Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
File: jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json)
Hash identifier: mBmszs2W8rGWnmaDfQEnEwrdDe/QQpMpM1TJSNmSeKk=
Subject key identifier: EA:8D:02:48:8D:3D:32:B4:81:00:24:29:77:9F:60:4C:CA:FC:A1:96
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial: 019F86448890C95E62D850C4643DB33A50DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
Manifest number: 11DE
Signing time: Tue 21 Jul 2026 20:01:06 +0000
Manifest this update: Tue 21 Jul 2026 20:01:06 +0000
Manifest next update: Wed 22 Jul 2026 20:01:06 +0000
Files and hashes: 1: a8MwW9uA1QblypP4WtvHf2_buTE.roa (hash: KOPlkZDXHkxKuQQUEqNV5mrWVVkmRluPORCXFGTA7CA=)
2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: Y8CdrJarDTxGKUGFsldVyhs86VfWIVKC9CJGskPiy/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:88:90:c9:5e:62:d8:50:c4:64:3d:b3:3a:50:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
Validity
Not Before: Jul 21 20:01:06 2026 GMT
Not After : Jul 22 20:01:06 2026 GMT
Subject: CN=ea8d02488d3d32b481002429779f604ccafca196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:af:15:7e:60:d2:92:7d:7f:d8:67:2e:de:
d8:15:dc:ee:84:89:30:8f:6f:7a:1f:2a:28:28:28:
dd:10:bd:69:83:57:93:d3:ad:7a:e2:d3:da:db:1d:
77:24:64:89:09:f9:08:0f:f7:03:e3:d4:19:c2:9a:
30:51:98:e2:b5:01:30:2d:c6:3b:04:5f:c6:ec:50:
65:04:ca:96:77:14:29:61:2d:a5:38:20:75:7e:79:
1b:14:06:ac:7e:3d:8c:01:65:29:94:75:ce:a3:51:
da:7b:32:5b:9c:74:ac:5a:52:1d:66:68:ee:d1:7b:
d4:a1:0c:4b:47:bf:f6:c6:09:92:3f:e3:80:7e:c5:
32:3d:92:06:d2:d6:c0:27:36:db:0d:31:ea:ba:43:
69:49:e6:a4:6e:cb:9c:ad:dc:82:95:84:65:23:c8:
05:94:44:62:89:29:80:95:d1:12:fa:ca:b2:5f:f1:
e8:f0:c3:82:53:5a:c3:9a:56:c5:d1:75:f8:25:d1:
e8:b8:dd:1f:4a:c6:cf:41:2b:e1:25:29:07:1f:8b:
3a:a4:8e:98:2f:bb:c0:b1:cd:8b:b2:15:46:e2:8f:
b3:10:56:ed:ff:fe:d3:73:5d:be:fa:c3:37:b6:66:
18:55:66:fc:ce:71:62:d6:93:d9:83:ca:95:c8:10:
e1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8D:02:48:8D:3D:32:B4:81:00:24:29:77:9F:60:4C:CA:FC:A1:96
X509v3 Authority Key Identifier:
keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ba:c7:8b:63:ed:56:84:e7:5b:6c:3f:5a:c3:45:9b:30:15:
66:22:cb:df:e8:fc:ad:95:08:17:70:53:43:23:bb:c8:47:41:
c2:4b:35:af:27:ed:cc:8f:ff:21:70:fd:46:23:a9:f9:54:ab:
4f:09:e7:0f:5a:f0:17:7d:5f:a0:dc:c4:93:f7:07:3e:b5:a1:
1a:d6:09:ea:e8:0e:91:db:52:98:fe:d5:f9:df:d4:d3:1a:67:
55:32:42:30:be:c5:4f:40:cf:dd:06:35:0a:66:e4:da:9c:62:
b6:b6:ab:76:b4:36:e7:d5:f3:75:33:ed:3b:8e:cd:af:92:8a:
2b:f2:ed:6c:79:63:b5:4c:3f:4c:f1:3d:c1:7d:67:58:74:75:
01:b3:86:65:e3:72:ae:4f:7c:46:4b:bb:e7:2d:70:6f:ea:98:
c2:b9:0b:4b:9c:75:dc:72:ac:81:04:46:e0:56:3c:1e:f7:8f:
36:49:9d:30:66:41:6e:f4:2b:97:af:59:ee:f4:c8:3e:a1:44:
0c:1a:89:80:c9:e8:2c:d0:7d:0d:b0:e5:9f:d4:c2:42:80:43:
18:87:fb:d9:ad:80:75:ff:21:a4:ed:e6:23:45:7a:f6:00:c2:
8a:89:53:b1:f5:9f:d0:0e:12:cb:88:3d:5a:16:7f:a9:42:3e:
c1:e2:22:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:39:35 2026 by rpki-client