Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: IwyltbQdWGrS2zWS8e8SI5J+Y5kYpLs4FOxS2CBCt8U=
Subject key identifier: E9:51:7B:1B:6A:4B:FF:17:80:9B:72:20:6C:15:EB:60:A3:24:C4:91
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 019F86B25691E3AEE84A98C237F64CAE9171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 0CDC
Signing time: Tue 21 Jul 2026 22:01:02 +0000
Manifest this update: Tue 21 Jul 2026 22:01:02 +0000
Manifest next update: Wed 22 Jul 2026 22:01:02 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: QXs+m1w7jHTb1mU4W+eWg2QDT1y8MXfzWovgX8zKsfk=)
2: b4HgcSuFF78g3KojbGnfcJ_HWow.roa (hash: T5A48IHIu6Siqa4yHRK+sf9a+qlYjIQQwfP6VgKo5VA=)
3: grRs4RivLN7cpUB3UyiXGSSLhPU.roa (hash: uHkhelnd0+okWLXV2TG7W6yzacFWsktXmESp0qKxtTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:b2:56:91:e3:ae:e8:4a:98:c2:37:f6:4c:ae:91:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Jul 21 22:01:02 2026 GMT
Not After : Jul 22 22:01:02 2026 GMT
Subject: CN=e9517b1b6a4bff17809b72206c15eb60a324c491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:09:72:6b:d7:c4:f6:2b:29:39:38:9e:d2:66:
92:13:32:f0:2c:53:c7:c3:9a:d2:ec:c7:a0:4f:34:
22:12:d7:fa:c5:3b:94:1b:39:e5:25:c5:dd:1f:72:
4a:7b:82:8f:4d:5e:f9:14:38:37:6e:16:d8:48:00:
53:5f:0c:d7:9b:b3:dc:af:2b:55:9f:a9:49:8b:72:
d0:df:c3:bf:5b:18:0a:8b:21:2b:a3:ad:f6:2d:b8:
87:b6:73:56:ef:cb:28:e1:83:80:23:93:de:0c:8a:
1c:f6:0a:d2:8a:e8:7e:c2:df:b4:dc:ac:8c:8a:c2:
17:87:33:20:ee:77:9a:f5:1a:0b:f7:4c:bb:2e:74:
c4:38:0f:23:a5:c0:1a:67:9e:12:2e:16:7e:74:ea:
26:14:46:31:67:d6:f6:dc:1e:4d:86:4a:61:fd:66:
91:51:58:62:bc:19:12:31:fb:68:6c:30:9b:0c:7a:
c6:c7:11:b5:86:cf:df:17:6b:34:77:fa:5e:78:bb:
89:60:4e:30:cc:f4:6e:5c:37:8d:17:e4:b4:48:c7:
66:6e:7f:90:a7:84:2a:87:8c:c6:6f:94:0e:4b:72:
5b:aa:9f:0f:4f:c6:48:8c:1c:23:65:2e:a2:d5:3b:
23:22:f4:ec:1b:9c:f7:f2:2a:4e:20:a9:0a:f4:99:
d1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:51:7B:1B:6A:4B:FF:17:80:9B:72:20:6C:15:EB:60:A3:24:C4:91
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ff:24:02:13:6f:b9:e9:61:83:02:f5:66:2a:a2:74:72:d1:
6d:a0:1c:03:e6:e1:e2:1a:e8:92:51:d7:23:ad:f2:47:fa:76:
67:ae:b0:bb:b6:d9:ff:28:6f:99:ab:8c:db:79:35:53:59:9f:
10:40:8b:22:79:27:e3:e0:81:3b:9f:53:f9:84:c2:dc:bd:6f:
fd:a3:5f:a3:c6:d3:ba:30:39:8d:56:e5:4f:8e:0f:d1:bc:3f:
0e:04:a3:f8:04:30:3e:de:fd:12:19:30:82:62:1a:b3:12:16:
62:b2:fa:e7:b7:08:de:13:82:f3:19:d7:75:a1:de:23:a1:c4:
37:02:20:36:6c:d4:29:83:48:f3:de:c9:98:69:34:97:7e:b5:
56:73:20:9d:06:be:84:02:ed:b4:5b:f2:8a:d5:81:f9:86:d0:
bc:55:0c:75:bc:51:82:a9:5c:aa:4c:9a:f9:57:2b:e1:b6:0f:
a7:3e:14:61:83:56:55:41:03:74:9f:d2:2c:10:aa:36:db:eb:
4f:be:b4:6b:4f:e9:5c:79:f5:f1:30:f2:4e:7e:c3:1f:f6:d8:
e5:89:4b:1e:a6:49:94:0c:94:f1:4d:1d:90:fa:44:2e:8a:2f:
30:43:ca:a4:95:22:73:b0:22:e7:cc:1e:39:d1:9c:bb:e5:12:
6c:71:53:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:08:39 2026 by rpki-client