Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
File: JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json)
Hash identifier: wSHsL/pwc9EkMtksX417t5WSf360YrVeZM1epGc3CX0=
Subject key identifier: 49:11:1A:BD:A7:66:9F:61:E5:F1:64:11:39:22:BB:EF:A6:EE:5F:60
Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
Certificate issuer: /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Certificate serial: 019F853174E73E70AD08EF791B7F5C01C2E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
Manifest number: 19C3
Signing time: Tue 21 Jul 2026 15:00:38 +0000
Manifest this update: Tue 21 Jul 2026 15:00:38 +0000
Manifest next update: Wed 22 Jul 2026 15:00:38 +0000
Files and hashes: 1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: TLS/yErlw5RznVbXpFrl48we7Spwj1kP3G/MSbg6Mt4=)
2: m0Ovx0Sqw4Mvmnjc_rT54ARItq0.roa (hash: nkxhqGEnqwsqr1mf5UgG9VF9xVU0Wk8zI/Hwu2iNPWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:74:e7:3e:70:ad:08:ef:79:1b:7f:5c:01:c2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Validity
Not Before: Jul 21 15:00:38 2026 GMT
Not After : Jul 22 15:00:38 2026 GMT
Subject: CN=49111abda7669f61e5f164113922bbefa6ee5f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6e:d1:59:20:9e:f9:d0:04:11:2d:f3:7b:b8:
6c:a0:0b:cc:cc:a8:85:10:4e:88:34:1e:47:b1:9d:
b5:63:6b:37:c1:f8:ab:d4:88:a1:6e:ee:87:bb:2d:
15:d0:d4:a1:9d:a1:0d:b9:73:1f:e6:73:0e:54:d9:
12:1c:1a:a1:60:37:6c:7f:31:98:c8:d3:a7:d0:93:
8f:14:a7:0a:d5:7b:36:a4:60:08:c4:b2:07:de:6a:
25:59:8f:94:4e:62:70:c1:41:5d:2c:88:37:cb:ea:
a3:55:03:66:c8:1f:52:78:44:3d:43:6a:c7:de:8f:
2a:65:32:ac:64:c7:8e:36:56:d1:d1:87:39:2f:a6:
df:61:40:fc:b1:51:df:0e:18:39:68:86:fb:07:ac:
03:44:e0:27:25:b9:8b:ce:ef:48:9a:6b:64:6c:8d:
56:47:4b:d8:fa:c6:76:6a:35:ab:51:df:24:95:4a:
9b:16:ea:6f:ca:66:c2:da:e8:2c:f3:86:09:e3:1d:
cb:27:53:79:52:5d:18:00:f7:2a:16:c7:2c:67:1a:
7b:e0:a0:9d:91:e2:02:9a:40:65:5a:8a:34:6d:0d:
f7:7b:4c:7e:73:61:c4:99:80:c6:5b:af:21:d1:bd:
bf:90:ad:85:0a:4d:55:4a:ef:f8:57:23:76:fd:94:
19:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:11:1A:BD:A7:66:9F:61:E5:F1:64:11:39:22:BB:EF:A6:EE:5F:60
X509v3 Authority Key Identifier:
keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d8:6e:6c:78:c3:31:e6:09:c9:d6:3c:1b:c3:fb:9c:10:ea:
54:42:4b:92:e0:b5:67:a0:9b:a7:16:4d:68:5e:19:14:7b:4f:
1c:64:6a:3f:1b:c8:ab:d0:8c:18:67:3a:e6:b1:05:07:9f:19:
73:93:f5:06:4b:dd:41:0d:94:16:f8:f3:36:fe:3d:b1:af:3d:
ec:66:41:8d:2e:11:29:37:13:a0:31:c3:b2:7b:80:33:2d:d4:
fb:48:14:78:a8:4e:0b:43:24:19:50:62:5d:19:ac:96:0a:fe:
a4:80:af:17:18:d7:58:69:23:f7:64:2a:ba:79:d9:0b:08:73:
f4:88:7d:90:5e:25:95:d4:79:69:f7:d2:80:ed:21:8e:f6:23:
12:7c:69:f3:86:34:7d:05:89:30:7d:2a:99:30:34:3e:d8:f9:
4a:ce:79:fb:16:33:83:96:97:14:49:a5:c4:5e:dd:f0:b5:2f:
91:c3:e1:9a:bf:d1:01:a4:04:1f:9b:ae:e6:3b:cb:d4:12:9a:
96:9b:80:35:c1:76:a0:64:82:2c:92:bc:e9:b7:e9:32:c3:56:
8f:d9:27:2e:c9:88:5c:ee:fe:d9:f2:21:5a:70:80:65:fc:26:
01:b0:64:5d:a7:ca:8d:8b:58:b2:a5:f5:b2:aa:05:df:44:4e:
d4:80:d2:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FMXTnPnCtCO95G39cAcLoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0N2JmMGI5ZDcyOThhMTZiOTg2ZmQ2OTU0ZjBhNDQ1ZjJl
MjEwM2MwHhcNMjYwNzIxMTUwMDM4WhcNMjYwNzIyMTUwMDM4WjAzMTEwLwYDVQQD
Eyg0OTExMWFiZGE3NjY5ZjYxZTVmMTY0MTEzOTIyYmJlZmE2ZWU1ZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m7RWSCe+dAEES3ze7hsoAvMzKiF
EE6INB5HsZ21Y2s3wfir1Iihbu6Huy0V0NShnaENuXMf5nMOVNkSHBqhYDdsfzGY
yNOn0JOPFKcK1Xs2pGAIxLIH3molWY+UTmJwwUFdLIg3y+qjVQNmyB9SeEQ9Q2rH
3o8qZTKsZMeONlbR0Yc5L6bfYUD8sVHfDhg5aIb7B6wDROAnJbmLzu9ImmtkbI1W
R0vY+sZ2ajWrUd8klUqbFupvymbC2ugs84YJ4x3LJ1N5Ul0YAPcqFscsZxp74KCd
keICmkBlWoo0bQ33e0x+c2HEmYDGW68h0b2/kK2FCk1VSu/4VyN2/ZQZ6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkRGr2nZp9h5fFkETkiu++m7l9gMB8GA1UdIwQY
MBaAFCR78LnXKYoWuYb9aVTwpEXy4hA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mODM2MjAtOTlhYy00YTQxLWFkMGMt
YmUwMWQ2OWMwMzNiLzEvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9mODM2MjAtOTlhYy00YTQxLWFkMGMtYmUwMWQ2OWMwMzNi
LzEvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9hubHjD
MeYJydY8G8P7nBDqVEJLkuC1Z6CbpxZNaF4ZFHtPHGRqPxvIq9CMGGc65rEFB58Z
c5P1BkvdQQ2UFvjzNv49sa897GZBjS4RKTcToDHDsnuAMy3U+0gUeKhOC0MkGVBi
XRmslgr+pICvFxjXWGkj92QqunnZCwhz9Ih9kF4lldR5affSgO0hjvYjEnxp84Y0
fQWJMH0qmTA0Ptj5Ss55+xYzg5aXFEmlxF7d8LUvkcPhmr/RAaQEH5uu5jvL1BKa
lpuANcF2oGSCLJK86bfpMsNWj9knLsmIXO7+2fIhWnCAZfwmAbBkXafKjYtYsqX1
sqoF30RO1IDSdA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:02:50 2026 by rpki-client