
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
File: Jr3a4E28sfgvVbB4MHuksIS5lLs.mft (raw, json)
Hash identifier: Tcr7MTzLzMNzse788EzVpmKDOMKJCzYMhW3fKYcvIUA=
Subject key identifier: 15:1C:9B:23:3C:D6:1C:E6:6A:75:83:B0:EB:15:EF:F1:43:C6:57:91
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Certificate issuer: /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial: 019F935AE5BC1F588C11BC8B6F6A8A039706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
Manifest number: 19D0
Signing time: Fri 24 Jul 2026 09:00:35 +0000
Manifest this update: Fri 24 Jul 2026 09:00:35 +0000
Manifest next update: Sat 25 Jul 2026 09:00:35 +0000
Files and hashes: 1: Jr3a4E28sfgvVbB4MHuksIS5lLs.crl (hash: JOYe+tkTVg48C3/VfnFYu6TC09+d/WWU+62FkdIzCwQ=)
2: LSc0zZT14Jo7EI4R2womLi4BWXw.roa (hash: /t+Y52iuLvhD9G1Nt7yXlLrqwqdhR3k7UUDI+0b7Jck=)
3: RJf7_BZh630LGIaBvGR48OfaOYM.roa (hash: vStLRSl6R9d4MF0nfflCotGK33XI7Q9JgJmQ0UQ6+co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:e5:bc:1f:58:8c:11:bc:8b:6f:6a:8a:03:97:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Validity
Not Before: Jul 24 09:00:35 2026 GMT
Not After : Jul 25 09:00:35 2026 GMT
Subject: CN=151c9b233cd61ce66a7583b0eb15eff143c65791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:72:1b:95:f2:7b:bd:6b:03:e6:fa:61:35:
40:ac:66:51:4b:88:dd:d5:63:3e:42:01:0f:89:75:
03:30:6f:32:17:0f:4d:9a:81:2b:b3:63:c5:d1:a3:
35:03:fb:45:da:53:61:51:ff:86:c0:65:95:dd:b4:
0c:7e:a8:a0:c1:da:20:f8:72:8a:ff:e2:51:62:1c:
92:d8:90:23:33:a9:f2:ca:5c:ab:59:42:e3:71:24:
7a:dd:7c:9b:53:cb:5e:53:4c:5d:02:11:a5:5d:33:
09:f7:c7:b7:92:bd:a6:3c:dd:99:2f:09:cb:a4:55:
02:a4:00:c0:50:4b:af:19:f0:69:ba:bd:95:b0:5d:
2c:7b:08:32:d5:31:dc:9e:3e:97:29:1c:33:cb:6b:
ed:6f:cd:e1:a3:8c:19:40:5c:b0:99:10:37:ec:cd:
32:99:7a:9c:52:c3:23:e5:d9:43:cb:05:19:be:3e:
e1:d4:2b:be:75:fb:d7:90:4c:df:c3:1c:d4:12:8e:
b7:96:b4:23:5c:a7:61:9d:12:9c:99:0e:63:d5:9a:
1d:74:47:85:f2:5c:c8:6e:87:8e:e1:83:96:39:50:
25:2a:b0:f0:e2:b1:4f:33:3b:27:75:a2:3f:96:93:
32:8b:43:3d:a5:79:11:70:f1:04:fd:c2:40:41:bb:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1C:9B:23:3C:D6:1C:E6:6A:75:83:B0:EB:15:EF:F1:43:C6:57:91
X509v3 Authority Key Identifier:
keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5c:b3:db:44:79:b5:76:39:e9:a6:09:d6:74:d9:65:86:f3:
b2:1c:51:08:fb:8c:f0:99:67:7c:92:30:19:7a:a2:30:5b:df:
5f:9c:8b:b5:16:d3:d1:fd:59:28:88:af:1a:54:52:52:bd:fb:
0d:56:64:c1:32:bb:55:10:ea:b3:fb:d8:7b:a9:8d:b4:72:41:
03:ee:c1:a4:9d:75:37:19:e1:d1:9d:45:b2:77:10:26:88:34:
0c:fe:84:56:b6:83:f2:f2:90:00:87:4a:a3:89:a7:1d:7a:0f:
df:2e:a9:91:36:46:9a:c1:e2:04:ea:32:6e:cd:24:2b:a4:21:
48:b2:60:de:14:99:b3:7f:94:51:17:7d:b6:60:2b:34:1b:c6:
e4:b0:2d:0a:03:2e:27:de:4b:33:a4:8c:94:25:9e:52:d8:57:
7f:a2:50:dc:59:2e:09:56:09:b1:e6:8a:5a:b3:90:39:3d:0a:
36:9c:b3:c0:1a:b1:c3:fa:35:34:91:3c:ff:09:af:00:c3:bc:
9f:2e:d8:81:34:5a:74:f3:74:2b:59:17:3b:b7:81:f9:b2:c3:
62:d6:c3:d4:2b:73:df:59:ee:60:4f:9a:e1:44:b0:e5:d0:f0:
3e:ec:81:a5:1d:76:83:36:50:01:06:40:4c:21:fc:59:90:55:
bd:46:b7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:52:08 2026 by rpki-client