Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: BPLbjmBhe8EzFJZKqyx+uTFUfkCEvgZ5DfGzUa3XExo=
Subject key identifier: 00:E8:41:C0:16:DC:F2:D5:96:D4:70:56:3B:D1:1D:37:D1:6D:CF:AA
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 019F8FEC535ED9841E0772F84734AE92527C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 12F5
Signing time: Thu 23 Jul 2026 17:00:57 +0000
Manifest this update: Thu 23 Jul 2026 17:00:57 +0000
Manifest next update: Fri 24 Jul 2026 17:00:57 +0000
Files and hashes: 1: GPFcG47nIYBiH_vSd-Zet9HInTY.asa (hash: HNMbYsk9UfUyN+47iHB5pyXq6stkZEZHOhwEC4uh0DQ=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: 38upNhyc0k/vElvuKT2E4z8OAtwsZciN1CZ3g1DhxM8=)
3: r_qY6TIFDc-2C46p1mCYOq9l7j4.roa (hash: eoGRneGgUw90MpEMiAODUHzFCL/oN3PFTCCGwv4cx5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:53:5e:d9:84:1e:07:72:f8:47:34:ae:92:52:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Jul 23 17:00:57 2026 GMT
Not After : Jul 24 17:00:57 2026 GMT
Subject: CN=00e841c016dcf2d596d470563bd11d37d16dcfaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f8:0f:1d:1d:a8:6f:5a:c8:fe:cf:85:6d:4b:
8d:95:b5:c5:d5:80:89:0c:84:a0:bf:cc:39:33:90:
9b:ff:b5:de:e3:eb:2a:ba:d3:97:30:4b:1d:4d:27:
b7:d7:be:7d:78:9c:b0:86:cf:ec:73:40:57:c6:c8:
d0:12:a6:6c:2b:81:40:88:72:af:2f:af:fd:ee:8f:
4d:e6:ba:55:33:26:d8:61:fa:24:99:49:34:a8:d0:
82:44:a2:92:f6:55:91:9e:7e:21:93:bd:d8:9d:52:
4f:5a:41:c5:a0:c1:02:1d:a3:1d:f7:9e:97:3f:fc:
68:f0:c9:80:50:cf:4e:7c:ae:a2:c9:10:98:37:f9:
5a:b5:38:d8:ad:48:36:85:d0:2b:80:0e:01:d8:64:
a3:ed:23:9b:f8:2b:e4:9e:ce:fb:8c:b1:6a:fe:2a:
ea:50:2b:b6:d2:48:19:24:7d:a4:56:ce:41:19:02:
e5:a3:f7:a6:ad:67:2a:b0:39:64:16:33:f1:75:8e:
91:ba:93:40:8a:bc:30:49:3b:ca:e5:43:03:26:04:
26:ac:bd:b0:f9:f8:fa:4e:40:a0:5e:fc:49:5c:6f:
cf:24:bf:3b:0f:0c:fa:40:5c:78:d6:e1:54:04:a7:
3a:eb:88:e3:fa:fc:4d:85:17:e1:23:02:78:23:e6:
2b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E8:41:C0:16:DC:F2:D5:96:D4:70:56:3B:D1:1D:37:D1:6D:CF:AA
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a0:7a:89:0f:3e:e5:bb:3e:2f:13:7c:40:1a:42:86:dd:8c:
3a:9f:b2:39:15:02:ad:e8:e0:25:03:68:36:c3:cc:fd:02:d2:
cc:5f:98:e2:f8:f8:11:57:47:64:2c:72:e6:27:83:9f:a8:58:
65:ec:e3:ad:1c:c0:d9:4d:cf:eb:21:93:4d:04:3e:59:aa:96:
21:72:5e:95:21:f4:82:ee:e8:82:eb:6b:32:35:e8:8f:3e:13:
a5:86:be:a2:0a:e6:35:0c:dc:54:a9:f8:5a:55:0f:10:44:f3:
ab:0e:75:42:f0:28:7f:a3:e4:78:d0:33:2d:86:e3:83:15:e8:
85:a7:c2:05:6d:29:33:f4:22:03:1b:fe:8d:eb:80:8b:d8:d9:
7d:1c:d8:1e:5e:d7:29:de:12:82:b9:fd:2f:b8:54:23:be:46:
f4:47:77:57:9c:90:11:a3:f7:c7:e1:d1:a2:fc:4d:9f:97:d0:
eb:aa:03:ea:55:ca:a5:d5:da:78:de:00:50:78:70:a3:d9:70:
3c:dc:60:69:bc:84:96:46:22:a8:10:e0:dd:80:3f:73:e0:ab:
48:db:58:bb:f3:21:fb:3b:f5:2f:78:34:50:7f:e4:90:c7:a7:
75:bc:0e:31:64:37:77:ff:21:2b:46:8d:ab:fc:3d:37:37:68:
ea:f4:14:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:02:57 2026 by rpki-client