Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier: QKHMAhr4ow94/MvG3TwY/KVc2OhTMzoykRM/ATo9K+U=
Subject key identifier: 4E:18:CB:28:73:EC:50:E7:AE:77:83:CD:8E:35:A5:0D:40:76:D4:FF
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 019FA3733C809150893E7E7A700E1EEAC676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number: 14F2
Signing time: Mon 27 Jul 2026 12:01:05 +0000
Manifest this update: Mon 27 Jul 2026 12:01:05 +0000
Manifest next update: Tue 28 Jul 2026 12:01:05 +0000
Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: dOiysAz5ICJk3CGX/0JmSWvRW2Uh4GFlb32OQsV4i7k=)
2: hWkmko9vUlZH-VtlGHJ4hUuAaoY.roa (hash: WFu8HTGZdnXJYLpBmsk/WG3sNIIitKWRuo38WyAjDOU=)
3: rHfKeO-9l9W24wGxoHPVca3O4oc.roa (hash: DOnDxDR60+CHvKP7QQ/+3OYee8LrWlLSO/yOlx6md0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:73:3c:80:91:50:89:3e:7e:7a:70:0e:1e:ea:c6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Jul 27 12:01:05 2026 GMT
Not After : Jul 28 12:01:05 2026 GMT
Subject: CN=4e18cb2873ec50e7ae7783cd8e35a50d4076d4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:3a:07:9c:e7:0e:5a:24:bf:46:1f:e7:3c:
7a:1f:84:a0:91:58:28:0b:46:2e:68:34:a6:62:4e:
a2:24:29:5d:63:f5:2a:dc:91:1d:1b:84:4e:c6:5e:
82:8a:46:c1:08:04:46:5d:89:4a:53:d7:a5:8e:19:
72:6c:84:93:d3:89:67:58:96:c1:c9:ea:ef:f3:23:
09:31:f7:17:57:9f:e3:e9:1a:c5:3b:ac:54:e8:bd:
91:27:7d:23:66:d0:fe:00:66:6f:a0:d0:92:f1:39:
02:f3:28:5b:c3:16:5d:ec:3b:72:f5:c0:82:79:c2:
39:50:87:ce:26:c7:13:47:28:5f:7e:0d:51:f2:50:
4f:b7:fc:be:1b:f5:d5:6b:66:1d:2c:46:3c:ca:36:
c6:0f:94:26:37:88:f6:88:43:63:39:78:bf:1c:0c:
0a:d4:ae:ba:d1:eb:53:c0:12:21:4f:0e:52:01:1c:
fb:ea:7a:b8:98:06:9c:09:c2:40:ad:03:28:e6:7b:
31:aa:a5:ae:33:5e:5d:1d:8e:af:b4:53:7a:96:3d:
1f:47:cf:d0:7e:9c:8f:67:3d:93:a3:09:ed:50:1b:
96:84:d0:3b:5e:6b:49:43:9c:c5:e3:b7:f3:22:ba:
f0:38:92:bc:a7:25:3a:73:06:d2:a6:9f:6f:58:0e:
fc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:18:CB:28:73:EC:50:E7:AE:77:83:CD:8E:35:A5:0D:40:76:D4:FF
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e0:e3:42:4a:de:49:23:52:06:d9:0c:c7:22:44:82:73:c3:
b5:20:8a:1c:ff:4f:74:61:bc:51:86:09:15:21:ea:2e:09:4e:
31:4f:9d:9c:2e:2e:78:b9:74:8e:ac:06:da:e0:e9:aa:2f:03:
23:0b:63:28:4a:75:16:44:42:0b:90:74:32:f5:ad:75:7b:9f:
24:5f:d1:f8:21:25:f6:64:77:37:7a:7d:f1:ad:d5:4f:a3:89:
33:24:6e:53:e6:29:b9:b1:e2:5b:4f:7f:29:a2:ff:a3:f0:bf:
03:6f:70:bb:21:17:ad:ac:08:68:78:eb:95:9a:88:4d:ff:7d:
3e:6b:f4:e9:42:5c:ee:0a:59:e8:cc:24:92:ce:67:29:a3:a8:
8b:3c:1f:5f:e7:95:30:07:20:12:b7:f8:c7:29:37:db:7f:f1:
b1:46:ec:e2:1d:92:34:da:a5:ee:1d:d3:0b:f8:e9:1a:c0:04:
2b:71:d2:07:68:31:e1:05:7c:69:50:4f:75:c3:a9:08:ae:9a:
3f:5e:02:ab:b0:2d:54:30:2a:2f:65:aa:3f:4e:ff:49:6d:ba:
07:51:54:e5:8b:72:45:d3:d8:85:36:78:5b:f4:fc:e0:fc:24:
ce:4b:98:70:17:2e:a4:43:18:2e:a8:23:13:a3:cf:3f:34:fe:
d5:dd:ec:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:50:20 2026 by rpki-client