
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
File: jMyCpb7jqTYzA8M83N0278aPi0Q.mft (raw, json)
Hash identifier: tLBL+EoPHbQmBSzer2ScPuKRIWgCc/nAxt6QyJ2kUgU=
Subject key identifier: C4:77:17:47:41:A9:66:DD:D8:21:1C:0B:85:FC:31:AA:91:7B:D6:E4
Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
Certificate issuer: /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Certificate serial: 019F829DF6683C79DEAB2DC876FFFBC0AA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
Manifest number: 05B4
Signing time: Tue 21 Jul 2026 03:00:18 +0000
Manifest this update: Tue 21 Jul 2026 03:00:18 +0000
Manifest next update: Wed 22 Jul 2026 03:00:18 +0000
Files and hashes: 1: Qu7i1hfHBSzNKAEQCFhBjLBdX88.roa (hash: txu1MfU2gFXJdRpf1GKWelwI6kKmpvlKQLQat4JHcus=)
2: jMyCpb7jqTYzA8M83N0278aPi0Q.crl (hash: MIkU5FkfltBxMCSSI/tcRPN88ZbkpFbMxlW+3ToBNAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:9d:f6:68:3c:79:de:ab:2d:c8:76:ff:fb:c0:aa:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Validity
Not Before: Jul 21 03:00:18 2026 GMT
Not After : Jul 22 03:00:18 2026 GMT
Subject: CN=c477174741a966ddd8211c0b85fc31aa917bd6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:eb:90:ca:08:f5:4f:58:88:1b:4b:d3:16:
f0:b2:eb:0e:c1:00:1c:76:68:63:2a:c8:ed:9c:da:
1f:9d:17:46:6e:7e:62:9c:2d:d5:d6:e5:fd:85:b5:
5b:a7:0b:e8:9f:13:cd:a1:8c:bb:b1:05:dc:e8:4d:
3c:38:89:b1:81:1e:eb:34:d0:88:be:8b:90:33:54:
d1:33:c6:a9:c9:1e:59:2e:af:de:20:d2:09:80:4e:
9c:03:7a:5a:b7:a3:69:a4:98:d6:55:25:27:7f:31:
0f:bb:73:1a:c5:93:e3:d7:9a:e5:ae:c2:94:84:d4:
71:09:55:3c:7c:6f:fe:c7:c3:e8:66:d8:17:cb:5d:
d4:3e:27:05:b8:25:35:0f:fb:a7:2a:fb:2f:47:ac:
e1:f7:2d:6d:48:bd:2d:2b:b3:ce:b0:60:3b:fb:83:
cc:62:39:4a:30:a6:c4:b9:89:95:c5:4e:75:2e:af:
6d:e5:c6:a1:9c:fc:c5:31:6b:f4:63:ea:ca:01:9e:
50:43:ac:96:9c:35:51:4d:bd:c4:2a:61:4a:01:0c:
08:9c:9e:5f:2b:00:de:c2:16:ff:0c:42:25:95:4f:
5b:3e:95:01:b5:07:12:3a:80:81:38:96:b6:83:60:
d4:4d:21:fa:90:ce:ea:b1:7f:39:00:f1:b3:03:be:
28:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:77:17:47:41:A9:66:DD:D8:21:1C:0B:85:FC:31:AA:91:7B:D6:E4
X509v3 Authority Key Identifier:
keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a4:a0:ac:4f:e7:82:98:64:1a:08:c7:20:0b:89:b0:b5:33:
35:9f:51:c7:16:b9:c2:f5:6b:a9:0f:52:7c:87:05:21:e3:2b:
2a:20:80:4b:20:51:18:d8:a3:e5:f7:4a:b5:e7:a0:10:30:00:
31:6a:27:a8:9a:90:cb:e2:1d:75:f0:93:13:66:15:7d:90:11:
89:00:40:0f:cc:d1:20:6e:41:fa:27:e1:5f:fb:da:74:8e:08:
47:bb:e5:5a:e1:d8:27:31:39:60:e1:1a:19:41:4e:d3:2e:39:
98:62:14:2c:e7:e0:3e:5b:e6:d3:66:ef:8c:c2:39:07:94:44:
6f:1f:ae:77:64:d7:2c:28:e9:54:58:6f:51:17:c7:83:48:d1:
6c:f1:f2:09:cb:77:87:81:36:29:d2:6d:7c:b3:58:92:6d:f4:
35:71:f6:7e:d0:bc:ae:38:b4:f6:a3:5d:a3:6f:56:2a:de:8d:
22:bb:74:8e:f0:2e:04:46:e3:1a:eb:7c:4b:2c:00:bc:27:96:
7f:2f:ee:ac:8c:8e:03:39:13:bb:09:b8:63:fb:ff:7f:02:d9:
99:0f:9c:42:ce:5e:8d:09:79:96:a8:f8:31:a8:72:b5:fa:26:
75:97:58:70:cd:2a:43:bf:37:45:1c:2c:7a:01:c9:7d:d7:6a:
6a:2b:7a:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+CnfZoPHneqy3Idv/7wKpGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjY2M4MmE1YmVlM2E5MzYzMzAzYzMzY2RjZGQzNmVmYzY4
ZjhiNDQwHhcNMjYwNzIxMDMwMDE4WhcNMjYwNzIyMDMwMDE4WjAzMTEwLwYDVQQD
EyhjNDc3MTc0NzQxYTk2NmRkZDgyMTFjMGI4NWZjMzFhYTkxN2JkNmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKTrkMoI9U9YiBtL0xbwsusOwQAc
dmhjKsjtnNofnRdGbn5inC3V1uX9hbVbpwvonxPNoYy7sQXc6E08OImxgR7rNNCI
vouQM1TRM8apyR5ZLq/eINIJgE6cA3pat6NppJjWVSUnfzEPu3MaxZPj15rlrsKU
hNRxCVU8fG/+x8PoZtgXy13UPicFuCU1D/unKvsvR6zh9y1tSL0tK7POsGA7+4PM
YjlKMKbEuYmVxU51Lq9t5cahnPzFMWv0Y+rKAZ5QQ6yWnDVRTb3EKmFKAQwInJ5f
KwDewhb/DEIllU9bPpUBtQcSOoCBOJa2g2DUTSH6kM7qsX85APGzA74oBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMR3F0dBqWbd2CEcC4X8MaqRe9bkMB8GA1UdIwQY
MBaAFIzMgqW+46k2MwPDPNzdNu/Gj4tEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lYjVmZDItYjk3NC00N2M5LWI5MjQt
YmViZGExNjA4ZDA5LzEvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lYjVmZDItYjk3NC00N2M5LWI5MjQtYmViZGExNjA4ZDA5
LzEvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqSgrE/n
gphkGgjHIAuJsLUzNZ9Rxxa5wvVrqQ9SfIcFIeMrKiCASyBRGNij5fdKteegEDAA
MWonqJqQy+IddfCTE2YVfZARiQBAD8zRIG5B+ifhX/vadI4IR7vlWuHYJzE5YOEa
GUFO0y45mGIULOfgPlvm02bvjMI5B5REbx+ud2TXLCjpVFhvURfHg0jRbPHyCct3
h4E2KdJtfLNYkm30NXH2ftC8rji09qNdo29WKt6NIrt0jvAuBEbjGut8SywAvCeW
fy/urIyOAzkTuwm4Y/v/fwLZmQ+cQs5ejQl5lqj4MahytfomdZdYcM0qQ783RRws
egHJfddqait68A==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:56:51 2026 by rpki-client