Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: mxKPeuYGARyJb4xd0yJ9SEhxNmtTjsL5TOs/xn4STCc=
Subject key identifier: 48:82:FB:5D:41:D8:6F:8F:B4:9B:DB:A7:DE:BC:A3:FA:A7:40:75:35
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 019F9400042A180D04B814326B6B1F6BD6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 12:00:56 +0000
Manifest this update: Fri 24 Jul 2026 12:00:56 +0000
Manifest next update: Sat 25 Jul 2026 12:00:56 +0000
Files and hashes: 1: 2u4DW90i6pJn6TNxJSQdCJPO9PA.roa (hash: z+7kYSl922ZGHRd4ve+viSStXQUCmw3QVQ5Lgiw6cXk=)
2: 7YQffxRE0rSLQxPURshHecG_JTc.roa (hash: uQCBTYo2a3hrZABdDnP1fnClvfQjBgoT9LYi5KTntlk=)
3: AsS6Pm-pzCccfpBN7h6vWbKNH-0.roa (hash: QSEqtIt5+vLOlNNT3jvuTFm3bvcUsPaUnJycOPB71zs=)
4: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: ACuYE/E3oPLxCFnR0HomoQKiNxTHVPiR2lIuI8jrslU=)
5: tgt22Xbh2dYkc5Tjjf4Gx-Xa2eY.roa (hash: XvxWV+DKU6Gtey3JNABlz2pi2cGrZK+aZ7VTSpuGXSw=)
6: vM268rav9B38xfaLn_yfc-f5loY.roa (hash: L3My8FF3Oma4omxz1SHFdJJ/WgvkO4FPZLAe6cqle1I=)
7: wsHpLkBYw1EeftdDR6sp04VigBw.roa (hash: /kY3oNdD/MtjNpfjYxiTgX3Hn7hLZLYXv3Sx0dMMAnA=)
8: zOqpyrA-mf4nkA9uzKu6WERUh9M.roa (hash: YZ3w9TWP7euxVmL2Kl9d48zmDrmJVrnCAiOTTTRIhhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:04:2a:18:0d:04:b8:14:32:6b:6b:1f:6b:d6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Jul 24 12:00:56 2026 GMT
Not After : Jul 25 12:00:56 2026 GMT
Subject: CN=4882fb5d41d86f8fb49bdba7debca3faa7407535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:4b:2c:5c:6b:c2:1c:22:0d:34:e2:b1:b6:
bf:86:97:88:0a:95:ce:40:e2:24:d9:c5:51:0d:19:
3d:26:38:07:01:ca:3e:3b:b7:7b:69:1a:e5:42:36:
f5:27:ab:ca:8c:bd:64:b0:e5:8f:8f:8a:cd:cb:ee:
98:01:a1:e6:5b:0b:e7:38:61:54:1a:d6:62:f1:2b:
21:89:33:c1:07:f9:6d:ab:cb:7f:0a:90:12:04:01:
69:b8:09:ef:0f:ac:71:00:ad:72:bd:04:09:77:aa:
c6:9f:33:1c:eb:21:dc:fd:98:96:35:0a:c0:43:5d:
59:b6:f7:47:77:71:e3:3f:f5:20:5f:33:3c:fa:37:
60:88:aa:d6:79:e0:1b:38:ac:a0:38:26:51:1b:36:
1c:f3:75:90:11:ac:4c:df:fe:6e:f1:f2:19:34:e2:
53:32:3a:21:4a:d5:f1:89:b8:c3:48:14:a7:b6:fa:
67:b7:bb:b9:7f:02:ae:55:b7:3d:93:ab:a2:8b:57:
55:15:4c:d1:c9:9c:06:fc:3a:57:36:96:2d:12:36:
12:f9:a8:09:0e:c5:0a:83:ca:52:9f:de:c6:37:43:
8d:bf:bc:e2:03:d1:81:99:6e:7b:f1:02:b0:7f:e3:
3d:39:23:6c:31:a2:18:59:cd:4c:7d:3f:a5:17:67:
10:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:82:FB:5D:41:D8:6F:8F:B4:9B:DB:A7:DE:BC:A3:FA:A7:40:75:35
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:83:ae:ac:35:37:ff:00:5b:8c:21:c0:d2:e6:de:be:b9:5e:
5e:10:89:f3:51:c2:f6:aa:a2:b0:60:c6:46:1c:fa:91:0b:71:
9a:81:33:f8:a3:0a:5f:f7:69:4e:2e:8e:57:45:ea:bd:43:24:
d8:3d:69:88:5c:21:2e:7d:85:94:e5:2c:f6:ee:55:c6:a5:a4:
82:8c:98:78:20:75:09:fe:e3:fc:15:86:a2:34:e7:ab:7a:de:
88:ae:ef:7d:fb:87:b6:be:61:fb:e2:2e:ad:7a:a3:71:f9:9a:
8d:ef:ba:a7:00:cd:f0:86:5b:5b:f4:06:6a:b1:cc:0a:3d:b5:
44:10:4f:3e:7d:69:e4:2c:60:78:2b:93:a9:93:b0:b9:da:7e:
06:3a:7c:7b:b5:a3:dc:4a:b0:36:e4:62:4e:fc:87:d0:a5:f4:
e9:68:21:36:f9:49:14:51:2f:e4:8a:ac:1e:13:9a:ed:ce:85:
cd:24:7d:65:03:56:2c:7a:6a:0d:71:41:c2:12:8c:05:8c:ab:
e7:70:e0:97:0b:1b:55:4d:99:67:f8:bd:36:36:8e:c1:bf:61:
ae:42:22:c7:a6:01:3a:24:ee:a7:0b:f7:be:3a:17:fc:95:a9:
a0:ad:e9:4d:ec:37:3d:71:5c:27:b1:c1:5d:d6:66:61:fe:d1:
db:c8:16:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:32:53 2026 by rpki-client