Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
File: jghAgExmgMQfIehybzgLleaelEc.mft (raw, json)
Hash identifier: P0iq7Q+ByMQSsXWCe6bBsBKzfC6AoFRo8hXg2MuJvAA=
Subject key identifier: 61:2B:09:86:E4:7B:08:94:37:0A:BA:A6:EE:E5:CC:60:CC:51:37:DC
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial: 019F8F4706FA9172F96BDF26BECABCCA1420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
Manifest number: 0F16
Signing time: Thu 23 Jul 2026 14:00:24 +0000
Manifest this update: Thu 23 Jul 2026 14:00:24 +0000
Manifest next update: Fri 24 Jul 2026 14:00:24 +0000
Files and hashes: 1: FcDP4t2fUN_dTrYyfxsE8QW3Eyg.roa (hash: sDQcJIThGsK9Nrdf2isebfLDyVxi7JAHTUMrXx4QKTw=)
2: cjfADLaDEFlQK8qrVJ5NipbhmYQ.roa (hash: IRslVjUODdyfex5FaSaSEKWcalRpU1+utYy+dcv1SD4=)
3: jghAgExmgMQfIehybzgLleaelEc.crl (hash: f231o5IG/HTbJamsWHbNwnLwbqi1izX5xM+M08SfX/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:06:fa:91:72:f9:6b:df:26:be:ca:bc:ca:14:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
Validity
Not Before: Jul 23 14:00:24 2026 GMT
Not After : Jul 24 14:00:24 2026 GMT
Subject: CN=612b0986e47b0894370abaa6eee5cc60cc5137dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:5f:11:dc:4d:45:39:4a:ac:eb:9d:b3:6e:
24:60:8b:10:41:90:37:54:cc:a0:9b:c1:df:0b:6d:
79:7a:bf:3d:56:ba:b4:c2:4e:d7:8f:76:70:15:58:
44:01:54:2e:01:c5:1f:43:4b:10:d8:1f:68:44:35:
32:ae:16:d2:b5:b2:09:df:d0:46:49:6d:98:ff:9a:
d0:39:0b:06:b4:eb:bb:8e:57:9b:43:8d:62:71:33:
96:2b:17:59:f3:a1:5a:6f:b1:9a:7c:62:37:67:95:
db:62:cf:3d:b4:e4:96:e8:e4:d2:ed:56:d6:64:d0:
dc:03:20:39:0e:ec:7e:97:ef:5d:a6:29:71:7d:3c:
66:77:b3:78:0b:49:92:4b:7f:0f:a5:49:f0:6b:9a:
09:5f:4b:ac:51:06:63:0f:da:bf:38:7b:81:75:64:
7b:08:2a:12:22:21:b6:66:b9:8c:f0:88:06:32:51:
b6:19:7f:60:e2:f6:df:63:e6:1e:ff:ad:56:d3:8b:
f9:19:9a:0c:13:8d:01:75:8e:c0:60:fd:61:f4:29:
96:7a:a4:c6:f2:e7:da:e6:15:b5:76:ac:47:97:13:
e9:1f:fa:ad:e8:e5:7f:15:51:40:17:a0:75:da:2d:
36:f1:43:65:38:e5:87:f6:a5:16:0b:a8:f3:10:58:
2c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2B:09:86:E4:7B:08:94:37:0A:BA:A6:EE:E5:CC:60:CC:51:37:DC
X509v3 Authority Key Identifier:
keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8e:f5:ae:10:78:3c:46:be:2b:4e:f9:37:8d:62:07:66:f0:
28:fe:a2:08:67:13:8d:e4:34:7c:b9:08:13:be:0b:49:10:e0:
eb:16:28:9f:ef:46:ea:c3:70:63:4a:28:4f:29:7f:48:19:37:
78:c4:fe:c5:50:72:ea:06:7b:71:95:ab:a4:4e:4b:05:a5:fc:
43:28:94:ff:a3:4b:7f:4a:b5:ed:a6:e0:25:fa:db:cc:18:a5:
ee:1a:48:da:43:23:ae:45:a2:a4:44:5d:10:19:66:fb:3e:f2:
a6:6f:54:e1:de:3e:16:00:85:70:2b:9d:b4:97:18:5f:8a:97:
3f:4a:2d:8d:57:69:fe:8f:d6:f8:2d:b1:bf:d8:73:9c:2b:c7:
7c:fa:54:ef:dd:68:5d:8e:b2:10:46:ba:e6:17:34:af:f4:22:
e4:ff:95:08:de:d1:11:11:65:a9:93:65:4a:47:b8:a1:2d:51:
c1:bd:1c:6e:39:57:80:c0:2d:6f:14:16:4d:dd:06:6d:2d:01:
ec:28:b6:80:1d:35:73:94:c1:0b:f9:f9:71:65:d6:ca:c2:2d:
aa:f2:98:9c:a9:03:d2:12:8f:24:21:13:88:3f:ef:b0:e1:9f:
bb:7c:cd:a4:bd:24:85:7b:eb:c1:a7:1c:0a:0e:5a:72:b4:d0:
5a:b8:14:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:00 2026 by rpki-client