Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
File: _jHd7yXZbISwAaKsUEewTgYKCsM.mft (raw, json)
Hash identifier: SsJGy9dA21LGvlP+6R4ORvpMbeiUN9AbGgt6DMgkQtQ=
Subject key identifier: B3:1F:DB:BF:4E:F1:9E:D0:33:F4:0A:61:59:39:73:5B:6A:C8:9C:45
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 019F84FA8F66DCFD61BC6D1FE3E20D5FBD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
Manifest number: 19C2
Signing time: Tue 21 Jul 2026 14:00:40 +0000
Manifest this update: Tue 21 Jul 2026 14:00:40 +0000
Manifest next update: Wed 22 Jul 2026 14:00:40 +0000
Files and hashes: 1: MBje2Kaa62IBDG3vLdQ11jbu-BY.roa (hash: gjY1RtH2j/aQua697MsSq0fqSF6zUpGLdhWZ8DhMdzU=)
2: Ww9xlTTYnd90caDgEeVmTVfm-BE.roa (hash: 7JRO1QHni0n7t5LFba599MfSp8my+dFKoYt3fvY4Y8A=)
3: _jHd7yXZbISwAaKsUEewTgYKCsM.crl (hash: 2MK8cLU+9e4TPjGia+ESlK3htI7wWFReAngYIyF5H5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:8f:66:dc:fd:61:bc:6d:1f:e3:e2:0d:5f:bd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Jul 21 14:00:40 2026 GMT
Not After : Jul 22 14:00:40 2026 GMT
Subject: CN=b31fdbbf4ef19ed033f40a615939735b6ac89c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:db:c8:b3:54:6e:67:b9:8b:12:74:65:ad:
b6:f2:aa:2d:82:bd:1c:70:93:c5:94:fb:07:b2:be:
7e:5e:7f:b5:dc:2a:68:ba:2c:4c:b0:e1:0c:aa:1f:
d1:87:87:ea:4d:29:bd:f1:07:af:36:03:09:59:0c:
ea:c8:af:55:a8:50:5c:5c:9f:f5:a4:63:dd:98:2a:
5b:4a:a9:ee:04:b8:21:1a:f9:41:76:e6:f3:fe:48:
be:a6:2b:d2:6f:a2:a1:26:c9:32:3e:28:ae:ce:d7:
e9:2e:84:12:d3:4b:15:dc:6b:b7:7f:e3:62:4f:cc:
4f:55:85:4e:c6:c3:ea:ac:bb:90:c9:5f:30:55:4b:
cc:de:1d:53:58:87:d3:02:40:cd:3f:2f:61:c4:68:
00:fe:d2:70:7b:ee:14:8b:a9:2e:4e:3f:11:42:1b:
00:30:9e:2c:8c:9b:09:5d:4e:bc:61:04:1e:5e:16:
17:0c:76:f6:86:eb:fe:f0:39:f1:7b:5b:eb:23:b5:
2c:c3:f1:ec:88:3d:33:46:03:c7:a1:2a:73:f8:80:
78:c9:08:37:e6:01:0f:01:f3:c1:64:5a:1d:e8:7f:
8f:45:9c:bb:6c:33:c0:71:94:d5:42:13:12:d7:bc:
82:e5:a9:fc:24:c0:97:54:4a:58:96:e1:44:15:3e:
ba:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1F:DB:BF:4E:F1:9E:D0:33:F4:0A:61:59:39:73:5B:6A:C8:9C:45
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a1:f9:8f:68:a7:3e:67:c9:e3:b5:b6:cb:0c:7f:b8:26:a8:
bc:5e:6a:f0:a6:9c:d2:34:8a:d0:58:84:5f:ec:d5:26:1f:f6:
bc:81:a1:c5:4c:4b:22:15:d8:c9:01:28:44:a9:9b:3f:d2:d3:
87:9c:e2:72:f5:bb:fe:e6:cb:d5:43:c3:75:05:b9:0b:94:44:
77:99:6e:58:09:6b:b4:b4:3c:6f:28:39:65:57:ce:d4:8e:5a:
67:26:7a:6c:0b:ed:18:5a:f8:c0:ea:71:63:69:17:de:62:c2:
fd:fa:0d:29:e2:4f:ed:b2:5f:ae:10:b2:99:d3:c8:2b:c8:c8:
f1:2e:a6:4a:79:03:52:83:0a:83:73:06:7a:fc:19:b5:90:68:
4a:03:e5:6b:a8:01:4d:20:71:ff:77:60:49:29:83:de:26:4e:
b8:a8:91:17:dd:c9:de:86:9f:8c:4c:bb:32:c6:52:7c:b6:f8:
90:0f:07:60:f1:df:7a:70:60:c0:79:3f:ef:4c:ee:70:b4:c5:
21:85:99:07:f8:0a:47:9e:d2:14:59:bc:e9:06:db:00:6e:fb:
e9:f5:8e:a7:75:3e:e6:04:80:fb:e0:54:fb:23:7b:10:9a:33:
4a:8a:71:99:bb:70:28:ae:d2:87:81:c7:67:07:79:aa:4d:23:
60:76:a4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:49:53 2026 by rpki-client