Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File: jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier: Ek5t/EmCyVZZ+6gwPD/uP4d9IgYywtVrarbWCWgidPg=
Subject key identifier: 4B:35:2A:D6:F2:7C:C9:71:CF:93:0D:41:6A:E8:98:95:E8:8E:08:8C
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer: /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial: 019F9436FBACB77109B7F799D01F1A41F4BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number: 123C
Signing time: Fri 24 Jul 2026 13:00:58 +0000
Manifest this update: Fri 24 Jul 2026 13:00:58 +0000
Manifest next update: Sat 25 Jul 2026 13:00:58 +0000
Files and hashes: 1: hJ4yBwRAkPSn0hZDZUYf9X3bnuA.roa (hash: SieYkKpzIy6oq5VVbN7rTFUvyMh99g+Bi6wzQEIEdkQ=)
2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: 7pTnSnE8m5q1PJ+173HTFFnfE8iSxh0iV2w5gOjwacQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:fb:ac:b7:71:09:b7:f7:99:d0:1f:1a:41:f4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Validity
Not Before: Jul 24 13:00:58 2026 GMT
Not After : Jul 25 13:00:58 2026 GMT
Subject: CN=4b352ad6f27cc971cf930d416ae89895e88e088c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:33:f4:7e:1f:72:29:ef:3e:8f:0e:3c:68:
88:00:27:75:cc:bd:fc:31:cc:91:51:b1:d6:82:5b:
ed:5b:8a:58:f2:41:8b:3e:3d:70:e0:7e:b2:ee:b7:
9d:16:7c:ba:40:ba:ad:ca:12:cb:4e:7b:eb:48:ab:
2c:e9:32:54:7f:21:93:39:43:a9:f3:7f:a7:4e:2f:
11:22:76:bc:49:2b:bf:46:b8:4f:48:37:9a:bd:34:
44:7f:25:55:2a:8a:99:16:e8:f2:3c:8e:a8:45:18:
d5:30:6c:dd:a4:88:2d:73:98:0f:59:fe:b8:69:fd:
45:24:69:41:6f:b8:fa:9f:67:e9:e8:2c:2e:ce:a6:
73:55:a3:e9:8c:75:c9:f0:d8:eb:bb:32:ee:df:66:
ab:31:e6:18:a8:e5:c6:ff:3c:1a:02:42:ea:c4:33:
f4:12:00:4b:6f:b0:a3:bd:80:af:ab:d2:af:26:9e:
f5:74:ed:b8:67:1d:97:d0:15:65:61:00:f4:bd:68:
bb:46:a0:b5:d3:d2:57:dc:7a:7a:e1:83:74:90:3f:
b9:da:0b:86:99:f9:ea:5a:66:ac:66:ec:8b:89:d5:
60:2f:6a:48:19:66:73:e5:b0:c2:b2:ac:4d:5d:71:
fc:33:00:d5:9a:d0:a6:eb:4b:d0:20:2d:f0:4c:e8:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:35:2A:D6:F2:7C:C9:71:CF:93:0D:41:6A:E8:98:95:E8:8E:08:8C
X509v3 Authority Key Identifier:
keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e0:3a:d8:3a:b5:e9:16:a7:a1:de:5f:c0:24:ba:48:bc:e7:
93:95:71:1c:0c:53:96:f6:38:be:97:e5:35:8d:c4:f0:b0:cc:
a3:e5:b0:aa:a1:56:0f:9e:c5:07:0a:70:dd:de:e0:40:cc:fc:
29:c9:a6:04:c6:eb:3e:8a:a5:24:41:37:a3:c1:b8:57:74:ee:
53:fd:01:81:74:b9:05:41:5e:cc:d8:57:c8:93:9a:3f:a2:57:
e3:7a:13:05:ac:cc:27:34:c6:42:cf:db:f0:47:74:8f:00:c1:
52:2c:ca:08:b6:a6:c1:de:c8:56:ed:6e:cf:83:c3:32:86:d3:
04:74:0c:01:27:c5:ee:10:d1:48:d6:63:30:fd:73:db:e8:e2:
58:5c:e4:dc:3e:32:ed:bf:26:76:08:2e:bf:fa:ba:fb:49:42:
b0:39:d6:77:3b:a1:3c:67:96:b0:e5:e9:fb:f4:6e:fe:93:44:
bb:1b:91:77:89:ed:f6:7d:04:2f:eb:d2:73:23:77:a9:c9:30:
04:56:0f:6d:97:e7:0f:cb:ec:bc:8f:fc:ff:7f:f4:47:9a:55:
b1:8e:df:71:ef:26:6f:2d:a4:9d:d6:00:d8:52:57:8e:31:4e:
4b:6a:c1:71:12:aa:a5:0a:f7:43:ab:b6:2d:42:ba:5b:7d:fc:
6f:48:39:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:44 2026 by rpki-client