Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
File: jCgv8-x8uBt45iinNRdkjWIpyrc.mft (raw, json)
Hash identifier: MT5hw/j6EoMCE/i1VTB6jCBw9Ociq3N2DFhtffixWTM=
Subject key identifier: 43:99:AA:A3:F1:14:28:E5:E0:15:99:A5:AC:8B:7A:DE:9B:F3:D4:91
Authority key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
Certificate issuer: /CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Certificate serial: 019F9436960110C63D8AD76C19C4FBA00268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
Manifest number: 0520
Signing time: Fri 24 Jul 2026 13:00:33 +0000
Manifest this update: Fri 24 Jul 2026 13:00:33 +0000
Manifest next update: Sat 25 Jul 2026 13:00:33 +0000
Files and hashes: 1: jCgv8-x8uBt45iinNRdkjWIpyrc.crl (hash: uQlePUB4UDbYxoRv/+a9ab7Ut120LApE66/OmBjoxWk=)
2: ljWbO3xgpVVnVuPfMgl7G3F39B8.roa (hash: Bdl5BL0jpRyEhLx4reL1/D3qaLttRyXVouVa2c42GeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:96:01:10:c6:3d:8a:d7:6c:19:c4:fb:a0:02:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Validity
Not Before: Jul 24 13:00:33 2026 GMT
Not After : Jul 25 13:00:33 2026 GMT
Subject: CN=4399aaa3f11428e5e01599a5ac8b7ade9bf3d491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:0b:47:49:3d:2a:23:08:d1:c6:45:4e:2b:
ed:44:d0:0b:3a:0a:3d:f5:75:1b:12:57:11:7e:d9:
04:bb:84:02:be:af:96:a5:ab:02:6d:59:f0:a0:e0:
f3:79:05:08:77:99:76:3d:db:70:e9:13:b0:64:2b:
5f:4c:f7:67:68:b2:80:15:d5:64:3c:6f:11:6d:94:
c6:3d:3e:24:e4:20:1a:3d:89:13:55:5e:c7:e4:b6:
99:a5:d5:5b:35:a4:de:70:45:2e:d4:50:12:01:6c:
f8:b6:92:92:c5:3b:a0:b7:9f:0d:6d:14:dd:a4:8d:
f4:3e:59:a3:18:6e:cd:b9:65:82:7e:00:d6:9d:5c:
04:89:92:4b:fd:c1:4f:4e:d9:37:50:2b:20:c0:5e:
43:ca:3e:e7:a0:01:6c:17:41:0e:1d:cd:0e:d6:ad:
0a:07:a0:e2:53:b5:d9:8e:18:34:bc:3e:1f:a6:fe:
4f:c6:77:ee:ba:18:6b:96:e8:b1:4d:16:08:18:e2:
94:e0:87:8b:b4:37:04:9a:68:44:be:c2:69:88:61:
f4:7f:5d:9e:59:06:4f:b4:c9:65:a8:44:d5:de:8f:
bf:9b:42:15:9d:1f:9b:19:bc:9d:0d:bd:fd:91:6f:
3f:94:a8:aa:ff:5e:b8:15:24:f4:a7:59:29:cb:33:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:99:AA:A3:F1:14:28:E5:E0:15:99:A5:AC:8B:7A:DE:9B:F3:D4:91
X509v3 Authority Key Identifier:
keyid:8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:8e:3e:d0:8b:f2:a0:6a:9e:2e:8c:29:e4:8c:84:81:7b:e3:
3c:d8:a4:9f:bc:ae:89:7a:04:05:c0:4e:0e:4a:9d:0c:d6:06:
16:72:b5:60:4a:18:8e:96:ed:0e:96:04:0f:fa:60:2e:d8:b6:
b8:61:da:d0:cf:6c:3a:d7:d0:c0:b3:ed:ad:ff:6e:c1:b1:9a:
6f:df:31:07:f1:c3:29:44:34:a1:89:da:b7:0e:e2:f4:c7:78:
d5:e4:0b:b8:53:1d:ca:f9:de:42:7e:f1:94:5e:24:d2:21:bf:
2d:d0:29:64:89:c2:ab:fa:0d:b2:7b:55:06:5d:e9:cd:b7:06:
fc:47:4a:8e:1b:f6:6c:05:39:d0:e5:15:e6:64:b5:d7:90:d0:
89:26:42:08:cc:95:b0:82:a3:2e:16:79:e6:56:15:41:55:76:
52:07:d6:21:c9:b3:f1:cb:f4:30:ba:c6:8d:a6:a0:10:43:d0:
87:e5:36:96:da:35:60:37:3c:6b:42:83:2c:5c:93:c9:8d:61:
f1:03:0b:d8:18:e9:4a:92:69:4b:88:c8:3c:3f:b5:f8:00:3a:
7c:c7:0e:22:1c:5f:d8:61:0d:40:23:21:e5:24:31:5f:7d:51:
26:e2:11:15:27:f7:6d:cc:2c:87:22:db:d5:85:9a:fd:f0:64:
50:9c:4f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:41 2026 by rpki-client