Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
File: jrM9OZ3Q9flhftTkcOa9ydELeiA.mft (raw, json)
Hash identifier: KhA+XC7qjW6k+a1igyMy7EBSzof0QVTzRkRppZQrsis=
Subject key identifier: EE:01:68:A2:DD:D3:FE:5C:48:12:68:35:8E:AA:AD:5F:1D:1C:8D:30
Authority key identifier: 8E:B3:3D:39:9D:D0:F5:F9:61:7E:D4:E4:70:E6:BD:C9:D1:0B:7A:20
Certificate issuer: /CN=8eb33d399dd0f5f9617ed4e470e6bdc9d10b7a20
Certificate serial: 019F935BA5DAE07257EBE1F5BAE95C324451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
Manifest number: 015A
Signing time: Fri 24 Jul 2026 09:01:24 +0000
Manifest this update: Fri 24 Jul 2026 09:01:24 +0000
Manifest next update: Sat 25 Jul 2026 09:01:24 +0000
Files and hashes: 1: _Wy5a31X0fWVI5kzqNmJQQC4UbU.roa (hash: 9Bcaw7GkeT0B0JGjnO2Z6JkUkn/KrawL89AtsYKJKU0=)
2: jrM9OZ3Q9flhftTkcOa9ydELeiA.crl (hash: YfxmMpiVyChNKcCemOUSH7IIL5+PMUm/RCpM9YMtw7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:a5:da:e0:72:57:eb:e1:f5:ba:e9:5c:32:44:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb33d399dd0f5f9617ed4e470e6bdc9d10b7a20
Validity
Not Before: Jul 24 09:01:24 2026 GMT
Not After : Jul 25 09:01:24 2026 GMT
Subject: CN=ee0168a2ddd3fe5c481268358eaaad5f1d1c8d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:0d:d7:6d:42:b8:d8:c4:1b:c8:0d:48:4e:
c7:4d:c1:91:4a:47:5d:df:55:48:f9:b3:0f:89:0a:
65:6b:60:94:29:d4:d9:d0:87:2f:33:5c:57:ea:ff:
b0:3f:20:13:dc:d0:84:80:c5:89:20:21:e9:fc:ae:
08:5b:87:26:23:d0:5c:b6:db:b1:25:1e:75:26:f7:
7e:b9:86:04:ec:ad:6b:3c:86:89:5e:2f:78:3d:90:
cb:0c:b1:01:29:47:bd:5e:26:36:89:a3:02:f6:9c:
f2:3d:57:cb:31:87:17:ed:89:1a:d3:80:e2:4c:32:
c7:bf:a1:3b:78:e0:8d:79:ed:9e:bf:8f:8e:9b:35:
ca:38:a0:8f:af:ea:a8:b5:e1:84:d4:81:d1:ed:35:
57:ce:67:90:a2:d8:59:a5:44:9d:65:a0:21:01:42:
74:89:f6:f3:bb:7f:36:f2:d0:f0:13:8e:3d:f5:47:
6e:0f:fa:3e:f9:4c:be:60:86:3f:9a:fb:1d:5d:c3:
98:81:56:d4:4a:c9:0d:53:c6:ad:88:72:05:c8:3e:
7a:b5:f1:1d:56:ab:78:9c:f1:8b:0d:be:f9:99:69:
c1:cd:0d:7c:4b:9e:8a:90:8d:98:66:4a:3a:df:46:
5d:07:d8:4a:db:b6:dd:a1:5e:d9:2b:c5:0b:35:25:
20:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:01:68:A2:DD:D3:FE:5C:48:12:68:35:8E:AA:AD:5F:1D:1C:8D:30
X509v3 Authority Key Identifier:
keyid:8E:B3:3D:39:9D:D0:F5:F9:61:7E:D4:E4:70:E6:BD:C9:D1:0B:7A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:77:71:1e:13:29:2e:e5:67:46:c1:98:cd:6a:8b:7d:3b:ef:
74:a4:9d:77:70:a3:f5:03:6e:e0:2c:c9:2f:0b:ff:c2:64:54:
25:8e:0a:ef:d8:ff:4f:25:76:2d:5d:76:a1:71:e1:10:e9:8a:
95:6b:82:de:0a:6f:56:2a:55:f6:fc:76:00:a8:ff:1f:88:46:
cf:f8:8b:25:a6:68:29:2f:4b:c6:30:3c:1d:2f:6d:d6:ae:be:
76:e9:be:00:7d:c2:f5:7f:58:c3:5f:98:f5:5b:b0:61:13:9b:
71:76:7f:04:b4:71:05:8a:40:3e:9e:cf:b7:94:88:c4:8a:3c:
19:9d:3e:ab:b0:01:b2:84:e9:af:83:7f:4d:5a:fe:f2:1a:f1:
37:b6:78:16:3b:98:49:0f:db:59:80:bb:17:0d:7a:a1:ee:d2:
c8:13:f1:15:92:21:b0:2a:0b:5f:34:f8:4e:94:ac:76:67:51:
7b:de:0c:e8:9f:85:5b:66:1c:a3:c6:93:a4:f0:c1:d7:cf:e7:
47:c8:31:34:43:42:f2:4a:06:50:d0:d1:05:25:00:4b:3a:19:
ab:13:4f:8d:68:5b:00:0c:51:a7:55:ca:6d:31:7b:99:5c:9a:
68:d3:5c:8e:45:bc:03:12:12:e6:20:d9:bf:a6:1a:cc:f8:f1:
93:56:d8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:57:23 2026 by rpki-client