Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier: oaUDNeXCKWWmkJ0h301FOB3ENTMsuvtbWkWvZgfBvE0=
Subject key identifier: 5C:39:D8:AA:02:9F:EE:5F:B4:8F:DE:14:0F:61:9B:22:67:F1:C7:FD
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 019F92B6AB76AAF01C466F15819DC44213D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number: 12A1
Signing time: Fri 24 Jul 2026 06:01:12 +0000
Manifest this update: Fri 24 Jul 2026 06:01:12 +0000
Manifest next update: Sat 25 Jul 2026 06:01:12 +0000
Files and hashes: 1: 0oxdyMukMZaAGBeo9l9rFsh78pk.roa (hash: DX6ZwX+iC1cN81KUv6aS7NPJaf7Awa86RPypXOmFS5E=)
2: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: u6cWYQXfeNlL/1xkrPGavSXfQo92RV+9250fPqzButI=)
3: dyVWHuwmCwNemfhA3NEDaxJ2sdw.roa (hash: Q8NYEk98UWxN0ux4Y6DtAD9386w6kojLNf1xUJ5/UcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:ab:76:aa:f0:1c:46:6f:15:81:9d:c4:42:13:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Jul 24 06:01:12 2026 GMT
Not After : Jul 25 06:01:12 2026 GMT
Subject: CN=5c39d8aa029fee5fb48fde140f619b2267f1c7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2b:19:a6:d2:b4:42:99:90:d4:7c:11:49:c3:
6e:c6:02:46:db:6f:b4:6c:6e:9b:00:f1:a8:6f:2e:
55:cd:cf:3f:ad:da:14:f0:53:cb:5a:90:8f:40:7e:
62:d5:a8:e1:9d:67:85:94:e7:16:d1:c7:40:e6:83:
1a:65:0b:f0:48:65:27:16:28:de:ed:ba:41:6d:63:
fb:4b:bb:95:1e:b8:8d:de:42:4f:b7:ae:9a:38:f0:
70:0b:cc:d7:92:00:3e:c9:30:68:7a:20:f6:6a:1b:
42:63:8c:a9:e1:fb:2b:9a:a0:02:95:92:0b:5b:64:
3a:4a:c9:07:70:79:6b:a8:25:7d:95:78:b2:1e:3b:
67:c3:2c:7c:38:d8:c3:44:cf:16:db:35:85:7d:cf:
3c:49:8b:2e:2b:95:a7:34:2d:be:26:47:5c:b0:d8:
ba:51:f8:92:3c:b4:b0:a6:14:7b:14:7d:32:28:87:
37:a8:b9:85:dc:48:e2:e1:07:0f:a9:d5:06:fd:6e:
6f:1e:af:b5:b2:3c:06:a0:2f:ff:a9:ab:8f:cd:c5:
72:a8:cc:2a:fb:c3:e7:7e:00:bb:26:8a:11:23:93:
46:b0:68:c1:ec:77:f7:ac:fd:03:75:d5:c3:22:62:
20:6f:f7:be:ff:de:b7:3f:5a:79:27:de:8d:56:8f:
f2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:39:D8:AA:02:9F:EE:5F:B4:8F:DE:14:0F:61:9B:22:67:F1:C7:FD
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b5:bd:7e:c7:e2:55:c1:82:0a:58:c2:fc:bd:ce:60:0a:66:
d2:d2:9e:c7:8d:3d:44:60:74:0f:85:65:2e:83:49:28:0d:91:
f5:dd:d1:df:12:9d:cc:ae:12:44:71:a2:81:19:9a:56:cc:c5:
ea:ed:cc:4c:ea:6f:65:ff:fb:e7:e7:21:1d:91:36:a3:a8:02:
10:b2:13:bd:a7:c5:dd:af:5c:bc:93:1b:3a:7d:74:b8:19:31:
74:5a:04:dd:ae:28:55:5e:fd:f2:53:8d:8a:92:0d:1f:74:90:
60:08:18:0d:ba:77:7b:75:f3:d3:34:6a:22:c0:83:3b:4a:f1:
f9:a5:c8:4d:1e:f2:3b:04:36:82:d9:d4:68:fd:f0:30:25:18:
23:b7:50:6f:69:dc:5d:85:ab:fd:1e:22:0e:61:6d:9f:bd:9b:
2f:99:96:21:f1:41:11:71:5f:f5:56:9c:63:5a:fa:b6:23:c4:
5f:24:64:be:88:e1:6f:33:c1:f9:04:d9:ac:2e:24:0c:d9:ef:
cd:12:f5:0a:ba:1f:f9:7f:a2:62:29:9f:5f:d4:8a:c3:c6:97:
a5:a1:31:c3:50:6f:33:4f:88:18:77:2e:e9:45:7b:98:76:d1:
05:51:f0:e7:01:1c:dd:17:54:18:24:1d:b2:7e:a3:37:f9:46:
7c:70:e0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:52:39 2026 by rpki-client