Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File: jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier: M8AZzI4s5FVZ/KTYjhIWl9xVcmS5QH1N8pXqAtetFxY=
Subject key identifier: 21:89:A3:18:E2:40:F4:C5:15:86:5C:89:41:21:82:3F:33:B6:D8:6A
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer: /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial: 019F90C838AF6701E807DDD8F265955419ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number: 15AB
Signing time: Thu 23 Jul 2026 21:01:08 +0000
Manifest this update: Thu 23 Jul 2026 21:01:08 +0000
Manifest next update: Fri 24 Jul 2026 21:01:08 +0000
Files and hashes: 1: 0yWPvFtMAYIcTAg5JfApwnsaFGI.roa (hash: 1p9eIfwmhKokMGTrk5iOiVMk3FImaB8EaoWESHMvCLQ=)
2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: li6W4LQx5gK4TZ4vvbMrOqTfOhlVYRFwgtXmSQwb07s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:38:af:67:01:e8:07:dd:d8:f2:65:95:54:19:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
Validity
Not Before: Jul 23 21:01:08 2026 GMT
Not After : Jul 24 21:01:08 2026 GMT
Subject: CN=2189a318e240f4c515865c894121823f33b6d86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b5:40:14:16:67:84:af:2a:61:0b:e1:9c:c6:
fb:3a:71:99:fa:3c:7e:7b:d9:31:67:fd:2c:9a:df:
0b:be:16:75:c3:66:4d:3d:9d:69:e5:82:d7:87:6e:
f6:a7:fd:1e:3f:d2:10:7b:79:73:04:6a:24:05:95:
6d:92:dd:5f:13:c4:12:5d:86:dc:91:58:da:e8:14:
a1:18:be:eb:4f:e9:13:45:c1:bf:d4:a8:54:23:25:
49:d9:3a:85:08:af:11:5f:73:4a:bb:ec:72:2c:02:
f8:22:ea:63:be:02:4a:97:37:6d:3b:59:86:f7:a5:
e4:1c:4f:05:8c:6b:16:1c:aa:b9:6e:cc:1e:b7:eb:
26:ab:c1:0e:46:d9:87:1c:6c:ff:2f:12:82:3c:53:
7a:96:5d:12:d8:40:dc:3b:bc:c9:d1:34:10:ab:91:
b9:96:e5:e2:a7:f2:7d:fd:18:3c:2a:c7:aa:22:17:
d7:c0:d0:a4:9e:bd:09:53:ab:34:3e:b6:b1:4c:4b:
6d:ab:c5:2b:79:7b:64:fc:d8:67:48:6f:26:43:c5:
f4:8c:3e:93:5b:16:84:5f:35:e6:aa:39:0c:0c:3f:
92:a0:9d:1a:35:36:ef:8e:86:c8:25:af:95:5b:59:
bf:f0:0a:fc:b7:12:87:6a:bc:4a:da:44:5f:a4:b6:
9b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:89:A3:18:E2:40:F4:C5:15:86:5C:89:41:21:82:3F:33:B6:D8:6A
X509v3 Authority Key Identifier:
keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9d:c4:7b:fe:91:09:8c:9d:5e:db:42:d5:c8:db:ac:a8:14:
7d:c5:ba:95:09:43:cb:c7:07:ca:ac:58:d5:a6:73:7b:1f:62:
12:7c:e1:62:fa:b5:eb:95:8c:82:e4:50:8b:6b:ab:df:1f:3f:
65:f1:df:86:ad:e3:46:12:b2:bc:10:24:f7:1d:a9:33:1f:28:
0d:16:b9:ff:17:ad:12:f3:59:8b:76:b5:26:97:88:43:12:5c:
32:30:11:7f:d6:a5:a2:0a:1b:52:64:66:18:cf:60:f8:0d:1b:
2c:cc:8d:f4:fd:ca:9b:a2:b0:88:3b:f3:2f:69:cb:68:49:a1:
6d:ce:fc:90:2f:27:ad:0d:c3:ef:6d:20:19:82:73:26:5c:2a:
c6:68:32:25:5f:59:d4:78:f5:dc:17:4f:48:51:49:10:e7:e8:
17:64:03:57:e0:b4:3d:a0:2e:f8:d0:b2:14:a0:00:5a:50:64:
29:c0:12:a9:57:1d:fb:86:25:66:7a:1c:c0:4e:43:2f:1d:c8:
86:aa:e2:90:54:f7:6b:22:bb:33:da:78:ce:03:21:1c:2b:e4:
d5:fd:0f:f7:92:97:8c:f1:9f:22:8f:b0:80:d9:18:20:f4:f3:
54:47:ad:a7:a2:21:07:c6:b1:14:9a:43:5a:87:cd:ba:e0:ee:
e0:b1:f9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:03 2026 by rpki-client