Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
File: JXW4SPkMg0xwaxGDCm_-kktS4vs.mft (raw, json)
Hash identifier: f1aXwYwJfoKyR/hNkysFHXUA7b8mgAWr2IW9mT0HC8w=
Subject key identifier: 21:33:83:FD:F3:37:05:37:FE:09:72:9E:31:ED:74:E8:45:9A:71:DA
Authority key identifier: 25:75:B8:48:F9:0C:83:4C:70:6B:11:83:0A:6F:FE:92:4B:52:E2:FB
Certificate issuer: /CN=2575b848f90c834c706b11830a6ffe924b52e2fb
Certificate serial: 019F8EA2885E5B9FA241F3D771B2BD3499C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXW4SPkMg0xwaxGDCm_-kktS4vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
Manifest number: 0111
Signing time: Thu 23 Jul 2026 11:00:44 +0000
Manifest this update: Thu 23 Jul 2026 11:00:44 +0000
Manifest next update: Fri 24 Jul 2026 11:00:44 +0000
Files and hashes: 1: JXW4SPkMg0xwaxGDCm_-kktS4vs.crl (hash: 0WuiHC7A/geKXtu//D4QpTqBIVOVbLY1pGrxn6/i+Vc=)
2: YmfhrzOCM66sJPg1PKrP9NnCVoY.asa (hash: 8/+ep3l2wKMWyTuGh0aBwWhRGg0m48hSZsKNp7TkDnE=)
3: mui-sKtnNSWRSnaMqkLa51rt19o.roa (hash: BS+qRZKXjkKi+axAKoghb2DmzEDHB1JdOOcYm5gKVHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXW4SPkMg0xwaxGDCm_-kktS4vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:88:5e:5b:9f:a2:41:f3:d7:71:b2:bd:34:99:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2575b848f90c834c706b11830a6ffe924b52e2fb
Validity
Not Before: Jul 23 11:00:44 2026 GMT
Not After : Jul 24 11:00:44 2026 GMT
Subject: CN=213383fdf3370537fe09729e31ed74e8459a71da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b6:5a:e9:b4:23:bb:b8:43:fd:50:83:6f:ec:
d3:1c:56:fb:fb:5d:1a:c3:7a:fb:9e:28:72:fc:ca:
52:45:e2:51:aa:6d:6e:9c:1a:aa:0f:f5:7a:9d:bc:
d4:ba:03:6a:31:b5:8a:4c:66:04:17:01:f9:2f:f7:
d1:a5:96:2f:b5:b5:43:11:3c:b4:d5:1e:6f:fc:0e:
c6:fc:14:e3:43:b8:15:c7:18:a6:eb:22:70:c9:eb:
23:45:e5:db:4f:f0:70:ed:ef:99:c0:46:c6:be:8a:
ab:f7:cc:7e:5c:1c:f2:9b:73:ba:bf:5e:d1:08:13:
16:05:2a:e7:cf:57:4d:dc:66:d9:43:3f:bd:40:59:
8e:41:41:d1:d3:c5:b1:33:62:0d:f4:91:d8:30:bf:
ee:0d:9c:0e:19:84:4f:6b:ae:28:28:31:93:53:14:
f3:f3:26:28:cc:18:6d:16:51:cf:5d:03:07:da:e2:
9c:d2:f9:89:b0:89:f2:16:6b:ea:86:08:ac:4a:bb:
93:0d:5b:69:bc:29:b3:59:39:c5:42:dd:69:b1:6d:
69:8f:9e:87:11:b8:e7:4a:91:8a:0d:b2:38:fa:b1:
5b:23:9a:2f:ac:d3:53:11:0a:88:79:f4:4a:43:da:
a3:4e:b9:8f:18:b2:05:15:90:67:ce:a4:20:71:a5:
3d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:33:83:FD:F3:37:05:37:FE:09:72:9E:31:ED:74:E8:45:9A:71:DA
X509v3 Authority Key Identifier:
keyid:25:75:B8:48:F9:0C:83:4C:70:6B:11:83:0A:6F:FE:92:4B:52:E2:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXW4SPkMg0xwaxGDCm_-kktS4vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fd:91:69:7a:02:02:46:da:39:f8:30:38:63:48:e5:42:d7:
71:47:9f:c3:e0:37:86:ab:0d:21:e6:f2:60:9e:2e:ab:8f:87:
cb:7c:a7:92:ce:8b:3b:61:c5:27:0c:5e:53:1d:47:cf:e7:12:
f1:ff:95:ad:bf:55:74:41:5e:8f:a1:8b:00:68:22:29:ec:85:
46:c9:0d:72:65:12:d1:8a:07:9f:e4:8d:61:1c:c6:98:a9:b4:
16:d0:80:06:41:16:4e:f0:74:5e:53:17:5b:fb:bf:a4:76:db:
16:cc:6a:53:87:98:bd:32:09:2d:d6:ad:40:9a:95:33:b1:99:
ea:b6:05:8e:f2:0a:da:d9:9b:0f:87:e9:1c:82:f5:50:c2:bb:
bf:4a:ec:d8:dc:6f:d7:c0:27:9c:81:3c:0d:b1:98:a1:48:f4:
c9:72:31:a9:7b:73:26:c5:c7:63:19:cc:81:9d:a3:48:f6:22:
84:50:2c:10:eb:5a:50:0d:24:af:04:af:b4:a9:a5:0f:b6:77:
13:7e:0c:de:b8:4b:db:3e:f3:78:2b:f4:79:92:06:f8:e3:17:
86:3b:7f:8d:31:2c:e2:f3:f2:6f:ac:51:b5:c2:b1:95:0c:2d:
ca:1d:b6:6c:be:91:4f:92:4b:31:51:c2:b2:30:87:83:64:06:
3d:ef:03:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:14:16 2026 by rpki-client