Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json)
Hash identifier: 99GVdYDwqaX8GW/ocCHwtgVNQUTXkXrW4/6rPwlBoCU=
Subject key identifier: 73:30:D8:26:CF:4B:59:8B:17:0B:F7:DF:26:C3:70:20:35:B4:D4:55
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial: 019F95B7E76ADA65182DC91207D433953A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
Manifest number: 0EF9
Signing time: Fri 24 Jul 2026 20:01:25 +0000
Manifest this update: Fri 24 Jul 2026 20:01:25 +0000
Manifest next update: Sat 25 Jul 2026 20:01:25 +0000
Files and hashes: 1: L_9BG5xd7E-WvM8wNKg3JhMyHn0.roa (hash: fYhGLFm7hYXm5Z24lpdXxQv/bqEknOrei0vZwgl2Blk=)
2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: K6imz6Ui007tiH4P++IPCrDM0yk6ZjL+PGSvWpB0AHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:e7:6a:da:65:18:2d:c9:12:07:d4:33:95:3a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Validity
Not Before: Jul 24 20:01:25 2026 GMT
Not After : Jul 25 20:01:25 2026 GMT
Subject: CN=7330d826cf4b598b170bf7df26c3702035b4d455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:35:08:38:50:38:34:ca:18:f8:fe:fa:37:
8c:6d:24:ac:95:09:c7:86:a0:33:92:e2:86:c2:87:
55:f6:dc:2e:82:47:5f:f7:0a:db:df:93:24:7a:a8:
a5:8f:8b:36:6f:a4:51:79:ca:ab:c4:ed:4c:cd:3a:
8d:cf:96:c0:71:de:6e:ac:2b:d1:6f:03:f6:26:d0:
2e:29:33:5a:b8:14:ed:ad:1d:79:cb:ae:5e:ab:80:
66:9b:f7:11:ee:fc:f0:c1:e1:3c:c1:ad:a3:61:76:
93:a9:b9:46:5f:03:56:a1:29:0c:b9:06:f9:e8:cb:
a3:2c:f1:df:f5:7c:42:50:0f:ff:49:98:a7:23:c0:
60:ea:d4:65:b3:75:53:8b:67:96:93:bf:04:46:93:
ee:e7:75:58:5a:9a:69:d8:a0:aa:8d:66:66:a9:dd:
c6:81:17:f9:73:bb:54:21:53:b8:8b:86:5f:bf:57:
71:8f:39:27:4b:44:ef:13:aa:fa:a9:6c:13:52:21:
f6:fa:5d:57:46:f5:67:ad:e4:6b:90:7a:d1:3d:27:
a4:f5:da:6c:63:e8:fd:93:94:51:36:66:85:fc:33:
ad:d7:78:3b:25:13:c4:4f:2d:32:2f:7c:29:0d:35:
74:ef:2c:83:c1:47:18:e6:cb:79:18:a9:e7:94:6b:
34:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:30:D8:26:CF:4B:59:8B:17:0B:F7:DF:26:C3:70:20:35:B4:D4:55
X509v3 Authority Key Identifier:
keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:22:3b:c8:cc:50:e4:93:8d:b8:d2:b8:a7:02:f8:ff:86:97:
50:ef:5f:19:fb:3d:af:bd:ad:6e:0c:c9:37:6a:18:46:0c:58:
ad:06:f2:dd:93:69:fb:0d:4e:f0:17:f8:3c:b7:1b:67:ed:68:
a8:4e:25:90:00:4f:b2:66:78:54:cc:c2:23:60:81:c2:14:6f:
c6:f2:4d:19:37:90:01:10:0c:0c:f6:70:27:a0:92:5d:ac:9d:
79:8e:64:00:f2:e0:f6:49:11:0d:b6:cf:5a:7f:c9:29:76:d3:
f7:b2:a8:a8:47:b8:d8:e4:4f:76:05:38:b7:be:b9:10:f6:4d:
a8:ad:94:a1:8a:0e:d8:0b:d5:69:cd:d7:ea:74:ae:c4:c0:27:
6a:ab:36:67:13:d5:fe:19:17:d5:e3:8e:30:6c:a9:cd:75:18:
78:7a:d7:e5:9f:c0:75:73:b2:e0:dd:b9:f7:17:88:f6:81:ad:
80:40:bf:54:62:aa:ec:94:e3:70:df:eb:34:13:91:e0:b9:dc:
05:a4:35:6a:8c:72:d3:09:ba:b5:8c:a3:34:17:73:bc:82:55:
49:fb:fd:b5:cb:aa:1f:8b:9f:54:cf:e8:24:2f:14:77:e8:3d:
05:64:2e:3c:01:b3:3d:fa:3b:4e:2b:3e:96:35:14:39:a0:76:
22:9f:f2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:20:34 2026 by rpki-client