Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
File: JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft (raw, json)
Hash identifier: AN09stvC9mgrMOCxBTQrzK3rg6kH56XTHyVc+7+30C0=
Subject key identifier: 6E:E8:C5:43:A2:99:30:CF:15:B4:8B:0F:3C:B5:CB:3F:9F:74:B2:2A
Authority key identifier: 25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
Certificate issuer: /CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Certificate serial: 019F8F7E47170E2A5A1B133489E4A39FDB0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
Manifest number: 02C5
Signing time: Thu 23 Jul 2026 15:00:45 +0000
Manifest this update: Thu 23 Jul 2026 15:00:45 +0000
Manifest next update: Fri 24 Jul 2026 15:00:45 +0000
Files and hashes: 1: JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl (hash: GxBSVroRWwij8YB7a4HeDeUr5hqBWawhnpOvnlYItO4=)
2: qiGwCyjJBcCuLbWQRFWZUWX1S1g.roa (hash: LG2YMYVEJAHcK6oHUr/YjapfJDnWTxIId/aMA3zY+Vo=)
3: s6B-P6OcjXLqXPfTuRILd7z1Tz0.asa (hash: TNBDe2/jguKaH36raELbXGtaWwABRi8k+6PS1M0Kc5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:47:17:0e:2a:5a:1b:13:34:89:e4:a3:9f:db:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Validity
Not Before: Jul 23 15:00:45 2026 GMT
Not After : Jul 24 15:00:45 2026 GMT
Subject: CN=6ee8c543a29930cf15b48b0f3cb5cb3f9f74b22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e3:23:ee:6c:86:63:26:86:83:18:dc:a8:6a:
8b:3c:21:ef:81:7a:72:44:3c:68:a5:85:15:12:2f:
e5:91:df:e4:dc:76:44:37:fa:b1:b9:09:84:46:dc:
fe:58:e6:c0:53:a8:31:dd:69:ec:ea:61:85:53:76:
12:fa:d9:99:6c:18:92:72:bb:9c:f7:58:18:ff:c5:
49:22:3b:87:53:a9:c4:ab:24:64:58:ac:91:06:88:
12:ed:f7:9a:07:8c:e9:30:bf:f0:23:8a:13:21:d8:
a3:f0:e1:d8:9e:e6:e5:a0:e0:63:30:59:2d:40:ad:
2f:13:9c:7a:23:fc:1f:77:4b:df:ae:c5:a6:b9:f5:
b4:1c:16:06:e3:ec:0e:2b:e6:fd:e4:60:0d:b2:06:
95:bf:ca:d0:b7:4d:4e:ab:6a:a6:45:23:82:a3:9f:
97:fc:9f:09:c9:38:df:b7:97:89:22:21:2d:d8:52:
22:a8:ac:3c:76:98:7b:c1:bd:95:62:22:17:ff:dc:
a3:e0:08:18:18:cc:ff:0f:09:c5:28:09:36:e3:bd:
87:9c:3d:76:78:a9:d6:9a:67:70:f6:36:1b:dc:02:
a7:4a:2a:04:e7:a7:b9:5e:be:d1:88:d1:64:f1:0d:
9c:78:3a:c7:9a:0d:df:85:fd:80:be:cc:3a:a9:40:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E8:C5:43:A2:99:30:CF:15:B4:8B:0F:3C:B5:CB:3F:9F:74:B2:2A
X509v3 Authority Key Identifier:
keyid:25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d6:4c:4c:b5:3a:d8:5c:9d:12:08:6c:71:bc:db:61:52:ff:
48:0f:e2:77:8b:f4:07:d3:4a:64:6a:4f:cc:34:5e:70:20:17:
13:c2:ba:92:34:3a:25:ea:48:48:20:dd:d7:22:77:46:bf:f4:
f3:6d:00:59:4f:e9:8c:16:fa:5b:ef:ca:f5:81:81:79:9b:8e:
87:18:e4:49:e8:74:2a:c9:9e:2a:b1:2c:45:25:4c:2e:93:f0:
14:43:3e:8a:fa:44:4c:ff:77:8f:cc:53:b9:bf:a5:19:54:31:
df:d4:c3:ff:9e:ee:6c:1a:4a:30:ca:ba:87:5c:54:02:4d:8f:
87:ca:2e:93:e1:9c:7c:ee:5a:9d:de:a9:96:3b:9a:f4:39:e7:
7f:05:3f:e7:48:fd:fe:5b:b7:b0:b1:92:5a:ee:60:35:c4:f5:
7f:82:40:9d:3a:87:a4:59:36:50:18:b9:51:48:48:9c:74:d6:
71:94:ae:85:b7:09:c9:bf:85:6c:9d:ef:89:57:3e:39:31:1e:
8f:8f:1e:13:33:e5:a4:a7:5d:3b:bb:61:36:bf:96:9f:09:21:
43:cb:b4:5d:e0:f8:87:bc:6f:1c:ee:30:14:f1:e1:1c:84:eb:
cc:25:16:b6:b8:76:6f:8d:57:2c:3c:17:bb:de:0b:80:98:b0:
e4:85:93:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:24:39 2026 by rpki-client