Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier: OlB+Xtpqy5KhDDsBw7w6rt+IzHo/K8JYOC+yK8fQGDk=
Subject key identifier: 5D:F3:E0:88:5E:67:43:94:82:0A:66:E3:6B:2E:33:5F:B7:9D:B9:EF
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 019F8FB501AFB5AB4FE3657438D3EDE88974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number: 071F
Signing time: Thu 23 Jul 2026 16:00:31 +0000
Manifest this update: Thu 23 Jul 2026 16:00:31 +0000
Manifest next update: Fri 24 Jul 2026 16:00:31 +0000
Files and hashes: 1: Yybkl0ZQXrY26MdD4FQ9nCbOh9c.roa (hash: xOQT8aF5alDLKyDZy7KGBBHerw/+VNesMI/Q2sx+T/E=)
2: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: 5Zf9s5WfZDd+bgu/s5iw1pG461D7/DOeKf+WS54bcgM=)
3: f6Gl5ia878MGtM32MXnrZU8aNMI.roa (hash: DY0u0e2tgwdLOC3jP4WK/B8b0MSVRVEFdP0Swwb6Kq0=)
4: s9H6P_An9Cs8KJ23K6jcUiaST5I.roa (hash: R6YBzLVPih79ie1zLN00BwSvjURpM3Xic3Nu8UvJvIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:01:af:b5:ab:4f:e3:65:74:38:d3:ed:e8:89:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Jul 23 16:00:31 2026 GMT
Not After : Jul 24 16:00:31 2026 GMT
Subject: CN=5df3e0885e674394820a66e36b2e335fb79db9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:15:e4:c8:a7:86:48:bb:68:5d:19:82:c4:
f3:e0:86:14:77:04:61:bb:b1:d4:86:7c:51:fc:9c:
0b:e4:20:9c:a6:8d:0f:0b:75:c2:88:4a:3e:39:1d:
28:16:8f:0d:77:4e:c9:f4:41:47:19:21:7c:fb:58:
b0:08:b1:bc:f1:d7:53:34:09:19:ac:65:99:a1:05:
b2:dd:67:db:95:fa:1f:d3:2a:78:49:f9:c8:80:71:
bd:b5:a2:4b:8e:b5:d5:d0:8a:ac:4f:36:3a:83:97:
16:66:22:ef:de:ce:a5:4b:d0:1a:27:a3:ec:c9:be:
1a:04:ce:36:49:7c:a5:d8:ba:6b:67:82:28:4e:f9:
26:30:85:49:0b:5d:da:41:60:be:6e:82:1d:5b:fa:
10:74:7b:c0:c6:62:37:29:fa:56:eb:4a:4f:53:af:
e7:05:82:cd:b9:31:2f:d0:3b:e3:5e:ae:35:6b:8a:
06:7c:ed:1f:79:2a:c4:a5:6c:43:ce:98:6e:66:0f:
f6:3e:0b:4d:e9:c4:df:3a:8b:b6:7b:b0:02:b3:08:
3c:1d:a6:17:a7:a5:ae:19:47:b0:86:97:44:7a:c2:
88:48:08:d6:c0:48:e5:f7:5a:c0:21:7b:ca:d1:7f:
cd:e7:0e:a1:a3:b0:24:ce:69:18:d5:4c:27:c2:5f:
dc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F3:E0:88:5E:67:43:94:82:0A:66:E3:6B:2E:33:5F:B7:9D:B9:EF
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:58:ad:21:f0:b2:8c:68:06:1f:a4:b7:a6:fd:4c:43:98:d6:
53:dc:c2:bb:f4:a3:eb:95:82:65:1f:04:6f:bf:de:9b:fc:8e:
c7:fe:5e:58:e4:90:ac:c6:82:f9:a4:bb:c5:7d:ad:54:49:a0:
81:a7:75:6b:f3:28:c9:a6:ac:99:f1:1f:3e:d2:7f:33:6d:a5:
fb:e9:2f:dc:f3:91:9a:6e:cf:38:87:ab:01:57:60:40:b9:7d:
61:1e:0f:90:7b:19:41:69:bc:5d:83:f0:d8:e4:ce:77:1e:87:
c6:64:54:c1:4f:18:bb:f0:4e:ff:fc:f6:2c:5f:2a:89:f4:49:
1e:5e:5f:d5:5b:40:e1:23:d2:82:f3:2c:39:80:34:ef:aa:f0:
c3:b9:70:20:d1:ee:99:bd:a3:23:91:5c:c8:e9:4a:b9:7b:78:
a1:7d:10:5a:87:25:85:d7:bb:81:fe:b4:d3:60:59:62:fe:b2:
95:7a:c8:13:68:44:e4:08:2b:b0:73:fd:1c:d6:6e:6c:b0:8e:
ea:1d:45:d5:a4:c5:5f:0a:1c:0a:93:92:04:7a:02:f9:c2:dc:
d5:50:08:c7:80:f1:e8:93:5d:4e:66:68:40:ab:a5:38:6f:1e:
ea:31:df:f6:29:a5:88:3b:43:b6:dd:a4:47:93:a2:c5:8b:63:
c2:89:69:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:15:52 2026 by rpki-client