Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
File: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json)
Hash identifier: DO2zmeAmylIzjyWzNZv0jGKjXq54pGLK9TgpLA/DFFE=
Subject key identifier: 37:6B:EC:F7:C4:06:73:82:A7:E7:61:73:16:26:3C:01:B0:FF:2D:1C
Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
Certificate issuer: /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Certificate serial: 019F8FECB331326099BCF9F5EE00A6FCF03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
Manifest number: 1919
Signing time: Thu 23 Jul 2026 17:01:21 +0000
Manifest this update: Thu 23 Jul 2026 17:01:21 +0000
Manifest next update: Fri 24 Jul 2026 17:01:21 +0000
Files and hashes: 1: 8yYMhh0gMT6CiQOLVp2cTc5vVZ0.roa (hash: 7gaVBUF1/eBBpHyrZMX3iYaRP7VQvzONGdsKY6mhoPg=)
2: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: tq9kNsp3OHSBXTFs8tFIxlc/89l4pCnhg+u1lE37RdQ=)
3: jWXlavsE52YTVFZOpNefWWU1i6k.asa (hash: vEyTlENGA5Gaf1l2XTZgXp/m9z8nLu21MiVt4HAmg+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:b3:31:32:60:99:bc:f9:f5:ee:00:a6:fc:f0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Validity
Not Before: Jul 23 17:01:21 2026 GMT
Not After : Jul 24 17:01:21 2026 GMT
Subject: CN=376becf7c4067382a7e7617316263c01b0ff2d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:24:e4:7b:27:29:71:d5:d8:26:2d:9d:08:
69:49:58:06:4d:b6:d5:66:74:aa:ee:20:03:d9:c5:
02:e0:7f:ce:ca:7a:a5:3a:f3:ac:9c:26:9e:f5:cc:
38:da:9b:64:3f:f7:cb:2c:ba:d5:c2:ba:df:16:5f:
58:50:d9:fd:73:e5:da:e6:29:96:f2:cb:e4:3e:c1:
70:79:58:60:e3:fd:8e:d4:8c:d6:a5:f0:96:94:a0:
97:2e:9a:b9:d3:1a:5f:46:31:7c:b8:14:03:dc:66:
95:6a:d7:8b:d7:59:2d:af:7b:04:26:2b:f9:42:7b:
1d:5d:57:93:b5:28:2f:5a:90:fe:c8:40:1a:51:7a:
a4:fa:cc:fd:f4:3b:21:79:df:37:12:9d:fc:97:e8:
48:90:12:3d:b2:6f:12:a8:34:56:ff:89:d6:50:45:
7c:4d:6f:8c:d1:ae:36:23:e6:60:fb:79:5d:da:09:
e0:a8:3a:a9:71:50:08:3b:79:e4:98:0e:4b:1a:6e:
0d:34:af:6c:3f:ee:e9:fb:56:9d:82:e6:47:15:94:
10:4d:f2:44:8b:a0:57:80:00:bf:1c:b6:c0:93:84:
81:25:72:e1:73:13:df:72:5b:64:33:65:d0:10:d9:
d4:00:3a:e9:07:8a:d7:96:a0:13:fa:01:20:f3:83:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6B:EC:F7:C4:06:73:82:A7:E7:61:73:16:26:3C:01:B0:FF:2D:1C
X509v3 Authority Key Identifier:
keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2e:df:c5:08:40:a6:40:a9:c7:e9:a3:2b:6e:85:82:3f:9b:
da:29:43:58:9b:61:e8:c9:f1:aa:e1:35:28:33:cb:4d:36:c1:
5e:50:89:63:89:7e:57:1c:6e:76:95:08:f9:9e:23:a8:9f:d5:
e2:f7:60:e3:ef:a7:d2:10:f1:51:d8:5f:8d:c5:ec:05:9b:8a:
73:9b:93:dc:39:dd:b5:7d:b9:1c:29:ec:a9:b4:7a:3e:51:2a:
fd:82:2e:59:f6:eb:af:3e:78:ba:43:7b:26:49:73:22:fe:d7:
09:cb:24:59:f4:c6:b9:40:68:df:9d:46:82:32:e1:52:a5:b5:
70:00:7e:a1:83:ef:df:b8:91:49:aa:68:52:7d:44:cd:e0:19:
a1:fa:0b:9c:d4:43:fa:c2:33:ba:6d:8e:e3:d8:e2:8d:d4:5a:
af:1e:0f:35:ed:16:26:b6:48:c8:37:b3:96:bc:87:58:ec:6d:
8a:0a:32:0a:b3:47:c7:db:38:90:ae:8b:d6:14:37:04:2d:ca:
f6:ce:73:4e:f7:e0:b0:bf:87:6d:1b:da:f9:2f:8d:a3:89:62:
db:1b:79:66:a8:96:20:bd:e1:a9:65:6b:3b:da:05:5b:d1:67:
9b:9a:16:68:58:27:76:ff:f0:03:33:af:b5:51:57:3b:35:fd:
a0:21:bb:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7LMxMmCZvPn17gCm/PA/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2N2Q5ZWNiOTk2NDgyNWQ0NGRkMjY2YmJkMzJhYTA4MDRi
YzEwZjcwHhcNMjYwNzIzMTcwMTIxWhcNMjYwNzI0MTcwMTIxWjAzMTEwLwYDVQQD
EygzNzZiZWNmN2M0MDY3MzgyYTdlNzYxNzMxNjI2M2MwMWIwZmYyZDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA038k5HsnKXHV2CYtnQhpSVgGTbbV
ZnSq7iAD2cUC4H/OynqlOvOsnCae9cw42ptkP/fLLLrVwrrfFl9YUNn9c+Xa5imW
8svkPsFweVhg4/2O1IzWpfCWlKCXLpq50xpfRjF8uBQD3GaVateL11ktr3sEJiv5
QnsdXVeTtSgvWpD+yEAaUXqk+sz99Dshed83Ep38l+hIkBI9sm8SqDRW/4nWUEV8
TW+M0a42I+Zg+3ld2gngqDqpcVAIO3nkmA5LGm4NNK9sP+7p+1adguZHFZQQTfJE
i6BXgAC/HLbAk4SBJXLhcxPfcltkM2XQENnUADrpB4rXlqAT+gEg84OlLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdr7PfEBnOCp+dhcxYmPAGw/y0cMB8GA1UdIwQY
MBaAFCZ9nsuZZIJdRN0ma70yqggEvBD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yOWFjODQtNDM2NS00ZWJhLTk4NzMt
MzkxYmNlNzFmZWExLzEvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yOWFjODQtNDM2NS00ZWJhLTk4NzMtMzkxYmNlNzFmZWEx
LzEvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaS7fxQhA
pkCpx+mjK26Fgj+b2ilDWJth6MnxquE1KDPLTTbBXlCJY4l+VxxudpUI+Z4jqJ/V
4vdg4++n0hDxUdhfjcXsBZuKc5uT3DndtX25HCnsqbR6PlEq/YIuWfbrrz54ukN7
JklzIv7XCcskWfTGuUBo351GgjLhUqW1cAB+oYPv37iRSapoUn1EzeAZofoLnNRD
+sIzum2O49jijdRarx4PNe0WJrZIyDezlryHWOxtigoyCrNHx9s4kK6L1hQ3BC3K
9s5zTvfgsL+HbRva+S+No4li2xt5ZqiWIL3hqWVrO9oFW9Fnm5oWaFgndv/wAzOv
tVFXOzX9oCG76Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:25 2026 by rpki-client