d6:51:ce:68:80:76:ea:3e:f7:2d:
45:bf:03:89:fc:a8:69:b0:8d:1f:34:22:d7:26:67:
c9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:37:07:8E:B8:32:93:FB:E5:20:7A:0F:AA:5C:ED:51:56:BF:92:9D
X509v3 Authority Key Identifier:
keyid:8C:91:03:D1:A9:34:25:1B:B9:8B:11:F1:69:CB:8B:2B:DE:C6:A2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:53:d8:e4:c9:1d:87:52:0b:9a:0f:84:2d:55:a1:52:ea:79:
2c:34:56:06:2d:81:a0:66:c2:63:1f:9b:d7:da:03:25:37:b8:
dd:17:89:78:8f:f2:75:0d:f6:f9:4a:75:0d:43:af:cf:54:41:
cb:0d:3f:69:56:69:75:43:f0:33:bf:85:03:54:63:4e:d7:03:
2c:4a:c8:d3:a7:e7:c6:6f:50:2c:57:ee:55:a3:68:02:6e:46:
90:b0:6c:3c:08:ff:d6:cd:dd:0f:05:4e:7a:68:be:f4:9d:d5:
b8:2a:d0:8a:8f:23:13:93:aa:92:af:c1:8d:5d:71:65:22:45:
e4:33:1d:c8:d0:c9:08:40:b8:93:d8:50:30:ec:a9:dc:7d:be:
c7:93:f4:13:3c:a8:d5:60:f1:d2:28:03:6e:3a:af:8e:e8:99:
97:11:20:fa:79:33:96:6a:f8:5d:39:9c:03:2a:df:f5:a4:e4:
11:d8:ac:dc:f7:96:03:f9:12:b0:a0:86:04:89:cb:be:12:61:
6a:5b:ea:44:6b:a0:f6:0f:f1:cb:f9:a0:d2:9d:e9:18:c9:f7:
67:36:70:9d:61:4d:07:5b:93:57:19:86:f2:95:07:08:50:aa:
cd:d7:bb:57:f9:b5:36:0f:56:f2:17:76:54:69:a1:24:5f:46:
51:34:d0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:42:09 2026 by rpki-client