
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
File: JxnUEBB2de7YtizK1DUzb4GeCm0.mft (raw, json)
Hash identifier: 0Jc+ULywkWEUaXizXlL2LJyF0jUhEqm4kZ8kE68r8ck=
Subject key identifier: 7C:AF:8F:80:B3:C6:A8:6B:9A:FF:AF:C0:EF:36:EB:DC:89:11:20:52
Authority key identifier: 27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D
Certificate issuer: /CN=2719d410107675eed8b62ccad435336f819e0a6d
Certificate serial: 019F946DDBD01C3ABAF0DC05A02BC14C2916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
Manifest number: 0C08
Signing time: Fri 24 Jul 2026 14:00:55 +0000
Manifest this update: Fri 24 Jul 2026 14:00:55 +0000
Manifest next update: Sat 25 Jul 2026 14:00:55 +0000
Files and hashes: 1: JxnUEBB2de7YtizK1DUzb4GeCm0.crl (hash: s7h5qrCL7ItogkRU+WiHvJpcKXhC2NOv1kidils7yBU=)
2: topvI4u_yc05Ro-Wd1LgO-ILlDM.roa (hash: YcyOx4QELjJwJBph+m+FjlEMDtBjOHDtaRK96fGlHwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:db:d0:1c:3a:ba:f0:dc:05:a0:2b:c1:4c:29:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719d410107675eed8b62ccad435336f819e0a6d
Validity
Not Before: Jul 24 14:00:55 2026 GMT
Not After : Jul 25 14:00:55 2026 GMT
Subject: CN=7caf8f80b3c6a86b9affafc0ef36ebdc89112052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ad:a1:4b:e4:9f:24:89:07:f0:c7:6f:68:1d:
38:83:af:c3:e3:68:9b:af:50:be:02:d3:1e:da:8d:
03:d6:e5:e9:c2:57:11:93:86:f8:70:f8:4b:b6:4b:
1a:8b:27:36:85:47:cb:96:f5:fe:23:20:c3:09:44:
9b:55:7f:fc:8c:72:a3:74:27:19:bb:40:2a:26:85:
bf:fa:f4:49:46:6f:48:81:b7:7a:fd:bb:c4:c7:6b:
7b:2d:a7:bd:03:20:b1:21:16:ba:9c:c5:cd:4f:25:
bf:14:0e:bd:a6:f3:31:85:92:7c:b5:f5:eb:ae:29:
65:c4:3b:d3:94:c9:97:0c:16:74:84:a7:6d:e2:61:
46:1c:b0:03:e0:ee:0d:78:ac:8c:9d:38:72:bb:f1:
4b:48:2c:74:48:3a:c8:47:46:0e:06:b8:82:97:76:
e5:cb:e4:1f:8b:3d:22:a0:86:02:80:88:ee:0e:db:
35:a0:43:9b:97:74:0c:ea:77:0c:5f:54:f3:55:92:
fd:9f:dd:aa:fe:c8:56:34:51:01:df:a7:25:a3:c9:
b1:a2:9f:65:23:2e:e7:a3:db:45:3f:93:3b:42:fa:
5b:0b:9a:70:f4:6d:26:11:0a:23:14:52:94:9c:9a:
00:fd:9c:4a:e7:1e:a0:36:6e:53:56:9a:4f:77:e3:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AF:8F:80:B3:C6:A8:6B:9A:FF:AF:C0:EF:36:EB:DC:89:11:20:52
X509v3 Authority Key Identifier:
keyid:27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8a:1f:6a:cb:70:49:68:fb:b6:9f:6b:ab:6b:e0:b3:25:7b:
4f:05:dc:55:44:79:50:e0:ec:72:22:47:b8:1b:45:1f:9d:80:
1c:36:a5:36:d4:f0:d3:2f:96:b6:b6:24:b7:8e:fb:5c:bf:55:
98:e2:a9:ee:37:c5:51:d8:b8:b2:02:38:c1:e4:9d:fd:9c:18:
85:c3:3e:b1:0b:06:1e:65:d8:68:41:00:24:5b:34:20:03:89:
f4:87:3c:af:9c:36:cb:f7:92:01:67:76:15:0f:61:27:7f:85:
77:b1:d0:35:57:ea:bc:e3:3c:80:89:a6:13:a4:d8:63:9f:aa:
f5:3d:22:9d:42:3a:bf:9f:c6:af:69:7f:39:7f:c9:9e:64:1f:
e4:8a:e6:96:c7:74:ec:20:dd:f3:af:59:e6:77:62:97:41:9e:
f2:89:ae:4d:b3:60:55:b8:42:5d:8a:db:bd:1e:28:5f:29:80:
e0:ca:3b:04:9e:7a:9f:0d:50:cd:08:da:c3:0e:a4:fd:c6:aa:
8f:5b:4f:fe:d7:41:d6:d7:95:44:48:ed:4a:31:8f:97:ab:19:
e6:de:2f:81:85:e3:f5:96:39:20:52:c4:4c:e9:b7:34:3f:59:
6e:13:44:a4:e3:a1:2f:ac:10:6d:32:e0:21:23:f8:c8:54:df:
5b:af:ac:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:22:25 2026 by rpki-client