Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
File: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft (raw, json)
Hash identifier: PqHSbkLUKrhTw3XP2Xg5NNcVY90mDsoldkpwGBTgkbw=
Subject key identifier: 7F:75:0A:B4:8A:7A:CD:83:AD:FB:E5:FC:13:3E:2B:D4:E0:79:A4:79
Authority key identifier: 24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
Certificate issuer: /CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Certificate serial: 019F93FFA8FC5DA21A2FD530EBB5CD238741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
Manifest number: 07C7
Signing time: Fri 24 Jul 2026 12:00:33 +0000
Manifest this update: Fri 24 Jul 2026 12:00:33 +0000
Manifest next update: Sat 25 Jul 2026 12:00:33 +0000
Files and hashes: 1: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl (hash: otcXsw6wrNws4iGM7I3OZwMMniGfnVdGF1mDpYCNBgo=)
2: of5fvbBOl_2ZOya6SQ0xsXlOVng.roa (hash: FlPfu4dwMoPwrHiBDoZEfb7scYNLSD/+Wl4U6dL0V+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:a8:fc:5d:a2:1a:2f:d5:30:eb:b5:cd:23:87:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Validity
Not Before: Jul 24 12:00:33 2026 GMT
Not After : Jul 25 12:00:33 2026 GMT
Subject: CN=7f750ab48a7acd83adfbe5fc133e2bd4e079a479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:fa:5e:46:03:6a:a1:3f:b2:fa:ce:81:c0:
81:ba:d3:d2:b6:47:7e:39:8e:ac:dd:b9:61:19:2a:
a7:1e:8d:98:6e:46:2b:27:86:5c:bc:a7:74:9d:97:
fa:1e:aa:7a:3f:0f:d6:24:41:ea:54:8b:eb:13:76:
43:bd:f7:cb:60:99:bd:a1:0d:4d:1a:d4:8e:8f:e6:
b6:f2:b9:f6:a7:2e:9f:42:21:50:e9:37:c9:49:91:
e3:74:62:a5:20:11:dc:4c:98:5a:d3:9b:84:cc:5e:
41:3f:03:5a:f9:fd:18:a2:db:29:c0:0c:8c:94:f9:
2b:98:53:5e:f2:ce:7f:c7:ed:9c:28:0a:32:63:22:
a5:e2:a0:d8:66:d4:1c:6b:3c:c4:96:9a:33:3e:c0:
df:a3:2c:5f:1c:0f:db:10:22:a4:c8:31:ca:03:e7:
88:18:c0:59:33:80:89:47:78:84:84:bc:d6:e8:97:
08:f0:4d:9f:d7:a7:10:a3:d1:e7:73:31:ce:7b:0c:
39:f1:15:ad:19:13:f8:79:b0:d7:0d:11:11:89:43:
af:d0:ac:67:65:3c:3a:65:43:15:08:e2:8a:43:0b:
56:ce:d7:46:a1:6c:62:36:c6:8f:ae:5a:c0:2d:ee:
6e:0b:87:fe:aa:af:fe:82:20:a3:24:81:50:2c:6e:
99:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:75:0A:B4:8A:7A:CD:83:AD:FB:E5:FC:13:3E:2B:D4:E0:79:A4:79
X509v3 Authority Key Identifier:
keyid:24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:39:a1:0e:6a:9e:b7:07:68:38:ef:d1:e4:43:c1:b0:c8:ce:
d6:a6:28:cb:f0:ad:c8:ae:57:d4:f2:88:7c:59:09:45:30:22:
1a:ea:ca:6f:43:a5:87:8e:78:f5:73:0a:75:72:fc:4f:51:eb:
cc:d7:60:09:54:05:e8:89:c8:42:6a:86:72:f3:b9:39:68:74:
b7:90:46:25:43:bc:ca:57:7d:7f:7c:ad:72:65:fa:bf:6b:02:
44:e4:ff:e8:7c:86:55:9a:4c:26:35:06:5f:01:2a:a9:e0:30:
10:6f:47:4f:f1:aa:85:80:05:2f:25:24:ce:f9:5b:a6:ac:be:
4c:8d:30:d2:ca:f2:29:f6:08:f1:cd:c7:4e:97:34:0e:c1:fe:
c5:c7:1b:f0:2a:ff:8d:5e:56:b9:e9:f2:84:85:9b:a7:1b:8c:
75:4a:82:e8:4c:96:b5:11:29:d7:e7:c3:a2:1e:87:41:8d:68:
c5:bc:2e:e1:47:69:11:90:39:cf:1f:b9:36:2e:4e:55:68:82:
65:27:c8:8b:9a:6b:cd:06:bf:2f:88:27:91:3c:84:c8:e0:a3:
02:cb:02:0e:e6:48:a7:b6:42:e5:a4:db:20:bf:fe:bb:f3:cc:
aa:13:0c:e1:7b:fb:a3:3f:7e:ab:ae:2e:a9:ef:b9:d9:e3:ce:
fa:4e:47:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:17:12 2026 by rpki-client