Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
File: j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json)
Hash identifier: 5tO7EcoJC8WwosSUcu2+QMzigiZ73M/BKmO09unUIdA=
Subject key identifier: 19:62:3C:8B:98:EB:34:C5:CE:88:7B:D0:BE:CF:89:FA:1F:5C:A3:A1
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial: 019F954A5745FE2259FFA3D37EAE24CC62B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
Manifest number: 19DC
Signing time: Fri 24 Jul 2026 18:01:44 +0000
Manifest this update: Fri 24 Jul 2026 18:01:44 +0000
Manifest next update: Sat 25 Jul 2026 18:01:44 +0000
Files and hashes: 1: GacqQo2_yWLXH1ZsNLzHsN_ZkJg.roa (hash: 0oQogmWm+7L8vyOzeRyovxgJ33f02sYon4T+HeiS/Bg=)
2: Vbu4WFHtQs8CWjvDwWDBgOfuqwQ.roa (hash: N29scv8xguie+t9aPoJpoSulc1+RZLFrY9t5xm5Se4E=)
3: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: GdxdDpZC68e1ykSZOzKDQTK2GV6xOrlSa/9L7FNNHKY=)
4: wsaxcP_FSlrJyUqyv6RnWe5M_1k.roa (hash: 7BcGsYEeMK3lgIGyfCupRWnQz43ULZB5dbROxwaq/V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:57:45:fe:22:59:ff:a3:d3:7e:ae:24:cc:62:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Validity
Not Before: Jul 24 18:01:44 2026 GMT
Not After : Jul 25 18:01:44 2026 GMT
Subject: CN=19623c8b98eb34c5ce887bd0becf89fa1f5ca3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:68:13:15:0b:a6:18:dc:7e:d9:02:57:50:e2:
47:62:2f:32:e0:73:68:de:c8:ed:fb:57:4c:ff:6b:
73:f8:7e:3f:66:24:45:ec:12:09:c0:f9:90:e8:1b:
d8:3b:ed:04:5e:27:0a:18:1b:6a:03:5b:4f:42:56:
c3:e5:07:cf:ad:79:d9:b6:b3:87:a0:62:cb:e7:a5:
c7:c4:80:5d:b1:c7:18:b1:83:bf:a7:ff:7d:6b:73:
1d:7f:0b:f7:a5:41:9a:b3:61:27:0b:63:ef:22:b4:
bb:3b:e0:7d:4c:3e:0f:35:78:46:7d:cc:61:98:10:
41:4f:4e:dd:7d:88:cb:b9:f0:37:76:69:1e:4b:b6:
43:75:96:ab:e5:e7:b6:4c:93:29:1e:0e:b7:1a:95:
18:99:74:ac:d0:42:5e:b3:5a:25:ff:31:0c:f8:e1:
c8:f4:2a:33:1f:e7:8b:3b:f5:cd:7a:17:09:69:e9:
d6:3f:e4:f7:ee:17:84:7f:a9:bd:8b:7c:31:0c:2c:
3f:7c:ea:1e:44:7a:eb:ad:90:03:88:96:8d:fa:f3:
39:de:7b:a0:1e:75:67:ac:77:25:e6:25:83:2e:4d:
50:f9:13:02:16:1a:1d:b6:f9:f7:00:79:a4:57:0e:
89:e0:c5:99:f0:53:06:a1:65:71:b4:47:4b:42:c4:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:62:3C:8B:98:EB:34:C5:CE:88:7B:D0:BE:CF:89:FA:1F:5C:A3:A1
X509v3 Authority Key Identifier:
keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ec:b3:22:77:75:05:25:9d:56:82:17:4c:e0:bf:4d:3a:f6:
3a:38:f1:30:21:88:4f:16:88:d3:1d:ab:a8:76:d4:58:0c:cd:
a5:6a:6a:14:43:68:9e:2d:af:d8:5c:48:a3:ae:9c:a7:88:ac:
76:96:83:da:c8:d2:69:19:12:49:17:9a:04:9e:3d:58:8c:68:
31:c1:b0:e0:d9:02:31:78:7e:1f:a6:14:fa:42:bc:02:5e:b9:
2e:e1:bb:0a:16:94:53:21:ef:da:a5:f9:64:0c:dc:af:83:84:
e0:48:c7:1b:53:0d:e4:1b:75:55:37:f3:92:63:6e:a1:64:c2:
6b:7e:02:45:a5:98:8d:12:b9:64:04:ab:45:d1:78:37:8b:cd:
c6:3c:45:82:db:ea:9f:3d:55:e5:92:bf:be:91:8a:b6:39:12:
23:83:d4:9c:3a:71:f2:e2:86:56:1d:cf:55:ae:ba:8b:92:53:
21:c2:47:22:ba:c0:9a:1a:c4:03:8b:46:1d:aa:81:54:69:c2:
8a:b1:7d:56:44:a8:b5:2a:86:0f:f0:bb:84:5a:9f:3a:7d:6a:
9f:2b:e3:36:0c:aa:d3:6a:14:12:1a:a8:74:13:07:cd:2e:c4:
e9:92:72:8a:2a:6e:d5:1a:07:70:10:41:eb:10:e5:b2:2a:05:
45:5d:e2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:40 2026 by rpki-client