Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: 5g9I93bSLZJKJ/EWut4eMQKP85uyDk7cRL7a0QB8Nnw=
Subject key identifier: 7F:58:88:59:58:0B:B5:18:C8:F8:4D:C6:9E:CC:0B:ED:02:58:35:97
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 019F9437725381794C1BD90AA5DDAFFDA229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 1714
Signing time: Fri 24 Jul 2026 13:01:29 +0000
Manifest this update: Fri 24 Jul 2026 13:01:29 +0000
Manifest next update: Sat 25 Jul 2026 13:01:29 +0000
Files and hashes: 1: jOlvTqoRsdAulg6Y3XpZsAr0oMk.roa (hash: cs60eVRzgZLIh6eTxfnRAFFGp7Qvb56odPMGxJ4uAvU=)
2: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: XGgafJ7CszJvlncn5rD8KOz755Z8SLOYcp+agnsiiv8=)
3: sAH-vh-27sRa8XMB1zXDPSKTTFE.roa (hash: Vvwat5s3NJzZ4utG1tsbAtKbf8nI+e0SigwDHdU+hO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:72:53:81:79:4c:1b:d9:0a:a5:dd:af:fd:a2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Jul 24 13:01:29 2026 GMT
Not After : Jul 25 13:01:29 2026 GMT
Subject: CN=7f588859580bb518c8f84dc69ecc0bed02583597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:14:e9:09:ad:9e:43:02:50:59:68:19:9a:
34:95:b3:19:eb:f0:23:96:35:d7:94:6b:b5:1f:eb:
74:ee:fc:51:2f:76:dd:c9:35:ad:a5:47:b8:b6:05:
5b:4a:7a:0d:b5:36:a3:23:08:0e:22:54:ff:76:56:
e3:a5:46:d2:58:4f:d9:d7:9e:e8:1c:3f:09:76:8d:
e0:32:cb:32:89:bb:fc:50:50:ae:e3:41:67:78:02:
96:46:c9:f3:3c:d6:fc:fa:77:8f:25:4a:f2:8d:c8:
fd:92:28:cc:04:ed:fe:f8:6e:83:7f:41:3f:b8:c0:
2a:e0:a3:d2:b5:1d:49:fc:22:ff:1c:af:bc:0b:df:
fa:5a:b2:c2:ae:d7:07:fc:5c:74:02:d9:34:05:f7:
f3:23:b1:99:8e:e6:99:3e:f6:a2:20:6a:32:e3:97:
e4:a2:8d:e4:72:e6:cc:8b:ad:c5:27:06:40:70:a0:
b1:29:17:8e:5f:b7:65:f8:19:29:cc:64:ad:12:d1:
3b:23:53:44:ad:ee:d1:4c:1c:a5:9c:30:10:64:29:
e9:63:bc:10:80:fb:b0:3d:1e:50:a2:ab:38:d2:37:
49:44:aa:39:9c:97:ed:73:a3:06:37:8f:56:70:ec:
bc:c2:19:45:71:ea:b5:20:ff:44:28:66:d6:84:2a:
8f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:58:88:59:58:0B:B5:18:C8:F8:4D:C6:9E:CC:0B:ED:02:58:35:97
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1a:fc:3b:2f:de:42:11:72:ef:c0:cf:1d:ae:ca:43:b5:d4:
a7:66:6f:b1:00:08:32:39:9c:1d:65:a6:a9:85:86:40:8f:6d:
ff:76:c9:85:9c:b1:d9:63:6a:45:e5:fd:a9:9d:c2:d5:b9:19:
d4:a5:fe:8e:60:0a:e0:7d:40:59:f6:90:ff:bb:cd:c6:90:64:
46:ba:dc:1b:86:36:35:2e:b7:87:8d:a0:9a:7a:5b:64:0b:43:
eb:17:c6:df:af:0a:f9:a1:56:ae:0d:e6:03:ef:99:92:dc:8e:
80:c0:14:f3:4e:83:c8:f6:da:84:7b:7f:3b:f0:c2:81:64:ea:
f1:7e:94:11:8b:e9:13:e3:d2:8b:73:7e:94:0b:72:a7:bc:92:
16:4c:99:a8:be:3d:f9:b7:3f:cd:99:c3:79:bb:ef:8e:17:47:
51:d8:39:2d:d6:72:c5:62:36:01:cf:97:51:ed:a7:f8:d0:b9:
11:b9:73:7c:37:78:b1:76:20:93:ab:ca:bc:5f:ac:2c:13:05:
32:a1:b5:48:d0:46:cc:fb:bf:57:c1:90:9d:d6:2a:e5:53:40:
d9:3d:64:3f:72:20:d6:6c:f5:84:03:dc:01:50:15:07:d6:2f:
c1:e1:f0:bb:4a:c7:b9:8e:46:ae:e5:e3:a9:2c:93:b7:d5:1a:
a7:20:93:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:41 2026 by rpki-client