Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
File: jbK0TyPcypwGBL7WkPKKatkBeZk.mft (raw, json)
Hash identifier: q9robemb1Q5Pk/4fHV/u7tilGBwjXQn3MvtLcRiDx18=
Subject key identifier: 0F:A1:28:D3:48:AA:44:FB:4C:A3:E0:2F:E8:53:E9:44:BB:DC:96:44
Authority key identifier: 8D:B2:B4:4F:23:DC:CA:9C:06:04:BE:D6:90:F2:8A:6A:D9:01:79:99
Certificate issuer: /CN=8db2b44f23dcca9c0604bed690f28a6ad9017999
Certificate serial: 019F9EF152783DCC8F44733601090395376E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
Manifest number: 02AE
Signing time: Sun 26 Jul 2026 15:00:42 +0000
Manifest this update: Sun 26 Jul 2026 15:00:42 +0000
Manifest next update: Mon 27 Jul 2026 15:00:42 +0000
Files and hashes: 1: H60TaHzgzIDq5bEuHBb2yyowYNw.roa (hash: MUV9kznaIpAsdXMNwJm4Ji4yLC8b4zqE7vuFtiUPGnQ=)
2: jbK0TyPcypwGBL7WkPKKatkBeZk.crl (hash: q17zgswbDSWO+QmQql4fDcOg1yqERzA6Nz3QbtDFp6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f1:52:78:3d:cc:8f:44:73:36:01:09:03:95:37:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db2b44f23dcca9c0604bed690f28a6ad9017999
Validity
Not Before: Jul 26 15:00:42 2026 GMT
Not After : Jul 27 15:00:42 2026 GMT
Subject: CN=0fa128d348aa44fb4ca3e02fe853e944bbdc9644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:68:a9:3f:76:66:70:e4:1a:da:1e:d7:b8:83:
e3:06:c8:d3:9b:ec:c6:73:f0:04:3a:7b:24:d5:e5:
3e:fe:56:f1:76:b7:b5:1f:ba:61:6c:df:26:cd:d4:
54:da:b7:4d:56:7e:4b:2a:0d:e1:9a:90:2b:e0:14:
74:77:95:ab:5f:37:14:fe:6c:55:55:3b:e6:63:00:
17:07:0e:02:4a:c1:32:8f:3a:3c:b2:37:d6:62:0e:
e4:a2:a3:1d:54:26:46:e9:6d:4b:60:78:cc:e3:1c:
99:8f:25:42:79:68:aa:f2:45:08:54:e6:8b:cd:e3:
7e:f4:21:f5:8c:e1:56:b9:90:19:03:78:88:12:8b:
8e:0f:db:98:00:47:c9:54:f1:f2:22:76:d6:4d:c6:
34:cd:7c:45:c0:cd:9f:41:dc:8d:bc:5b:11:8f:4d:
bc:e2:5d:e7:43:e5:a4:0b:22:b0:a5:24:7e:12:f8:
0b:f0:bf:c5:14:61:6e:a3:11:ba:b5:c1:3d:f4:1a:
e0:f2:ad:12:1f:88:5f:11:29:3e:a5:40:8f:ef:87:
ed:9f:f1:94:56:0d:dc:71:02:03:b9:85:c2:7e:10:
d0:53:b7:3c:bd:3f:eb:80:6f:09:97:f5:f9:86:03:
b0:e8:78:f0:a7:96:78:ac:15:41:41:c2:8f:95:c8:
d3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A1:28:D3:48:AA:44:FB:4C:A3:E0:2F:E8:53:E9:44:BB:DC:96:44
X509v3 Authority Key Identifier:
keyid:8D:B2:B4:4F:23:DC:CA:9C:06:04:BE:D6:90:F2:8A:6A:D9:01:79:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:57:5b:63:3c:fd:23:e9:bb:b5:34:48:f0:16:8a:12:1a:51:
10:68:99:4f:33:ca:c5:5d:d6:8c:e6:d7:31:53:a2:81:19:d7:
1d:a2:43:cc:c0:46:4e:c8:42:6a:6a:2e:e6:4e:f6:4e:0e:1e:
35:c2:1a:b4:04:c1:e5:a9:0b:aa:91:31:23:db:55:1a:65:db:
50:c7:44:40:d1:b1:42:3e:58:98:36:ff:50:d9:76:63:85:4f:
26:ae:ab:2d:0e:7f:00:b3:b5:e4:af:0f:58:4c:d7:ce:93:b3:
1e:70:ec:97:79:31:b8:d3:77:23:59:74:09:92:13:26:23:c8:
4b:49:80:98:02:65:81:61:7d:0f:1a:1b:5b:23:dd:d7:43:35:
ee:ca:8f:c0:33:0c:b5:d5:25:05:e8:44:30:88:a8:df:5c:23:
e6:a3:bb:a5:41:85:63:79:79:30:d8:ee:df:ed:69:5f:36:a7:
2b:bf:3e:cb:c2:20:1a:b0:8f:5a:06:41:3c:e9:dc:ff:d0:69:
e0:6c:8b:79:27:5c:ab:09:9d:19:91:a2:71:63:21:8f:b7:a7:
dc:89:9d:8a:e3:20:7f:c3:8b:3a:de:e0:62:67:7e:93:4d:94:
76:26:c6:49:f2:6f:df:af:a7:73:e8:fe:5b:da:8b:bb:06:32:
34:91:7e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:50:24 2026 by rpki-client