Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier: fN0AIzPe33N5kKdCVugJE8GZYWaKaM7Q8Qy3poDNclw=
Subject key identifier: A7:18:71:B9:DC:65:77:48:A6:0C:B3:2D:61:32:91:D0:AF:81:BF:6C
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial: 019F92ED8FBE48B34BAF1FC4EE9153AA1EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number: 1958
Signing time: Fri 24 Jul 2026 07:01:10 +0000
Manifest this update: Fri 24 Jul 2026 07:01:10 +0000
Manifest next update: Sat 25 Jul 2026 07:01:10 +0000
Files and hashes: 1: F542RKRQvPrXJffMgDoWUXOCGjM.roa (hash: i0Pd1YsF/0CZkMewWg+RkQERNB+Z6enGZOfMb6J8Sd0=)
2: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: I81kay5iQdjmyIOqFsifwK5yaFgg7MDQUpHslCff8L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:8f:be:48:b3:4b:af:1f:c4:ee:91:53:aa:1e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Validity
Not Before: Jul 24 07:01:10 2026 GMT
Not After : Jul 25 07:01:10 2026 GMT
Subject: CN=a71871b9dc657748a60cb32d613291d0af81bf6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:b7:d7:cc:69:b1:78:f8:cc:b1:86:e4:64:
9d:63:83:d1:f7:c3:fc:dc:9d:92:cc:62:47:3f:3a:
3d:a3:60:8d:f7:15:e6:5e:95:b9:d7:f3:01:8f:ad:
59:a6:89:92:14:f9:6f:d8:ee:56:32:60:bd:c4:a4:
b0:19:e7:0d:5a:cc:a7:a7:00:a7:8e:25:8e:5f:a6:
20:a1:b2:b1:3c:b8:27:64:2c:80:16:62:1d:99:a7:
18:0a:20:d7:20:65:42:7f:af:9b:ec:03:43:8a:91:
db:68:27:3e:39:82:8a:58:43:ea:4b:52:a7:2e:bf:
8f:d6:47:57:45:f8:08:3a:2c:1e:71:e9:5d:05:fe:
b0:66:5b:fd:63:41:9f:58:3b:8b:68:e7:8b:36:46:
dd:9e:18:43:40:d8:4f:12:de:8d:91:95:92:f4:39:
2a:a6:06:ca:05:bb:4a:c9:29:08:6d:93:0f:41:63:
b2:a1:6b:b5:b0:ee:ec:56:2a:91:a9:88:ff:c7:81:
7e:c1:3c:0f:4b:21:7b:d6:e7:66:ea:21:88:2e:12:
7e:f9:60:b0:1c:29:89:c1:2e:22:a1:4d:23:02:49:
e5:a6:cd:e6:fe:93:ba:dd:2c:55:f2:5f:d0:f8:e8:
fd:c0:40:b4:14:81:58:c3:ed:ef:6e:0b:04:d9:ce:
b2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:18:71:B9:DC:65:77:48:A6:0C:B3:2D:61:32:91:D0:AF:81:BF:6C
X509v3 Authority Key Identifier:
keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0d:5e:81:66:4c:c2:c5:bc:47:c1:47:7d:81:ba:be:a4:98:
81:42:ff:da:46:a4:d2:24:1d:9f:26:2f:a4:90:b6:b3:b2:a4:
66:f4:3c:4e:c6:21:e4:e0:ba:41:8a:36:e8:fb:84:b2:b8:8b:
1e:51:42:2c:7b:4a:40:9a:1e:30:fb:73:c6:bf:56:d9:e4:78:
a5:b1:fd:ae:1e:4c:1e:0d:d5:42:83:96:40:41:83:77:70:30:
82:db:67:b2:95:46:8d:a8:7c:ae:1d:b7:03:f0:77:7b:96:d6:
ba:0d:c6:f6:16:5c:f0:0d:1d:d7:a9:49:f1:56:af:d7:12:8b:
77:1e:89:a1:ad:28:71:2b:03:8e:99:25:82:ab:08:7f:9c:b2:
58:43:14:26:39:71:ce:71:cd:e2:7f:be:e3:1b:eb:59:ad:10:
1a:4e:a2:79:dc:bc:ee:b9:44:20:57:9f:55:50:03:d2:ee:0c:
5f:cd:80:34:83:89:db:b0:58:b3:36:28:0a:2d:f6:8e:18:c8:
ff:15:91:b8:88:96:3b:0c:04:8f:6e:63:a0:33:6f:c9:13:3f:
e1:01:50:10:27:53:e5:93:57:34:59:b8:c8:50:a3:9a:55:ca:
75:66:78:c2:8e:6c:0f:4c:a3:e1:63:e2:7c:36:6e:ab:3b:5b:
2f:54:37:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:17:20 2026 by rpki-client