Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: 7NuzCNJxRv5IGsImUqn5q85K9zlNM6hRiOgbnuCsVNM=
Subject key identifier: EB:A8:6F:1D:A6:60:68:6E:D1:D1:9C:8E:79:93:33:9A:34:CB:0B:4C
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 019F818BC46B5054F80D7D417DC53F8B1E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 148E
Signing time: Mon 20 Jul 2026 22:00:48 +0000
Manifest this update: Mon 20 Jul 2026 22:00:48 +0000
Manifest next update: Tue 21 Jul 2026 22:00:48 +0000
Files and hashes: 1: 0MDmf31Geq28sqW5uhK6N30LoZg.roa (hash: EpA+5vkgIFjeVI3itIuTpuLJ6aAzCK55k0xhYt0MpnY=)
2: 2pu1vkKFjna4Dm_cwSi5R4FE2g4.roa (hash: FM1p/9Yj7KBBXqnWBSoCV4VhHGxp22FujL3gdqNAgz0=)
3: Xvepx433VAtdgPI_baO5XGR3A8U.roa (hash: Hb64A6S05X/K5EFwUyHoMmk1FNOpGqOBloL7O8dOS+s=)
4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: /Fyv1vzOphd1rMTX73WzCtLiU/HwzfZpYPciPekeR4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:8b:c4:6b:50:54:f8:0d:7d:41:7d:c5:3f:8b:1e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Jul 20 22:00:48 2026 GMT
Not After : Jul 21 22:00:48 2026 GMT
Subject: CN=eba86f1da660686ed1d19c8e7993339a34cb0b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:45:f0:7a:46:17:d5:67:8e:62:02:65:b2:0d:
23:bf:4a:bb:fb:ec:4b:ee:64:20:0b:85:ee:fa:33:
de:ae:b1:b5:c9:05:1f:e9:1b:34:47:4a:03:62:21:
c6:bc:08:39:55:1e:58:af:a1:f2:b0:c1:27:51:16:
1d:70:db:1b:ee:95:f8:60:5b:56:c4:4a:42:90:cd:
fc:70:de:d9:73:5b:61:56:aa:69:4d:90:7e:91:a6:
dc:4e:b4:99:45:f8:fd:8b:8d:fe:02:fa:62:10:99:
e5:1e:4d:ff:75:93:04:7e:6e:cb:77:dd:5b:f4:97:
e3:24:ad:d5:48:10:67:49:71:71:68:4e:f6:07:29:
ac:25:d0:a7:a5:82:71:29:2f:18:9b:73:08:d7:ce:
07:a1:e0:19:d1:2a:bc:ee:66:44:fc:f7:2c:51:02:
e9:a6:40:c3:5f:e7:c4:cc:61:42:d8:a0:f8:25:aa:
71:bd:bd:d3:4d:3a:9e:26:d6:0f:eb:a0:a5:dd:c3:
de:a6:a7:9e:7c:02:4d:11:0b:84:9a:ce:db:49:8c:
af:76:7f:ed:7a:93:04:dc:48:c4:4c:2b:c4:46:50:
5a:57:2f:2a:2b:80:f7:d8:0e:35:04:79:99:ab:83:
98:43:30:96:86:c5:3e:ec:25:6c:f5:a5:cd:58:a3:
02:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A8:6F:1D:A6:60:68:6E:D1:D1:9C:8E:79:93:33:9A:34:CB:0B:4C
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:08:23:a1:fc:61:68:e7:70:af:45:da:3a:a9:7e:2e:f8:99:
5d:6c:0a:f4:7e:9e:4f:b2:3d:9f:01:cb:ef:0a:80:13:1f:97:
40:59:04:48:57:96:42:9e:bc:e2:1b:c4:4f:82:77:b4:fa:99:
f4:24:71:64:01:73:71:e8:53:aa:05:ef:b3:07:76:1a:8b:4b:
71:67:ce:3e:85:b5:19:f5:76:33:e9:5e:75:0c:5d:27:86:a6:
7c:94:0d:a9:af:1b:6a:d1:d5:82:00:92:f1:8f:53:64:a0:bb:
b0:0b:09:42:44:58:2d:66:f9:32:fe:bc:4a:fb:44:cd:1c:59:
47:d0:bd:69:20:94:4f:68:25:8d:3b:36:fc:d8:91:f0:f4:37:
05:07:41:43:68:b4:e5:06:83:03:6f:d0:7b:66:0e:09:a1:ca:
21:0e:3d:6b:b2:bc:d1:08:4a:90:0f:9b:69:d6:7f:72:68:47:
41:7f:fe:a0:c3:90:8d:5a:13:9f:0f:72:88:9f:d3:ee:4e:e3:
5b:57:52:46:4a:98:1b:ab:f8:a1:13:71:7e:ef:94:3b:a1:05:
9f:2e:37:49:ee:78:79:ef:00:22:b7:a8:f8:c7:b4:22:35:7f:
c3:42:bc:d0:9a:9f:90:96:3e:0e:fb:40:e6:83:58:0b:59:be:
47:f6:35:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:50:37 2026 by rpki-client