Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json)
Hash identifier: qyh3CedaK2QTmjitBpB/kvdDKsj+qam3R3qIabOFYkY=
Subject key identifier: 1C:01:E2:5D:3F:7A:23:95:2F:34:C3:FD:F8:53:E1:00:63:22:99:A8
Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Certificate serial: 019F9059EEA8AD9A49CE60CB687FB24A6333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
Manifest number: 05AE
Signing time: Thu 23 Jul 2026 19:00:40 +0000
Manifest this update: Thu 23 Jul 2026 19:00:40 +0000
Manifest next update: Fri 24 Jul 2026 19:00:40 +0000
Files and hashes: 1: 0OEHU7Z4Xep124nqLarwZ20qYvg.roa (hash: EinNI0ZI4eyeX1yQhgmTMLlxSGZ6l01xF7uPwFE7Lv8=)
2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: FHbQVpJRfqGtpZ1yicduFJj0vuwco3K0D7YYb2E1nYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:ee:a8:ad:9a:49:ce:60:cb:68:7f:b2:4a:63:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Validity
Not Before: Jul 23 19:00:40 2026 GMT
Not After : Jul 24 19:00:40 2026 GMT
Subject: CN=1c01e25d3f7a23952f34c3fdf853e100632299a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e8:e0:2c:2b:4d:92:6c:cc:aa:46:95:6f:97:
6f:97:98:8f:9b:42:7a:8c:31:9a:7c:d0:be:85:2f:
23:1d:bd:83:99:54:9d:d4:1c:ad:81:9d:f6:3f:92:
72:ed:da:f7:09:8b:78:3e:14:40:0d:76:86:e6:1e:
dc:0d:21:a7:b0:c7:ab:11:58:1e:56:99:5d:c0:9a:
b5:5e:67:a2:44:fc:75:80:33:dc:40:61:72:ca:f8:
6f:21:8b:b3:3f:45:b8:44:71:4f:92:bc:1a:09:e5:
fc:0d:85:7a:7f:93:58:30:7f:ce:38:a9:9c:6b:d0:
ea:fc:30:ce:2f:11:e3:a4:bf:88:e2:c2:ed:a8:84:
90:79:d3:41:79:53:10:f3:ca:12:d5:55:90:25:a2:
81:49:e4:c9:80:29:a1:bb:33:a7:7a:aa:84:07:3a:
8f:96:f1:ae:3e:05:25:cd:4c:f4:81:12:02:25:cd:
15:cb:5d:de:37:6c:a3:aa:5e:cd:5e:4e:57:95:85:
c3:33:d3:00:5c:02:aa:bb:03:06:9f:10:5c:67:80:
3a:80:1e:56:1d:ec:0a:44:85:72:2e:39:22:a6:56:
f8:6f:b8:bb:84:b0:d2:a1:9c:d9:18:c5:9d:89:4c:
e3:62:ba:d7:4e:9c:c4:98:b1:f3:c4:d8:35:42:08:
70:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:01:E2:5D:3F:7A:23:95:2F:34:C3:FD:F8:53:E1:00:63:22:99:A8
X509v3 Authority Key Identifier:
keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5f:e9:f1:af:5c:06:70:bc:cc:73:ad:67:4a:16:d3:ef:21:
ee:4d:2f:d6:f8:82:c5:c9:39:d4:3d:45:b9:e3:c1:c5:84:88:
61:04:95:ff:88:63:12:98:9c:39:db:15:01:62:24:1b:bf:a3:
2f:e0:0f:35:22:86:46:6c:70:db:4e:bf:37:77:0a:ac:19:8f:
ff:dd:c6:a4:a9:5f:f2:ed:8e:cc:c7:c8:aa:ba:9a:18:60:7d:
3d:1c:2b:71:8c:25:6d:b6:f2:45:9e:4a:92:fa:b8:08:ef:98:
d1:8b:6a:08:da:45:ad:41:8e:f9:99:cf:3f:85:a3:f4:15:5a:
38:a0:f6:32:59:81:71:13:44:fb:4e:37:04:66:cb:ce:8f:70:
43:80:b8:40:06:14:6a:a8:5a:5c:40:12:3f:71:19:46:b1:d6:
00:2a:ab:b3:ec:8f:13:91:a1:43:68:3b:4f:1b:e9:9d:f5:61:
55:8a:cb:71:ef:e5:da:4e:72:7b:b0:11:a3:89:5f:0e:56:38:
47:aa:35:f5:f8:69:cd:cd:17:ab:02:93:b6:7b:a7:0c:eb:6f:
fb:0e:b1:05:57:cd:b3:f2:ec:a2:d4:bf:85:82:33:4f:63:28:
b3:16:af:55:75:22:94:18:19:6c:19:2e:cd:e3:51:79:ee:69:
ec:c2:54:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:46:46 2026 by rpki-client