Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
File: jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft (raw, json)
Hash identifier: E0hknr2zN+sYxP0Y9bWuhkSN3WxPH6V0Ek2DzkQkl3M=
Subject key identifier: 74:FE:A7:69:52:F3:72:29:03:B1:4D:D8:BA:25:F9:9E:C6:65:4E:0C
Authority key identifier: 8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
Certificate issuer: /CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Certificate serial: 019F902358C9A61A2F2468F102877679C7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
Manifest number: 0CC4
Signing time: Thu 23 Jul 2026 18:01:03 +0000
Manifest this update: Thu 23 Jul 2026 18:01:03 +0000
Manifest next update: Fri 24 Jul 2026 18:01:03 +0000
Files and hashes: 1: jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl (hash: JhsfuurEr9CqpoJOyM5ebBzhf44L8UPmp90aIvWmT6s=)
2: vYeEeP2BYg3wov6kmHaUntK3OIk.roa (hash: yw5p+XA00nIuvBOAOI3UKRghRlhEivp+pyeNJ4lVYRg=)
3: xbvLEl-bI1ZciTrjNpTpBkbZl5w.roa (hash: sRB5VYXPyhewd7A0bgkSSR8jyDORVWSWKW7icOY0Uro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:58:c9:a6:1a:2f:24:68:f1:02:87:76:79:c7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Validity
Not Before: Jul 23 18:01:03 2026 GMT
Not After : Jul 24 18:01:03 2026 GMT
Subject: CN=74fea76952f3722903b14dd8ba25f99ec6654e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:e6:be:d1:fd:2b:bc:e6:bb:de:ac:48:ec:
0f:93:19:32:ff:8a:f0:81:89:72:fa:9a:83:33:96:
3b:59:56:47:47:dc:b9:6f:06:7b:fe:61:7c:c6:ef:
1a:8e:fb:1f:c8:1a:20:d8:86:e3:f7:21:32:c2:24:
23:9f:09:6a:c1:97:47:19:fa:82:97:80:bc:ed:33:
f7:84:e6:dc:0a:77:04:3c:64:16:a9:a9:24:a5:5c:
60:5f:9e:27:6d:a4:d2:93:b1:e2:54:fa:c4:fb:5f:
f6:ef:a1:e9:ce:a5:b2:72:47:07:f2:b3:b9:fe:02:
8e:28:62:7d:68:dc:7e:d8:48:45:5f:5c:cc:51:a3:
91:5e:f7:0b:1e:56:7e:ea:b1:fe:97:87:29:c3:2a:
d5:f6:ab:80:30:4f:95:90:ab:8c:f8:6a:df:4b:10:
b5:08:00:8d:a2:f8:ed:e4:d2:0e:86:07:8f:4e:39:
a9:e0:6d:d4:a0:11:c9:f3:65:d8:82:cb:f4:56:10:
35:8c:2d:5e:a6:df:21:bf:f7:f3:5e:f1:83:fc:3c:
d9:f6:23:40:fc:99:3a:65:af:72:15:6d:bb:87:70:
05:1e:6d:cf:c6:37:7a:3b:6d:04:3b:9f:fa:d1:04:
f3:1a:b8:19:cd:92:d1:cb:df:85:a9:c5:02:f4:b9:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FE:A7:69:52:F3:72:29:03:B1:4D:D8:BA:25:F9:9E:C6:65:4E:0C
X509v3 Authority Key Identifier:
keyid:8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:63:06:9c:f3:27:bb:ed:ef:3c:54:85:f5:e0:af:cb:ce:63:
b4:0d:d2:30:ed:ba:c8:fd:44:6d:da:2a:f1:2b:5b:23:cf:f7:
50:45:61:2e:2e:75:22:87:b0:68:cb:ae:32:e5:3d:fa:54:bd:
68:c6:45:c1:45:26:8a:b9:4c:8c:92:f4:e2:63:aa:bc:8f:ae:
11:67:d8:0d:c1:85:8e:91:12:6d:c4:91:6f:c7:dc:f6:60:df:
7e:5e:ee:60:5a:00:16:d1:ea:1a:2b:64:de:ab:43:3b:5a:cf:
cc:44:06:ef:5e:b7:b9:a1:bf:f0:39:c4:53:b5:d5:8b:45:f9:
a5:79:bb:ee:20:86:28:b6:9b:c1:9f:9a:ab:41:42:ca:48:1e:
65:91:cc:80:74:b2:4b:93:0a:3f:f9:c5:c9:ee:51:7e:59:e4:
20:42:71:0f:dd:e0:e8:c2:0a:52:68:76:68:84:8f:39:a6:d7:
59:66:d7:c7:78:33:18:83:81:f0:9c:93:33:a3:37:c9:92:94:
6c:11:fc:83:ad:1c:e7:1b:73:ea:58:af:68:9d:7b:62:2a:0d:
53:95:34:a6:65:26:bd:6e:f6:f4:9e:30:c1:f2:4a:98:00:1c:
75:3f:4d:9e:6d:fd:a5:41:8d:bd:a3:43:f6:31:f0:9f:e8:1a:
40:1b:5f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:58:38 2026 by rpki-client