Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
File: JGDLdNAZgkw0siOu1McJqFeyxgY.mft (raw, json)
Hash identifier: oDs9XYcV/BMlAJf4Htqsl4UggEfu1DZsde3+R735OY4=
Subject key identifier: CA:03:51:0D:6B:A0:D5:60:10:BD:65:7B:29:A3:AA:25:D1:8C:96:0F
Authority key identifier: 24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
Certificate issuer: /CN=2460cb74d019824c34b223aed4c709a857b2c606
Certificate serial: 019F8EA2DA298C029338B7CD31D9DBD40ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
Manifest number: 0843
Signing time: Thu 23 Jul 2026 11:01:05 +0000
Manifest this update: Thu 23 Jul 2026 11:01:05 +0000
Manifest next update: Fri 24 Jul 2026 11:01:05 +0000
Files and hashes: 1: HQKEQGzJ8V_M4AMZFBCGwcAArQQ.roa (hash: TmKJc0/C+P9Rrj+HXzJL2J/O3BBKY350jNbCd9YcASM=)
2: JGDLdNAZgkw0siOu1McJqFeyxgY.crl (hash: 6z0q67zXJOIo4INDgsAlIbvXp+VBAhcTb3vKKmMg7Wo=)
3: Velvuh1gpno0shkJ5khFZZ1M9Fs.asa (hash: UtodF06r6O5PXRmMGWwd695ZbvpBr88baOFS+6FV2hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:da:29:8c:02:93:38:b7:cd:31:d9:db:d4:0a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2460cb74d019824c34b223aed4c709a857b2c606
Validity
Not Before: Jul 23 11:01:05 2026 GMT
Not After : Jul 24 11:01:05 2026 GMT
Subject: CN=ca03510d6ba0d56010bd657b29a3aa25d18c960f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:86:2b:67:5c:d3:90:0b:a8:7d:f0:9c:42:ee:
ce:5b:64:f1:3e:90:bd:0b:3d:14:91:d4:0f:4d:2d:
cd:c4:76:25:d6:1a:dd:16:6b:12:b6:b2:b4:8b:8e:
9a:40:4f:4b:33:ca:1d:58:71:08:aa:e0:d0:7e:99:
7c:8f:36:43:d5:65:42:b6:ec:08:73:b6:07:3e:58:
58:be:04:d0:61:a2:46:9d:af:3a:70:d9:4b:bc:9e:
40:17:aa:1a:87:65:16:68:b5:05:75:03:f5:f4:c2:
00:45:7e:75:fa:91:4a:81:7b:62:07:95:4a:cf:4f:
f6:01:3b:97:62:f0:d6:13:d6:ea:51:3e:b2:d0:34:
c0:59:6e:4e:f3:81:a1:e6:2c:4d:6d:08:85:99:e5:
e0:72:7c:44:bc:7d:b8:8c:9b:23:d9:1b:54:c0:d0:
fc:a3:83:07:da:e7:0e:4e:43:ae:8b:5e:cd:5b:27:
35:ac:bc:79:50:7f:09:68:14:f2:02:5c:29:6a:61:
c3:81:a0:80:03:6b:f9:48:37:a2:46:f6:d0:8c:b5:
74:63:d6:9b:bd:3e:17:90:4f:b8:e4:fe:3b:8a:32:
59:49:39:06:5f:34:9f:3e:60:f0:14:de:d8:8c:d7:
f5:bb:ec:de:e5:8b:ae:30:06:18:51:01:0d:94:d9:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:03:51:0D:6B:A0:D5:60:10:BD:65:7B:29:A3:AA:25:D1:8C:96:0F
X509v3 Authority Key Identifier:
keyid:24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:11:a3:0a:75:65:f1:20:5e:20:eb:b3:9a:a3:59:de:3d:3e:
0e:70:dd:af:28:40:5e:4f:86:38:5b:cc:7b:e4:cc:5a:3e:f4:
1e:fc:4e:53:bd:e6:6d:b5:a4:8d:0e:c5:a8:97:70:0e:cd:f7:
86:8b:4d:50:f7:90:9c:da:08:50:c4:f0:60:c3:81:62:d5:f1:
57:fe:e3:5f:a9:52:23:c6:f2:2c:11:08:22:6f:02:4d:1e:7c:
36:64:06:24:41:12:68:9e:8e:2f:7e:3d:8d:16:71:80:ea:dd:
c8:52:7b:c9:0c:30:70:4c:d1:3b:37:0c:02:fa:7e:1e:34:b6:
8d:82:25:ef:5b:1e:c2:73:b8:1c:be:04:5f:2f:d2:a7:93:db:
54:7e:ad:bb:62:f6:38:98:68:37:c5:ad:4f:c6:dc:75:d5:46:
fc:d5:73:22:9d:06:73:6d:bb:45:5f:26:61:fe:3e:1d:cc:d7:
06:8a:cd:bb:1b:ed:35:15:6f:d9:17:d0:3d:39:4c:f1:33:7f:
cf:43:1b:71:cc:56:52:81:4b:2c:22:1d:a0:95:87:8f:e9:30:
9c:a3:92:63:b5:72:33:b2:5e:f6:19:6c:28:10:90:36:03:3d:
2d:32:af:68:40:7c:c9:72:ec:d5:0f:a2:9b:7f:70:a4:c3:12:
5c:b3:41:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:33 2026 by rpki-client