Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
File: jRFmK-syV94cA0DkEu2dGZXA9f8.mft (raw, json)
Hash identifier: iel//s3dWWKagzsHbD9xAd0IOdsC4QafUYzxUx7SBU4=
Subject key identifier: 5C:A6:D3:C8:E5:04:6F:98:91:4E:79:61:64:14:AA:2B:86:22:EC:DE
Authority key identifier: 8D:11:66:2B:EB:32:57:DE:1C:03:40:E4:12:ED:9D:19:95:C0:F5:FF
Certificate issuer: /CN=8d11662beb3257de1c0340e412ed9d1995c0f5ff
Certificate serial: 019F916D51E81574DF62471E8DD98104C513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:28 +0000
Manifest this update: Fri 24 Jul 2026 00:01:28 +0000
Manifest next update: Sat 25 Jul 2026 00:01:28 +0000
Files and hashes: 1: CQCzVDXazljrHIDpQoZYmXw-po0.roa (hash: csnCrvPQLiH0NgIq8QQ3R53jMhbeRSXe4EfvPdrCVpg=)
2: OBPTg2h93nMRgYHf_TenncbSH3w.roa (hash: DcawVmKkXAq6yOPTfF+1ZtbO8p4q24hhfvuSmUJsz+Y=)
3: jRFmK-syV94cA0DkEu2dGZXA9f8.crl (hash: QJmGojLcOW9yA8r8jScG4t85IEX42dlZ9jSpSX1+mKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:51:e8:15:74:df:62:47:1e:8d:d9:81:04:c5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11662beb3257de1c0340e412ed9d1995c0f5ff
Validity
Not Before: Jul 24 00:01:28 2026 GMT
Not After : Jul 25 00:01:28 2026 GMT
Subject: CN=5ca6d3c8e5046f98914e79616414aa2b8622ecde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3d:08:bf:c5:1b:92:f3:b6:fa:32:b8:ab:3b:
7b:5e:37:69:42:fc:54:92:aa:fd:0a:79:81:36:44:
1f:06:b2:91:3e:56:0f:b2:72:d3:9a:e0:a5:8a:16:
d7:6e:1b:0e:33:9b:0d:2a:3b:62:f1:ae:99:db:9e:
d8:94:8f:66:cf:ce:3f:28:77:e5:77:b6:48:07:84:
3d:cc:97:52:fd:99:e3:70:cc:5e:8b:d2:67:96:0e:
ab:0a:cf:4b:6c:d9:08:11:ba:c1:9b:57:68:1f:7d:
00:c8:85:bc:cf:f5:d8:04:ff:00:01:73:b0:b4:84:
06:7a:3f:f9:0c:29:a9:10:07:24:43:41:f9:b3:92:
69:3b:1d:b3:49:cb:33:9f:2f:03:cc:02:d9:8b:26:
b8:31:47:6f:62:dc:54:c2:dc:a5:f2:fd:b0:de:bb:
17:6b:e3:7a:ad:71:d7:5c:91:0e:c2:a8:55:64:d0:
d3:ad:76:97:c9:d9:20:90:ec:75:13:7d:7a:96:7a:
b7:ac:e4:14:33:f8:79:9e:e7:dc:6f:30:60:5c:c1:
f5:ef:7b:fc:f8:de:93:ad:26:78:f8:86:bb:37:08:
fd:8e:07:71:5a:3c:88:c9:8b:bf:03:13:03:27:d8:
45:4e:22:bb:4c:ae:01:aa:07:0c:d3:75:77:a6:92:
d1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A6:D3:C8:E5:04:6F:98:91:4E:79:61:64:14:AA:2B:86:22:EC:DE
X509v3 Authority Key Identifier:
keyid:8D:11:66:2B:EB:32:57:DE:1C:03:40:E4:12:ED:9D:19:95:C0:F5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8f:6c:c9:39:82:1a:e3:23:6f:c1:b8:49:90:f5:d5:97:37:
5b:d9:0c:12:9a:de:21:8e:d0:56:a5:44:1a:9b:be:f5:52:16:
5e:ba:2d:c5:d8:f5:40:a2:50:ed:69:72:54:27:e4:0d:4f:3e:
45:12:30:2c:03:ad:1a:72:ff:92:f6:ae:8f:12:1c:7f:16:73:
37:c3:64:a4:bf:88:53:49:28:51:86:51:e6:63:dc:28:8c:20:
04:08:1a:8c:66:1e:b7:c4:8f:2c:13:e6:89:cc:df:e3:3f:5b:
04:ab:bf:82:be:c1:45:51:09:50:99:f2:01:be:0e:47:46:26:
08:af:46:ce:66:3f:db:73:7e:f3:26:d9:92:e7:fd:b2:c2:73:
45:74:e3:ef:3c:cd:7d:2e:f9:85:01:11:e8:ae:c2:b4:e4:29:
da:3b:92:69:2c:86:94:a0:0f:8a:4d:5d:c0:b7:85:26:51:de:
4c:3b:90:5f:29:3a:69:73:24:6f:4d:8f:82:55:83:82:96:b8:
54:e3:e3:0b:c5:04:b9:47:c9:92:b5:b3:ef:bb:8a:d3:e2:5c:
67:a5:6e:05:ca:84:81:19:bd:a3:dc:ef:c6:0b:2b:7f:fa:ee:
fe:bb:dc:a8:77:cd:69:2b:42:fa:da:1a:a7:4f:c6:51:b0:46:
a9:79:20:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:48 2026 by rpki-client