Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
File: Jd40sXxTewli5M272bxnKcix2Qo.mft (raw, json)
Hash identifier: sN8arp565W/d0j8oY0k4baiYtE0dauYGHB/4G/J7Q1Y=
Subject key identifier: 70:A2:B7:15:0A:CC:4E:18:10:EF:20:26:87:20:84:82:85:ED:A8:F2
Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
Certificate issuer: /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Certificate serial: 019F92ED709F3E836E4DE11330D43FA8E071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
Manifest number: 03AC
Signing time: Fri 24 Jul 2026 07:01:02 +0000
Manifest this update: Fri 24 Jul 2026 07:01:02 +0000
Manifest next update: Sat 25 Jul 2026 07:01:02 +0000
Files and hashes: 1: Jd40sXxTewli5M272bxnKcix2Qo.crl (hash: tFRuHrblvNL87cfzgi6/VjK6sBxuAf/Y/D8ZbWq4nzw=)
2: LPtgrCTtvqxu3cjuNnJKHmVe1hU.roa (hash: BGV23TnfOPa93rWNrPOH2klHvaD0qSg8RA6zxqAnbzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:70:9f:3e:83:6e:4d:e1:13:30:d4:3f:a8:e0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Validity
Not Before: Jul 24 07:01:02 2026 GMT
Not After : Jul 25 07:01:02 2026 GMT
Subject: CN=70a2b7150acc4e1810ef20268720848285eda8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:7c:2e:d5:b1:4b:f1:65:42:b3:1b:63:a4:
f6:3e:b5:7a:6b:c2:1a:c9:d2:c8:88:ae:64:0c:d2:
34:86:4e:b8:b1:1a:8f:d4:71:e2:64:e7:ab:4d:07:
61:ca:4c:a1:f7:b5:27:38:b9:11:f3:2d:b3:c0:e4:
40:bf:1c:50:3c:d7:e1:f9:c7:24:bd:dc:3a:94:9c:
74:8c:bc:a4:04:9d:c8:5d:b6:84:16:07:f9:cd:c4:
7f:12:7a:84:17:01:be:95:17:19:61:01:69:22:57:
72:a6:fd:0e:5b:53:41:34:f4:81:0c:04:c3:47:00:
23:f2:60:01:a0:ca:11:a5:79:75:c1:a9:79:6c:54:
42:8a:e9:0a:62:0e:82:f0:24:f6:e5:68:57:ea:bd:
c1:d0:0c:bd:ac:cb:55:d9:2d:96:ff:ce:81:77:c7:
78:d0:00:1e:3c:1f:a1:2b:81:13:59:6b:61:9d:73:
29:06:c9:8d:f5:0b:19:cc:ec:28:cb:ce:f3:92:98:
bb:83:0c:df:04:7e:47:37:74:fc:06:87:bc:ad:47:
da:d6:1e:ae:2b:39:59:cd:2e:b3:62:73:5c:44:a1:
9a:98:39:79:1b:99:d5:d7:15:2d:31:a4:ef:f3:9a:
9d:6b:11:66:b9:13:ae:21:e6:41:09:c7:9e:de:82:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A2:B7:15:0A:CC:4E:18:10:EF:20:26:87:20:84:82:85:ED:A8:F2
X509v3 Authority Key Identifier:
keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c1:0c:3d:ef:8c:df:ed:d0:8e:5b:09:e3:6c:7d:1c:ed:52:
51:fd:6c:c9:2b:f9:a7:86:01:6e:1c:0f:25:6e:41:6a:ad:d4:
d9:8e:6d:19:18:3a:67:38:1d:f7:b4:51:b9:95:4e:e9:c6:26:
81:84:90:3f:f8:59:c4:00:08:ee:8a:7a:f7:61:99:48:a2:4c:
8f:74:d9:27:2d:44:c0:df:7f:09:73:85:42:0e:ec:de:56:e8:
c0:53:8d:a9:a1:f4:22:c3:f1:aa:ed:e1:a7:5e:f7:74:9d:e7:
4a:6b:ca:e1:53:f3:70:6d:4c:02:fa:3d:0e:0f:2d:12:4f:34:
ed:da:0a:32:6a:3f:42:ee:47:d0:0b:eb:c0:63:87:b4:77:7f:
63:dc:24:b7:92:2f:92:63:d2:49:34:1b:73:de:db:4e:c0:bc:
48:5b:e4:b3:13:0a:df:e5:7e:a1:69:00:1b:29:81:c1:2c:9a:
40:99:56:8f:70:68:8b:eb:d8:71:2f:15:d9:9d:ca:06:ff:c3:
2e:94:97:c7:27:ee:16:7c:20:29:5e:35:0e:1a:b2:20:0a:69:
1b:69:01:11:8e:73:98:b0:3a:db:7e:e0:a8:58:93:a6:19:fc:
ad:f1:e9:fe:b8:16:26:82:44:ab:43:10:bd:3a:d1:4f:6d:da:
79:ce:7e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:16:51 2026 by rpki-client