Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
File: JNoGgkj2hKWuXZeclngr2iYZpmQ.mft (raw, json)
Hash identifier: 0mFeeEtzn3WVKI75i0dwzZfaP9BJ8wPV3yuivHkujFY=
Subject key identifier: CF:0D:7D:54:2B:2C:BD:F9:7C:90:02:5C:1F:EC:1A:77:BB:79:72:38
Authority key identifier: 24:DA:06:82:48:F6:84:A5:AE:5D:97:9C:96:78:2B:DA:26:19:A6:64
Certificate issuer: /CN=24da068248f684a5ae5d979c96782bda2619a664
Certificate serial: 019F913554A297106BAA1767C70B9573421D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
Manifest number: 8E
Signing time: Thu 23 Jul 2026 23:00:19 +0000
Manifest this update: Thu 23 Jul 2026 23:00:19 +0000
Manifest next update: Fri 24 Jul 2026 23:00:19 +0000
Files and hashes: 1: 4dV_FEknf2673xUudEJgMK9SaSM.roa (hash: EFpUpjcuql5pAjeM5M3YVguPsMbWl4b3xSNvyRfGxlc=)
2: 5pUb4usxoUemY0cKiAWilNYbvzU.roa (hash: FJ+d9SQFx/yVW7NXXyFNRSHBza0C2OJNmGoQVEd++aY=)
3: JNoGgkj2hKWuXZeclngr2iYZpmQ.crl (hash: XFMRuk4HpIGwKALI5PbXF02hEa9tm1hzhmSuYQP/cto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:54:a2:97:10:6b:aa:17:67:c7:0b:95:73:42:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24da068248f684a5ae5d979c96782bda2619a664
Validity
Not Before: Jul 23 23:00:19 2026 GMT
Not After : Jul 24 23:00:19 2026 GMT
Subject: CN=cf0d7d542b2cbdf97c90025c1fec1a77bb797238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:18:98:a0:59:6f:e7:18:42:46:1c:60:60:1c:
97:8f:b7:f9:7b:1d:5b:8d:05:49:4f:b6:81:af:e4:
01:26:2d:50:ee:64:06:ed:8f:bf:88:ec:9d:07:44:
a9:a5:be:d7:ba:54:9a:e9:91:59:e1:aa:00:12:42:
89:bb:63:8b:e0:de:99:35:0e:eb:37:9d:37:b9:90:
23:db:22:28:26:b1:1d:3e:33:1f:f0:ed:24:c6:59:
67:10:d0:b2:52:75:5a:da:57:b7:15:24:69:7d:2f:
5a:ca:d6:b7:b2:e0:c2:ad:53:45:a9:8d:9e:39:9a:
f2:ee:bb:d0:65:1a:bf:fb:dd:f3:be:59:cf:bd:bd:
1c:95:a2:75:0b:7d:40:77:bc:5d:5e:f9:e7:6c:af:
31:37:eb:1d:89:76:2a:77:78:63:65:5b:6d:cb:53:
e3:ca:5e:ef:0e:99:92:65:10:cc:23:2e:ca:1f:9a:
75:15:35:74:af:51:69:3a:e7:4c:bb:3b:84:7d:1a:
f5:78:43:5a:2d:39:d3:1e:93:fc:99:e0:3f:8b:56:
fe:92:fb:5f:14:7a:91:fd:f5:0a:3f:bc:e7:ce:c9:
be:a6:69:1c:0f:a5:6a:f4:85:39:2c:e4:a9:71:71:
ba:f2:db:80:f9:b6:7f:14:9e:d0:b5:19:3a:f8:bc:
a5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0D:7D:54:2B:2C:BD:F9:7C:90:02:5C:1F:EC:1A:77:BB:79:72:38
X509v3 Authority Key Identifier:
keyid:24:DA:06:82:48:F6:84:A5:AE:5D:97:9C:96:78:2B:DA:26:19:A6:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:22:ab:59:75:8b:6a:46:78:d5:32:94:6d:3c:6a:e9:ff:ad:
13:50:ff:b0:f2:40:de:e0:9b:b8:32:84:f5:71:51:ff:78:5e:
a1:e5:3e:67:1c:e2:08:af:93:eb:ca:db:0f:f8:38:31:75:5d:
b5:2d:ca:2d:4f:bd:bf:cc:ce:db:b4:22:b3:58:5c:27:6f:78:
30:4e:92:a2:9b:ae:83:fa:9f:62:b4:65:94:70:c7:6a:a6:90:
86:98:c5:a2:cf:1b:96:60:5f:42:5d:84:4e:1a:39:33:53:c7:
ca:f5:93:fe:c4:3f:a6:f7:96:a3:84:7f:c0:30:c0:c9:20:ff:
ff:fc:05:c8:14:70:be:14:99:f1:be:cc:3d:cb:3e:01:cd:a0:
9d:1c:0b:a1:63:20:2f:49:83:dd:0d:f6:07:8d:f9:38:43:b0:
c4:2f:64:67:e4:c5:db:dc:0e:9a:9d:b1:6b:11:6f:05:33:fd:
f7:38:66:22:42:c9:a8:cd:ae:7b:b8:4c:e2:12:da:92:0d:0f:
a4:a2:83:8d:91:da:a5:f8:dd:d7:26:9e:45:3d:b6:4e:c5:88:
db:4f:1d:84:3a:34:22:d8:a0:78:3a:76:22:b0:00:5b:64:f1:
28:c5:2a:46:7a:c7:f3:bd:94:d7:bf:f7:28:61:f8:e5:4a:b7:
3b:19:27:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:59:14 2026 by rpki-client