Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/J00tUy6xkrSkwQbK-s0azJzigmY.mft
File: J00tUy6xkrSkwQbK-s0azJzigmY.mft (raw, json)
Hash identifier: FDCws+gGohiKJNudDVYAmxoFL3+7W7NMI7K/s7zG/i0=
Subject key identifier: 78:6F:E0:F2:A9:56:12:07:F3:50:DD:93:75:F3:4D:96:77:77:1C:87
Authority key identifier: 27:4D:2D:53:2E:B1:92:B4:A4:C1:06:CA:FA:CD:1A:CC:9C:E2:82:66
Certificate issuer: /CN=274d2d532eb192b4a4c106cafacd1acc9ce28266
Certificate serial: 019F8F7F39A5490590BFD5AB05CCE6FFD02E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J00tUy6xkrSkwQbK-s0azJzigmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/J00tUy6xkrSkwQbK-s0azJzigmY.mft
Manifest number: B0
Signing time: Thu 23 Jul 2026 15:01:47 +0000
Manifest this update: Thu 23 Jul 2026 15:01:47 +0000
Manifest next update: Fri 24 Jul 2026 15:01:47 +0000
Files and hashes: 1: J00tUy6xkrSkwQbK-s0azJzigmY.crl (hash: RMakRLk8mKw//flmc/V1MU9ioQoNUcEIZOXFNSCBMpE=)
2: WqTa0JhUlwD47GWUIjmOx-TScFM.roa (hash: IhUy25qRsqJskZ2tm1yEV5hor/VM+uGZR/a3T7YbtHc=)
3: aOYeOR8kNpGhgTGa065oNDHViOM.roa (hash: 1L5hbywEgKLH28eaUqvwqyWB43iSkzvvBeWctA6+Ewc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/J00tUy6xkrSkwQbK-s0azJzigmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/J00tUy6xkrSkwQbK-s0azJzigmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J00tUy6xkrSkwQbK-s0azJzigmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:39:a5:49:05:90:bf:d5:ab:05:cc:e6:ff:d0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d2d532eb192b4a4c106cafacd1acc9ce28266
Validity
Not Before: Jul 23 15:01:47 2026 GMT
Not After : Jul 24 15:01:47 2026 GMT
Subject: CN=786fe0f2a9561207f350dd9375f34d9677771c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:93:93:c5:8b:59:72:b5:2e:82:b3:c4:61:53:
c9:96:40:8c:fa:c8:e8:5b:57:6c:8b:d0:6e:0e:7b:
5c:46:8b:cb:23:78:43:78:8e:77:37:38:fb:a8:ad:
44:12:a4:6c:be:53:17:ba:87:dd:4f:4e:bb:7a:60:
ee:29:cb:25:38:03:72:ab:53:d3:8f:b8:5b:84:a7:
29:69:c9:dd:f4:9c:d0:d8:51:c2:fd:9c:c9:77:2c:
60:3d:2b:fe:15:22:09:f8:bb:b9:f2:ed:f8:dd:51:
1e:77:fc:6b:7d:7a:1f:ae:bd:8c:81:ad:55:57:2e:
fd:da:cc:c6:41:75:fc:09:43:ef:2c:b4:0b:b5:b8:
5e:0e:ee:9e:bb:84:05:f3:24:e7:7c:b4:80:13:15:
07:72:b1:76:91:b3:cc:b4:53:20:89:9c:a5:d0:42:
aa:f8:1c:d4:bc:e5:28:0f:ff:48:49:53:2e:64:c4:
39:6a:7f:c2:e3:8c:49:4d:d9:f1:d8:60:e3:2c:ae:
c9:c5:12:34:f1:b2:e9:e6:a9:22:af:e6:57:af:ac:
af:16:53:6e:b3:b0:3e:3a:24:e2:44:bd:1b:5e:51:
7f:e6:49:d1:dc:0f:5b:86:d3:b5:62:f4:9b:61:a4:
0b:23:ed:fd:e8:f6:84:9f:ee:db:48:f6:06:f6:54:
84:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6F:E0:F2:A9:56:12:07:F3:50:DD:93:75:F3:4D:96:77:77:1C:87
X509v3 Authority Key Identifier:
keyid:27:4D:2D:53:2E:B1:92:B4:A4:C1:06:CA:FA:CD:1A:CC:9C:E2:82:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J00tUy6xkrSkwQbK-s0azJzigmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/J00tUy6xkrSkwQbK-s0azJzigmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/J00tUy6xkrSkwQbK-s0azJzigmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:12:94:14:96:ac:3c:71:e1:b8:ff:d6:88:77:4b:e2:b5:db:
cb:05:03:d2:89:4f:22:90:fd:23:71:27:a5:fc:05:48:ca:03:
fd:32:33:94:53:0c:68:7c:67:3a:1a:0f:c0:a5:e5:bf:b5:53:
c9:09:66:bf:38:00:77:b7:e7:88:e3:ad:da:7c:d4:d5:5a:22:
8c:72:68:4f:9f:a7:e7:de:fb:97:90:b7:4f:e5:09:91:db:3e:
1d:e5:b7:59:f2:3c:46:75:81:7e:0f:d5:ba:7b:3b:0a:85:60:
6b:8b:3d:6e:d5:5e:2a:09:19:e7:4a:85:34:6a:4f:62:6d:d4:
87:d9:96:ff:7e:e2:cb:9e:bf:0d:a9:14:3a:25:0a:d0:58:cc:
aa:37:e5:08:fe:18:ee:78:fb:47:d3:5a:76:e0:9d:6d:85:f7:
5c:f5:8c:42:57:53:6f:af:36:e6:dd:3c:37:b6:08:5d:bc:94:
af:55:d3:78:af:9c:34:b9:8f:1b:f4:81:45:87:9d:22:1b:d9:
33:e1:8b:1e:8d:50:db:f1:3d:55:c3:b6:5d:73:16:ef:96:6c:
64:75:af:98:58:4a:29:a9:09:4a:08:dc:e6:9d:16:77:70:f7:
fd:a7:91:17:86:24:30:82:e1:5c:f0:43:35:39:d7:b5:2b:36:
28:a7:0a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:16:29 2026 by rpki-client