Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
File: jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json)
Hash identifier: FgqQs2cQHzS4dnDeKEl58qWwQVjuzxMoVBc1qAvG+/4=
Subject key identifier: 70:FD:99:8A:68:50:25:49:2D:47:16:DB:51:46:DE:B1:D0:3C:E4:04
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial: 019F8FEC88C195F26BD1BDF0505762A4F898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
Manifest number: 11E3
Signing time: Thu 23 Jul 2026 17:01:10 +0000
Manifest this update: Thu 23 Jul 2026 17:01:10 +0000
Manifest next update: Fri 24 Jul 2026 17:01:10 +0000
Files and hashes: 1: a8MwW9uA1QblypP4WtvHf2_buTE.roa (hash: KOPlkZDXHkxKuQQUEqNV5mrWVVkmRluPORCXFGTA7CA=)
2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: nzJiwEhw1GWyEnT7deN1VEjPnsJL37tQR+V5Espzy80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:88:c1:95:f2:6b:d1:bd:f0:50:57:62:a4:f8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
Validity
Not Before: Jul 23 17:01:10 2026 GMT
Not After : Jul 24 17:01:10 2026 GMT
Subject: CN=70fd998a685025492d4716db5146deb1d03ce404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:1f:9c:73:31:6d:a1:58:b5:9f:5d:b1:d4:
26:5a:d7:92:6c:64:29:a6:44:a4:8d:22:4f:f7:b2:
2c:84:16:70:d4:ca:b7:c0:c9:26:11:0e:45:62:6f:
96:c8:41:eb:50:df:45:d1:01:9c:df:cd:53:61:a3:
fe:e2:a4:29:4e:0a:b6:c3:0a:be:b8:ba:e2:14:33:
db:82:59:0c:02:41:01:8c:37:22:5e:03:07:dd:50:
5f:a4:c0:34:61:ee:7d:c9:3a:41:b7:35:43:57:dd:
ef:3b:0a:25:8a:57:a3:f8:6b:0e:9f:70:3a:d3:d0:
e8:c3:6a:36:12:0e:99:e9:84:26:bc:4b:4f:6c:29:
50:54:ae:34:f7:0c:ce:c3:48:bc:f2:95:6f:d8:93:
be:e1:9b:4f:1f:b7:6d:ba:dd:1e:7e:5f:a2:af:31:
aa:bd:77:3f:37:8f:3c:70:06:e6:53:ab:49:59:cb:
8b:8f:6e:dc:6d:8a:17:d4:fe:4c:bc:c7:f1:d0:ec:
97:50:30:c6:f9:f6:b5:0c:a8:6e:2e:76:34:70:94:
2a:f6:43:0b:42:df:2e:fb:ba:a0:04:d2:2a:06:a6:
85:14:70:1d:80:98:b0:4b:5f:34:6b:8f:a4:df:40:
72:40:35:77:74:ba:14:56:77:08:a6:7b:84:6a:11:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FD:99:8A:68:50:25:49:2D:47:16:DB:51:46:DE:B1:D0:3C:E4:04
X509v3 Authority Key Identifier:
keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:43:00:64:e6:9b:ac:11:3c:f3:c4:76:13:13:25:21:e3:fd:
78:9e:e7:b7:dc:ee:e8:6c:f3:f2:49:75:0b:a1:ba:63:92:d0:
ce:e0:eb:14:a8:21:95:f2:6e:d8:fd:25:9f:1d:d8:86:b8:d4:
2e:76:03:a1:40:bd:3a:ac:e2:94:52:de:76:97:ee:04:ab:55:
e2:d2:5b:c7:cf:22:b4:d8:a0:44:72:e3:4a:94:3b:4e:82:a4:
98:eb:79:fb:21:a2:82:af:6e:ed:38:fe:d3:da:4b:ff:a6:d9:
b4:37:3b:79:a5:80:0f:e1:51:e0:ea:ec:e9:55:d7:a1:e0:32:
96:98:6f:94:f1:ad:87:49:cf:a3:a8:ab:d2:00:fd:56:ab:c8:
29:0e:25:bb:69:1d:d9:b7:59:46:65:34:ae:94:53:9e:73:0e:
98:17:c1:28:19:b3:f8:f3:d4:bd:f2:ef:7f:ce:dc:fa:12:5f:
26:b5:df:0a:c8:04:dc:ee:ae:9d:1f:a8:99:b3:4b:e4:36:e6:
73:11:cb:14:d6:3e:5a:f2:38:63:d7:1d:e2:47:9e:71:d7:89:
8e:a3:9a:f7:25:d6:01:21:4b:15:55:da:54:3a:26:cb:15:74:
dd:f2:90:82:ab:de:0d:45:ec:e0:9f:bb:c2:f7:2f:e2:61:84:
48:22:22:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:54:20 2026 by rpki-client