Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
File: JHQF6c7jnXGUTV4xSesBth-a2x4.mft (raw, json)
Hash identifier: zkwEH/Jy42qeEGrZRG9ZPE85meKUX9bM5HnIYd3sYy0=
Subject key identifier: 6D:29:68:AA:A8:1F:04:C6:B1:6A:A7:08:7D:4A:84:9D:31:9A:B8:17
Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Certificate serial: 019F8FEBDAC025338FDD670B6A5B960A80A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
Manifest number: 14D4
Signing time: Thu 23 Jul 2026 17:00:26 +0000
Manifest this update: Thu 23 Jul 2026 17:00:26 +0000
Manifest next update: Fri 24 Jul 2026 17:00:26 +0000
Files and hashes: 1: JHQF6c7jnXGUTV4xSesBth-a2x4.crl (hash: cd8cg0rhjyWjirvFPa914o5R5e6+8GgbK/sJnXtDifs=)
2: RHgj94s99yLOm8jJoah9M5rvNqY.roa (hash: 52fyve7WO1cwkbeeuvWUD7YyeD7rPI2Crc9dE/2ZkFM=)
3: U21ti5u9tXvNdQFp3b5VZCzrIFE.roa (hash: fztCV91rHBkTL6GqWa8LhQ3FxdBM1myni6wPf7YIs8o=)
4: Udssf4fE6o3QNpke-lB6PuA0Uo0.roa (hash: 9+ibfBkyOgj0hAuo5PA4Hd1TB41jIqZV5+PkUc7DWA8=)
5: w9ftw_Gavjo8Af6ZR10zP1F-XZk.roa (hash: k8S+JttR7Cx81nDmHA27QOl3Yh5ps44szsLBno0rSVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:da:c0:25:33:8f:dd:67:0b:6a:5b:96:0a:80:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Validity
Not Before: Jul 23 17:00:26 2026 GMT
Not After : Jul 24 17:00:26 2026 GMT
Subject: CN=6d2968aaa81f04c6b16aa7087d4a849d319ab817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:a3:43:28:fe:e3:37:fe:ca:1a:88:0d:8c:
08:ea:d0:e1:85:f3:b6:2d:f6:30:bb:d5:ea:26:fa:
37:95:05:d7:f6:19:ce:68:a4:8a:28:7a:d6:cc:3c:
74:c4:90:33:c0:0c:cf:43:0a:a5:aa:d4:ec:33:35:
e2:81:93:5e:8b:e7:21:59:e0:68:90:50:df:d7:67:
2b:fe:18:7d:73:d2:85:43:d2:ef:50:29:e0:02:77:
fd:09:0f:ea:a5:2a:31:6d:63:fd:35:78:89:d6:fe:
20:e2:00:88:10:84:57:76:30:f0:73:cf:18:b5:ef:
4b:08:92:be:dc:4c:38:ed:86:07:c4:93:29:fe:d6:
ab:ba:99:68:44:9a:28:13:d5:20:f0:7f:da:16:60:
b0:e1:3b:21:75:cf:9d:e9:f0:a4:f8:17:8c:06:97:
43:cf:b0:88:61:08:a1:dd:46:3f:67:08:62:78:4d:
fa:c0:7e:80:cd:62:7d:d2:bf:4b:bb:13:ab:b6:02:
63:f0:c0:1f:84:a5:19:47:8a:c4:ae:55:ed:b1:ad:
3d:40:f8:27:d6:80:cb:51:6c:91:74:8e:4d:78:3e:
72:62:da:a8:63:bb:72:2b:a3:9c:1f:12:1a:b1:65:
84:c9:74:33:33:d3:20:43:0a:e8:a7:72:b8:94:0e:
d6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:29:68:AA:A8:1F:04:C6:B1:6A:A7:08:7D:4A:84:9D:31:9A:B8:17
X509v3 Authority Key Identifier:
keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4a:e0:b7:11:10:2d:11:56:c2:69:0b:60:48:2e:a2:cf:7f:
b3:7c:20:b0:14:9f:f6:a7:89:b6:81:40:5e:a0:e2:6c:1a:13:
b1:19:dc:4d:69:18:dc:b5:31:b7:0d:56:26:40:c0:bb:82:2c:
99:4c:82:16:d9:f0:0e:7f:dd:1e:a7:37:44:6e:74:60:4f:d6:
ae:45:c1:06:3f:e3:da:66:3a:9a:7b:70:62:05:f5:36:cc:fa:
df:fa:77:b3:4c:1c:b9:88:b2:8e:32:64:70:d2:79:ba:b4:eb:
ce:9f:d5:c7:3a:b5:5f:f4:88:19:fe:b4:d1:3f:38:70:e2:9e:
03:0b:01:f4:26:da:b0:c5:be:78:38:a4:69:6c:dc:59:ad:66:
2c:e1:89:bf:53:92:f7:89:06:c5:c3:a4:05:bf:aa:86:ad:cc:
ba:38:22:d3:30:d5:2e:3c:46:f7:c1:28:53:df:1b:e9:93:dc:
a6:3a:cc:ca:f6:22:ee:fe:81:de:e4:9a:00:7b:c4:bb:b9:05:
42:97:c3:00:b8:d2:7b:e3:64:4a:8f:71:c6:58:cc:2d:a1:fb:
21:9e:56:90:c8:fd:0c:6d:48:71:74:6f:ef:79:69:af:f1:be:
0a:6e:f2:3a:57:9b:92:94:37:c2:3b:80:c3:e3:b4:30:e4:05:
4e:a8:42:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:37:38 2026 by rpki-client