Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
File: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json)
Hash identifier: eiWcqijDmY6499hCFncZRXL6OJfr8rqQKEU5RYVasEU=
Subject key identifier: 2F:60:CC:BF:0C:4A:D4:EA:32:44:E7:18:2F:B5:44:4A:FC:85:0D:15
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial: 019F8E6BB400C2476E3C2C5D7E79BDB12C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
Manifest number: 0777
Signing time: Thu 23 Jul 2026 10:00:50 +0000
Manifest this update: Thu 23 Jul 2026 10:00:50 +0000
Manifest next update: Fri 24 Jul 2026 10:00:50 +0000
Files and hashes: 1: D84NfmvTfMKexslgZq5Al71ZBj4.asa (hash: davxVJx5jjzmjZdeUnCwP1bBkhZiVGk6m71g+mvRQkY=)
2: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: O65c6FAWSW5JON+X/VEi7eEQsiCLj4phIA0/V/TsGC0=)
3: meKxmSPWJkmnmg1z5dLKFL5i-Mc.roa (hash: Q8KapP0PEq8gKVruzhqRWI535qerZlKc/L3zbz6PK8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:b4:00:c2:47:6e:3c:2c:5d:7e:79:bd:b1:2c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Validity
Not Before: Jul 23 10:00:50 2026 GMT
Not After : Jul 24 10:00:50 2026 GMT
Subject: CN=2f60ccbf0c4ad4ea3244e7182fb5444afc850d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:d1:2a:59:97:17:46:e4:aa:1f:c4:b5:ec:
3e:49:e9:65:2a:d2:4d:6a:67:01:41:34:69:64:c5:
42:db:b4:39:ae:90:51:7b:20:0a:fb:c9:58:66:89:
2b:a5:cd:9a:46:7b:45:ec:5f:92:33:87:52:60:74:
48:49:11:d0:2c:05:71:9d:b9:51:52:3f:a9:af:a2:
d0:6d:62:36:af:13:cf:ac:ce:15:05:b2:e9:80:c2:
9a:c4:79:91:81:be:1f:b4:3b:b2:cf:49:b7:81:77:
c4:d9:ac:18:39:96:03:91:f7:89:f8:d7:9a:dd:96:
f9:bb:3f:ba:76:94:e5:9c:91:d1:6e:c9:c2:b7:25:
7c:67:c5:75:fa:86:b8:7d:de:4c:fd:b9:94:ed:4f:
1d:1d:8a:2c:33:76:bd:1d:3d:a1:b1:c7:c1:36:5b:
e5:76:a0:5f:0f:ef:a6:af:b4:d1:53:20:ad:9f:27:
22:3e:33:34:6f:07:ea:93:f3:06:f7:20:16:7b:b8:
f1:17:43:0d:d8:08:37:50:71:bb:ac:4d:33:b0:c0:
55:76:f3:41:5c:42:88:50:50:15:fc:2d:ec:6a:c0:
2d:26:e5:9a:0e:b3:ac:52:c4:31:27:a9:a5:48:59:
f2:37:d7:3d:71:ce:b4:a1:09:97:db:52:dd:5a:f1:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:60:CC:BF:0C:4A:D4:EA:32:44:E7:18:2F:B5:44:4A:FC:85:0D:15
X509v3 Authority Key Identifier:
keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:40:61:75:8a:cf:81:31:ba:b1:b0:f8:b0:88:59:bb:34:f2:
1f:51:5f:48:f8:8b:1e:3c:17:6e:f0:44:54:1f:93:05:87:ba:
fa:24:96:70:19:20:a3:46:b4:11:b6:17:aa:99:53:4f:d3:c4:
a0:71:0d:8b:70:a5:3c:0d:8f:a6:36:60:1c:cd:17:78:2f:48:
70:0b:d4:85:3e:12:03:8f:6b:d8:3a:96:03:5e:04:1e:b4:fd:
21:38:86:d8:2f:4c:49:81:06:dd:f5:ed:b0:32:30:82:02:74:
62:58:7a:f9:aa:8a:ce:a8:7d:8a:89:c2:4a:84:67:85:6c:42:
da:48:a7:57:a9:0f:4b:48:02:cb:57:ff:25:27:df:aa:dd:d0:
c3:b1:25:f8:5e:3f:88:5d:9f:b8:d9:e1:92:f9:a7:d6:02:02:
35:c8:42:3e:0e:5f:75:3e:44:d7:32:e3:1d:9b:88:16:7d:77:
13:c5:ad:0b:ce:4f:40:e4:23:56:ef:65:6f:89:17:ef:06:42:
b4:27:d4:48:cf:c6:fd:00:b7:5d:ec:0c:92:15:f3:cc:f9:89:
23:5f:81:c0:1d:2a:0b:1e:c1:18:91:af:20:6a:09:c4:74:f2:
c4:a3:84:a1:83:c3:93:65:21:dc:9e:d9:70:68:d7:56:71:9e:
2b:33:b5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:21:54 2026 by rpki-client