
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
File: jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json)
Hash identifier: YRoafbyQiTeNbsX2cS1UXeFQ7MbLg/f3YrBHzgk7yYM=
Subject key identifier: C4:7E:75:9F:16:85:63:B3:10:25:EB:60:48:BB:6F:06:3F:C1:A8:77
Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Certificate issuer: /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Certificate serial: 019F93C88CC161810D93595C0E5DD1C281E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
Manifest number: 187C
Signing time: Fri 24 Jul 2026 11:00:21 +0000
Manifest this update: Fri 24 Jul 2026 11:00:21 +0000
Manifest next update: Sat 25 Jul 2026 11:00:21 +0000
Files and hashes: 1: iufQHL1rrp5XzvULdBkr0SPCCu8.roa (hash: o7Un0OaNswzLrJGI0RBqiK6v18+B62LAaKhklEYedo4=)
2: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: s/op+jPioBC+oEAv6t6xNKVgNVFwk12JCDVB9I92KoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:8c:c1:61:81:0d:93:59:5c:0e:5d:d1:c2:81:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Validity
Not Before: Jul 24 11:00:21 2026 GMT
Not After : Jul 25 11:00:21 2026 GMT
Subject: CN=c47e759f168563b31025eb6048bb6f063fc1a877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:6e:9f:8f:d4:70:a3:51:0d:36:8a:34:cc:
fe:cd:33:f3:2f:ed:e1:ef:55:eb:80:30:af:6c:34:
12:6e:37:6b:58:c5:46:f4:0a:b4:39:52:ac:b8:d2:
ee:02:34:42:13:8d:c8:f9:78:3b:7c:fb:c9:c1:25:
8e:14:d7:cb:78:1b:3d:dc:5f:21:d3:3a:f6:3e:3b:
d3:df:d0:13:54:fd:5c:6b:71:d5:44:31:fe:23:b8:
de:b1:2c:9d:3a:18:75:b3:86:68:81:58:0c:3a:17:
e2:47:c5:81:65:d6:7a:8d:53:99:14:f0:e5:5c:14:
0a:0e:5f:a7:94:97:e5:20:33:07:93:db:ed:e0:e6:
ab:50:9c:87:02:23:13:b3:88:3b:66:06:9f:de:9a:
1e:b4:9f:64:a6:9e:79:7b:36:b7:70:18:b1:58:4f:
e9:f7:9f:2c:dc:b8:35:05:f9:53:42:4e:26:50:59:
36:d8:12:3e:00:f5:29:50:7f:b1:8b:22:06:2b:17:
1d:76:71:7d:d9:13:d5:02:68:0d:2f:f9:2f:d2:9c:
c3:64:e3:3e:5a:a5:2d:cf:12:8d:4c:0c:1f:77:6f:
8e:15:45:64:f3:88:a1:25:11:61:63:ec:fb:be:17:
6e:30:c8:5c:2a:9b:e0:50:70:14:32:a5:b0:d1:d5:
13:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7E:75:9F:16:85:63:B3:10:25:EB:60:48:BB:6F:06:3F:C1:A8:77
X509v3 Authority Key Identifier:
keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d2:0e:d2:58:d3:4f:f5:5a:43:24:80:7f:d8:91:c3:4c:09:
ea:ff:2b:44:65:c6:6a:97:c7:2c:5d:aa:fd:93:53:89:4d:4f:
ea:c7:a6:af:04:ba:ba:0e:6a:58:de:e9:e6:eb:3c:23:e8:13:
4b:03:46:91:1d:9b:0d:ba:88:cf:68:7a:f5:a6:d5:67:19:b4:
b0:ef:cf:15:ae:f0:97:93:85:3b:67:fd:d2:26:14:ca:ad:a5:
58:62:c3:0f:45:cf:f2:d8:a2:7c:28:ce:7d:96:b0:a5:d9:cb:
e4:dd:c4:e2:ee:44:1f:17:88:2e:1b:46:74:1c:97:48:a5:96:
3c:02:00:98:a5:7d:23:2a:c9:fa:13:8e:96:62:01:ef:74:1e:
04:f1:6b:52:3d:ca:24:68:4c:d4:dd:b6:b1:17:81:22:a7:4d:
0d:3e:99:eb:4c:cf:05:30:b0:75:0f:d0:a1:7a:1f:9f:8f:a1:
a0:2a:1d:f9:c7:1d:15:c5:e2:70:89:36:69:d5:b2:d1:d8:7e:
40:f3:57:29:0a:f5:66:f9:42:7a:c3:c4:9f:cb:5a:19:04:c7:
e7:af:36:c7:36:10:4d:7f:68:f7:a2:e6:84:24:88:47:e8:a1:
34:c8:f6:e2:6f:4d:3f:f3:89:96:07:92:1c:a7:74:31:bb:88:
15:bf:6c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:27 2026 by rpki-client