Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.mft
File: JflL0qvKpDyX5XhrLbNbcT--X-Q.mft (raw, json)
Hash identifier: ZUl6oH81nOUqLOVwLO23sSDs9uF8jMukDkk9wApWeY8=
Subject key identifier: AC:0A:2E:BF:7E:B2:D4:66:46:75:E2:2E:F6:4C:C0:3D:1C:17:AC:BC
Authority key identifier: 25:F9:4B:D2:AB:CA:A4:3C:97:E5:78:6B:2D:B3:5B:71:3F:BE:5F:E4
Certificate issuer: /CN=25f94bd2abcaa43c97e5786b2db35b713fbe5fe4
Certificate serial: 019F916C8274137C67E2BBE699BCA8E00D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:35 +0000
Manifest this update: Fri 24 Jul 2026 00:00:35 +0000
Manifest next update: Sat 25 Jul 2026 00:00:35 +0000
Files and hashes: 1: BcMMM0U66F_S0r1n65JxA8MExF0.roa (hash: H3WQFI+Saoc8E2B5BEOhesPi++dCrMFkBj7AIbeBUHI=)
2: JflL0qvKpDyX5XhrLbNbcT--X-Q.crl (hash: At0X98rZEVUy/4IKlUpyBZO9QMEqdT9Pt0tQFdAESUA=)
3: VvS2Qn_Hrvcd6_-SnK7PXtk73uU.roa (hash: e6SVyLxPmWS3ohNAOmFyq9LDfmnszid2SAX7TuW2VEw=)
4: XIQjtwCAeuz5pHeyEJIwylepx78.roa (hash: /ZdrEI8StygXoq2z181JCF5ttjpJyDiccnOn6hndeRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:82:74:13:7c:67:e2:bb:e6:99:bc:a8:e0:0d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f94bd2abcaa43c97e5786b2db35b713fbe5fe4
Validity
Not Before: Jul 24 00:00:35 2026 GMT
Not After : Jul 25 00:00:35 2026 GMT
Subject: CN=ac0a2ebf7eb2d4664675e22ef64cc03d1c17acbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7d:98:fa:1b:b4:cb:c6:5d:92:ae:9d:7b:23:
52:d6:35:bb:dc:10:33:bb:b8:a6:2c:e6:ab:71:1c:
78:39:91:32:b7:95:7d:ef:88:6c:44:81:ad:f6:f1:
76:b3:41:fb:7b:37:0c:98:29:7e:6c:dd:df:8a:9f:
50:09:4b:57:09:4c:b0:59:fd:ee:5d:f2:5b:52:77:
62:40:72:d5:50:60:cb:b8:67:15:a5:e6:94:4e:0a:
61:cb:35:a0:0a:7f:03:e8:62:38:df:19:1b:20:49:
24:9a:db:ab:d5:ad:a6:15:ec:ca:18:4a:e0:d6:4c:
bb:cc:83:76:f1:08:35:8a:d8:a2:33:44:38:51:ae:
03:50:b5:8c:7b:5d:a5:10:7b:ef:5a:05:70:2b:51:
5f:aa:ef:99:bb:2c:1d:d8:ec:de:c5:b3:db:bd:84:
c7:1a:80:b0:4d:7a:0a:27:ec:e2:70:b1:79:58:03:
e6:d8:16:d3:74:8b:94:2d:88:ea:3d:23:d0:4e:af:
3d:3c:03:a3:5e:ea:56:53:02:99:bc:1c:f7:a8:d6:
6c:69:ca:77:c7:d8:01:0f:ed:5b:ee:f0:46:07:16:
c6:f6:b0:e2:c5:6f:34:4e:2b:19:4b:32:88:9a:98:
a7:38:1d:6c:8f:80:90:af:38:ba:f8:21:61:f9:57:
9d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0A:2E:BF:7E:B2:D4:66:46:75:E2:2E:F6:4C:C0:3D:1C:17:AC:BC
X509v3 Authority Key Identifier:
keyid:25:F9:4B:D2:AB:CA:A4:3C:97:E5:78:6B:2D:B3:5B:71:3F:BE:5F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c5:dc:f9:9d:24:ae:5a:87:6c:b2:c6:05:e3:6f:5d:b8:da:
3f:9d:d7:46:b5:c7:5e:0d:a9:08:25:8a:6c:33:7e:78:b4:75:
2c:b1:22:89:03:3a:15:da:56:01:04:9b:3d:fc:ed:8b:e5:31:
67:19:ed:1d:08:71:3c:3c:4f:42:4b:bc:7c:2e:a5:fd:f4:2b:
1e:4b:5a:6a:39:39:1c:c8:be:02:15:0f:84:2b:40:74:b7:25:
86:58:77:20:d0:ab:9b:18:7a:b8:24:dc:08:f5:dc:18:28:e6:
a2:7f:50:2b:a4:43:5a:75:53:0f:05:3a:f9:06:60:cb:cb:8e:
70:ad:9d:e6:1c:c2:55:ff:88:37:7b:4e:33:85:42:3f:d7:37:
c3:51:ad:3e:81:4d:b6:5e:70:a2:ab:85:c6:31:da:ed:67:bb:
70:9c:c0:c7:cb:5e:0e:b3:3b:57:59:dd:c2:b5:00:cd:82:af:
64:47:b9:1a:5a:3e:7e:30:d9:e8:9a:d3:ea:be:0a:58:16:cf:
c8:90:70:c5:12:72:23:4c:f3:4a:88:20:34:27:4f:bd:a3:fe:
f5:54:de:54:50:79:3c:75:d8:7b:fc:6a:04:17:79:c5:1d:55:
03:34:1f:56:5f:cb:1d:ab:a1:11:6c:ec:f6:15:25:a7:11:50:
75:ad:d1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:50 2026 by rpki-client