Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
File: jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft (raw, json)
Hash identifier: PkT/GMM2+ZulwW4V3Nm+xfwCFXNR7ay9NJFu2oQ0Dxk=
Subject key identifier: 11:90:8B:1C:C2:93:9D:DF:8D:A1:73:B8:8D:60:D9:30:95:AA:27:2C
Authority key identifier: 8C:2B:C6:8C:6B:18:01:DC:43:03:3F:76:FC:A7:35:C7:D8:46:79:E3
Certificate issuer: /CN=8c2bc68c6b1801dc43033f76fca735c7d84679e3
Certificate serial: 019F94368E9520BE2D390E15E4BE6C37315C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
Manifest number: 35
Signing time: Fri 24 Jul 2026 13:00:31 +0000
Manifest this update: Fri 24 Jul 2026 13:00:31 +0000
Manifest next update: Sat 25 Jul 2026 13:00:31 +0000
Files and hashes: 1: Tj-2zHDfL3Pm8wXS0UwNWI0Hm20.roa (hash: rYP1Gh9xmcWC06XPLj4CF87qroyF6GWHDQDHGo84ucQ=)
2: jCvGjGsYAdxDAz92_Kc1x9hGeeM.crl (hash: SGuPe7uVLkdHQj5a45ujkLq76V+KIse+FHftBDQ7GUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:8e:95:20:be:2d:39:0e:15:e4:be:6c:37:31:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2bc68c6b1801dc43033f76fca735c7d84679e3
Validity
Not Before: Jul 24 13:00:31 2026 GMT
Not After : Jul 25 13:00:31 2026 GMT
Subject: CN=11908b1cc2939ddf8da173b88d60d93095aa272c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:45:16:3a:16:05:70:a0:65:5a:8d:18:62:45:
28:aa:9d:d9:70:a0:e8:4b:f5:a3:25:b2:1c:65:11:
f3:b6:9d:08:e8:3b:ae:6f:ac:49:bd:28:d0:54:17:
b0:26:a4:3c:b7:9d:be:21:50:a0:83:6e:a0:9e:25:
e7:df:ac:05:9f:cd:51:51:f1:6a:a0:1f:35:56:e2:
f7:44:b9:88:5c:71:1a:75:37:f4:47:f1:ca:fb:2e:
fc:b5:1c:ca:16:b4:4e:0e:f9:37:12:cf:db:68:4e:
5b:97:81:e1:14:d9:6b:32:51:a4:f2:ad:58:ff:5c:
51:a9:89:04:0e:3e:39:eb:e8:bb:c9:04:3c:50:f6:
73:9b:f5:ef:22:4e:40:d2:8c:45:d1:2d:ad:a9:39:
2b:73:40:a4:96:20:da:62:d1:47:a2:cd:34:e5:f1:
bb:d9:8f:c0:08:5f:2b:99:92:f6:b1:a3:98:f6:0d:
5c:d3:96:da:cc:0f:70:77:e4:52:dd:bb:da:6f:39:
b8:90:39:db:4e:ab:f6:e0:92:30:c9:13:4f:17:73:
e4:c7:b5:a9:91:65:71:74:78:2c:59:8f:9b:6a:c3:
63:e5:2c:3c:3b:ed:fc:ea:b3:17:9d:fa:e1:f4:43:
a9:72:cd:d4:89:fd:ce:bb:ba:7c:a7:87:3b:93:26:
6c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:90:8B:1C:C2:93:9D:DF:8D:A1:73:B8:8D:60:D9:30:95:AA:27:2C
X509v3 Authority Key Identifier:
keyid:8C:2B:C6:8C:6B:18:01:DC:43:03:3F:76:FC:A7:35:C7:D8:46:79:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ce:12:00:b5:5b:5d:2c:0d:76:07:fc:6f:30:db:22:4d:71:
fd:cd:b4:03:36:ba:5d:b3:6c:62:9b:33:83:6c:5a:5a:c5:4d:
52:4c:59:bb:8f:fb:77:ad:1a:6e:24:0c:d3:40:6d:14:70:13:
a6:69:43:76:a7:6a:13:f5:2b:45:e1:4f:98:98:40:1c:ba:73:
98:b6:53:fe:41:25:8d:e9:3a:b5:98:d4:8a:19:b2:90:88:95:
92:1a:3f:b0:c0:e6:30:97:58:a2:ea:2c:d2:b4:53:48:f6:20:
fd:cf:49:c0:34:aa:21:d0:55:03:63:34:f8:f1:ab:7b:23:d4:
5a:31:05:aa:16:da:e4:99:79:36:9b:7a:ca:e7:b1:12:a8:91:
c6:b5:4a:36:97:8c:d3:18:e0:1a:f9:ca:f9:83:61:48:8c:e3:
6f:5d:42:87:0a:2c:e6:86:4f:2f:fd:5c:b2:3e:ba:64:cd:c0:
b0:c4:3d:30:ce:a5:85:cb:23:dd:59:e7:84:32:d0:52:66:e9:
e5:bd:23:9b:aa:35:5b:aa:03:57:5d:65:20:92:d5:e9:2e:b8:
8e:3a:21:a9:e9:4f:a2:05:34:f9:f9:d3:ff:5b:ee:0d:41:01:
9d:40:8b:8f:ef:aa:5d:bb:51:57:c3:97:94:a2:c8:b7:94:d7:
3b:4e:77:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNo6VIL4tOQ4V5L5sNzFcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMmJjNjhjNmIxODAxZGM0MzAzM2Y3NmZjYTczNWM3ZDg0
Njc5ZTMwHhcNMjYwNzI0MTMwMDMxWhcNMjYwNzI1MTMwMDMxWjAzMTEwLwYDVQQD
EygxMTkwOGIxY2MyOTM5ZGRmOGRhMTczYjg4ZDYwZDkzMDk1YWEyNzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UUWOhYFcKBlWo0YYkUoqp3ZcKDo
S/WjJbIcZRHztp0I6Duub6xJvSjQVBewJqQ8t52+IVCgg26gniXn36wFn81RUfFq
oB81VuL3RLmIXHEadTf0R/HK+y78tRzKFrRODvk3Es/baE5bl4HhFNlrMlGk8q1Y
/1xRqYkEDj456+i7yQQ8UPZzm/XvIk5A0oxF0S2tqTkrc0CkliDaYtFHos005fG7
2Y/ACF8rmZL2saOY9g1c05bazA9wd+RS3bvabzm4kDnbTqv24JIwyRNPF3Pkx7Wp
kWVxdHgsWY+basNj5Sw8O+386rMXnfrh9EOpcs3Uif3Ou7p8p4c7kyZsYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGQixzCk53fjaFzuI1g2TCVqicsMB8GA1UdIwQY
MBaAFIwrxoxrGAHcQwM/dvynNcfYRnnjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakN2R2pHc1lBZHhEQXo5Ml9LYzF4OWhHZWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wODVhYzYtZTAyNi00MTA2LTg2MjIt
YmI5OWNkMjhhMDAzLzEvakN2R2pHc1lBZHhEQXo5Ml9LYzF4OWhHZWVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wODVhYzYtZTAyNi00MTA2LTg2MjItYmI5OWNkMjhhMDAz
LzEvakN2R2pHc1lBZHhEQXo5Ml9LYzF4OWhHZWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbs4SALVb
XSwNdgf8bzDbIk1x/c20Aza6XbNsYpszg2xaWsVNUkxZu4/7d60abiQM00BtFHAT
pmlDdqdqE/UrReFPmJhAHLpzmLZT/kEljek6tZjUihmykIiVkho/sMDmMJdYouos
0rRTSPYg/c9JwDSqIdBVA2M0+PGreyPUWjEFqhba5Jl5Npt6yuexEqiRxrVKNpeM
0xjgGvnK+YNhSIzjb11Chwos5oZPL/1csj66ZM3AsMQ9MM6lhcsj3VnnhDLQUmbp
5b0jm6o1W6oDV11lIJLV6S64jjohqelPogU0+fnT/1vuDUEBnUCLj++qXbtRV8OX
lKLIt5TXO053Pg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:45:33 2026 by rpki-client