Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json)
Hash identifier: rdVvrFCjjfkRcRav2AAeqyGXGU63ywHIwtvTIsK91lM=
Subject key identifier: 96:92:B8:52:89:09:A5:5F:01:70:23:89:BB:0D:57:95:E5:B2:E1:14
Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Certificate serial: 019F927FC508C53F07BD385A4F96864DF9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
Manifest number: 0461
Signing time: Fri 24 Jul 2026 05:01:14 +0000
Manifest this update: Fri 24 Jul 2026 05:01:14 +0000
Manifest next update: Sat 25 Jul 2026 05:01:14 +0000
Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: nMrjp0VDwGlDv1Eq3QAB2PRik9EytRFz2wn0Xzlel+4=)
2: xqDiTE82VfBKD9rVWVzUaZpsTPI.roa (hash: 9m/z8uOFFSLz+xo2V7/xt7po1ubSIknfY+Jf0uQ8ei0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:c5:08:c5:3f:07:bd:38:5a:4f:96:86:4d:f9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Validity
Not Before: Jul 24 05:01:14 2026 GMT
Not After : Jul 25 05:01:14 2026 GMT
Subject: CN=9692b8528909a55f01702389bb0d5795e5b2e114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fa:65:46:bc:cf:15:fe:f8:3b:63:6d:65:89:
d1:16:3f:52:15:fd:f6:b8:45:c0:bb:f0:2a:06:6e:
71:3d:4f:cd:8f:24:65:70:a1:44:df:62:bd:a8:9a:
d5:06:89:68:7a:a6:3c:ed:3d:7a:70:7f:40:81:f6:
2e:f6:00:95:52:16:d7:0c:10:32:51:5a:4c:29:89:
12:f9:f8:f0:92:5e:af:75:d4:e1:58:1b:d0:b8:59:
8d:e4:96:39:53:f8:72:22:36:b8:b9:0d:18:4d:a1:
30:52:18:0b:f3:5e:8a:89:92:ad:93:24:e6:bd:cd:
c9:59:66:e0:85:9d:7b:5a:70:74:80:49:c9:82:3c:
dc:30:8c:7e:f3:fa:8e:48:e7:9f:04:85:9a:7b:e1:
b4:ae:2e:db:a6:13:73:a8:e4:1b:c4:9f:5b:c8:ee:
05:86:08:9d:db:25:d0:ff:a8:de:d3:5b:d8:94:a5:
50:bf:59:af:74:e9:31:ea:13:74:46:17:42:d8:35:
3c:49:19:94:60:46:1e:41:14:be:f5:a4:8a:08:21:
fc:5d:15:f2:55:68:82:5c:31:01:2e:b0:83:d7:8e:
6c:56:8a:a2:dd:ac:74:cd:a6:92:ad:2e:ff:1c:6e:
09:bb:c6:80:b9:3d:05:a3:5f:25:68:cb:06:1e:97:
00:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:92:B8:52:89:09:A5:5F:01:70:23:89:BB:0D:57:95:E5:B2:E1:14
X509v3 Authority Key Identifier:
keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:52:ab:6b:30:05:ab:93:97:b6:8c:1f:ed:3e:44:79:56:84:
81:a8:da:18:9c:2b:eb:3a:74:2b:cb:40:36:a8:3f:c9:fb:df:
bd:ba:ed:fe:0b:48:72:60:17:85:59:f6:a8:ff:7f:ea:79:67:
59:ae:aa:1b:a5:d7:75:2f:e3:a8:e0:e1:f3:d5:42:65:c6:26:
82:a9:3e:8b:8c:37:8f:56:59:3e:ba:d7:32:9b:f3:a0:14:03:
63:37:54:29:62:0b:9f:d7:d3:a3:c2:33:29:27:10:3b:19:cd:
68:49:04:d4:cb:ea:9a:10:9b:e4:73:1b:87:7a:52:96:c8:78:
44:90:ef:55:44:3a:19:fd:73:10:25:a3:ef:1d:7b:6e:12:12:
66:fc:7c:05:33:eb:20:d4:e1:f1:1a:c2:50:75:81:92:b1:9c:
80:19:93:14:31:8d:be:77:19:65:13:18:f3:6f:6e:df:6f:5f:
e4:b5:41:63:bc:28:ab:aa:a5:cf:dd:ab:97:95:63:dc:86:a4:
04:f7:a6:80:06:13:e3:ed:42:de:d1:06:e4:f1:83:aa:b9:35:
b4:b0:43:39:ed:ee:21:65:10:87:b3:c7:18:19:7d:a9:62:16:
aa:96:b5:69:83:95:bb:73:d6:fa:1f:6a:42:6a:41:0a:b3:32:
f4:b7:64:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:54:54 2026 by rpki-client