Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: B9hebzoypv0h1empZPrVxWgTdShh7LjOmix68HOXH5o=
Subject key identifier: 22:D4:10:8E:94:1E:AA:76:30:10:28:ED:F1:81:11:00:A1:15:EC:08
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 019F8FEBC826AC075EEEC9C016A5EF6C706D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 1826
Signing time: Thu 23 Jul 2026 17:00:21 +0000
Manifest this update: Thu 23 Jul 2026 17:00:21 +0000
Manifest next update: Fri 24 Jul 2026 17:00:21 +0000
Files and hashes: 1: 8pRpGLC7ufdVgfYDDUF6Zet2ESs.roa (hash: N6b81cttyVRNjS1aPTuek9kLwNALHCKPqaI95N5VpXM=)
2: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: 0v61JYt3b1tjpLsrVgMYIfMx4oiZK0/XHi1SuVDAnw8=)
3: iLJXM2riD2xLyWPgVHhFPJznv3A.roa (hash: htQVMbTQl+9gmW8aaJPtyq2ErZGw3e/ACgLnMofyCY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:c8:26:ac:07:5e:ee:c9:c0:16:a5:ef:6c:70:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Jul 23 17:00:21 2026 GMT
Not After : Jul 24 17:00:21 2026 GMT
Subject: CN=22d4108e941eaa76301028edf1811100a115ec08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:2b:17:93:74:5f:f9:18:ab:f8:b6:25:1a:
11:c5:48:7b:8b:5e:02:80:4f:96:cb:74:1d:0e:38:
91:92:1f:c9:3e:3e:f8:2a:b0:56:ca:4a:2c:c9:33:
64:c8:5b:82:5c:9c:c0:94:b5:f3:3f:a3:18:e4:47:
77:f3:cc:65:5e:34:08:0e:35:b0:a5:11:88:9b:9c:
ba:f0:df:6b:37:d1:dd:ce:23:0c:8e:df:71:4c:5e:
fd:b5:3b:0e:6b:26:e1:f0:cd:1e:99:a5:39:be:b3:
f9:12:f5:07:87:3b:41:4d:36:e3:30:82:ab:63:d3:
44:62:4b:0d:97:94:c8:06:0d:b0:9a:a0:3a:3d:34:
bb:64:90:b5:ae:7b:dc:2b:84:ac:54:14:ad:24:78:
57:25:dc:d4:c7:a9:bb:32:83:9e:4d:4a:3a:a1:9e:
be:04:5e:4c:4e:61:dc:7b:5d:a6:f1:79:33:ff:35:
91:cb:f3:23:cd:7f:63:86:28:b0:48:2d:60:09:29:
e4:ac:6a:87:14:14:9f:ed:ba:16:7d:c3:6f:fd:99:
8e:75:2b:19:ae:16:2f:dc:3e:dc:dd:37:10:3e:f4:
b7:0b:6b:79:60:aa:14:76:b0:02:bb:f2:cb:d1:a3:
36:c8:f8:93:11:63:ef:32:04:23:41:0f:9a:74:c8:
56:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D4:10:8E:94:1E:AA:76:30:10:28:ED:F1:81:11:00:A1:15:EC:08
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:79:84:08:80:a4:7a:9b:b3:94:17:8b:5a:a0:15:d8:58:60:
08:0b:8f:29:7f:49:5a:d1:98:fb:6a:c6:d2:55:1c:16:09:12:
83:73:e4:d4:c6:16:d2:8d:9a:71:34:f2:f8:0e:66:9b:04:a4:
50:81:ab:6f:e7:67:7d:84:99:e4:a0:49:4d:fb:c7:1b:60:4b:
c6:27:d8:09:44:1c:6c:98:9d:fb:c2:b3:2e:c3:a3:08:c7:a3:
20:20:44:8f:df:79:1d:ed:46:27:74:28:6a:8a:98:7d:9c:cd:
9e:1a:c7:29:66:b6:1c:4b:d2:48:8d:6b:82:1f:d6:93:61:88:
f8:55:42:39:64:25:0c:66:98:b1:74:ab:4e:dd:72:af:c4:ba:
fd:f0:2c:66:8d:f7:72:b6:73:7c:93:a8:d7:62:7d:15:74:29:
71:93:30:07:c9:74:50:27:48:44:56:ec:e0:db:0c:0a:66:7b:
02:3b:e3:d6:54:58:69:a1:f2:55:24:ef:82:33:65:3f:d7:1b:
0d:a9:79:a4:7f:ed:47:4e:dc:ed:64:79:e1:ba:ff:c4:73:fe:
e2:1b:73:2f:d4:17:7a:75:3c:04:4a:af:0d:27:e0:3f:2f:28:
d9:67:b1:64:72:38:7a:3c:16:c6:f5:e6:78:df:ed:36:1c:ad:
36:0a:ae:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:08:17 2026 by rpki-client