Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.mft
File: JftDG4tBR2PuM_rfKY5GoHjjJDI.mft (raw, json)
Hash identifier: q7TvfQ4R9GIZ+DZ7JVn64s02aDtG1iM13BoFoBovzYk=
Subject key identifier: 58:96:73:54:B7:AC:B3:E8:3C:C6:A9:FB:8F:53:42:EB:AF:92:AF:F1
Authority key identifier: 25:FB:43:1B:8B:41:47:63:EE:33:FA:DF:29:8E:46:A0:78:E3:24:32
Certificate issuer: /CN=25fb431b8b414763ee33fadf298e46a078e32432
Certificate serial: 019FCB5D10827A6F0F59CB166EED90A313AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JftDG4tBR2PuM_rfKY5GoHjjJDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.mft
Manifest number: 5E
Signing time: Tue 04 Aug 2026 06:01:41 +0000
Manifest this update: Tue 04 Aug 2026 06:01:41 +0000
Manifest next update: Wed 05 Aug 2026 06:01:41 +0000
Files and hashes: 1: 1-8zDLGIBUdttuzongUFSJyrBHyI.roa (hash: NA/2OMk9mJUUPDfOuqk/HqeM1Jw1QwBMqIBpT7majag=)
2: JftDG4tBR2PuM_rfKY5GoHjjJDI.crl (hash: zIth6CBuEkQFZKX0/N2zqiqlofXsGuyXYlsUl1Tj/UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JftDG4tBR2PuM_rfKY5GoHjjJDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 06:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:5d:10:82:7a:6f:0f:59:cb:16:6e:ed:90:a3:13:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fb431b8b414763ee33fadf298e46a078e32432
Validity
Not Before: Aug 4 06:01:41 2026 GMT
Not After : Aug 5 06:01:41 2026 GMT
Subject: CN=58967354b7acb3e83cc6a9fb8f5342ebaf92aff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:48:ae:48:93:14:09:c6:70:e5:ac:7b:12:
f5:9a:45:b3:db:cf:72:e1:a3:3f:60:ac:b3:70:21:
47:c2:94:6e:33:de:c7:9a:cf:c2:28:8e:93:d1:fd:
db:ca:18:4c:95:a0:e0:e5:05:7a:20:b4:be:7f:78:
43:04:c6:64:27:8d:d0:20:0a:0e:f4:49:e3:d6:5f:
d2:58:ad:a5:c6:23:5f:16:a2:94:85:a4:96:1e:b0:
77:01:c8:8b:3f:9c:2a:51:7b:76:36:8c:e9:9f:aa:
65:52:04:f2:d6:7c:1b:64:ee:02:13:d5:58:f8:ba:
92:b8:c8:eb:a2:00:56:8f:31:a5:45:74:ea:95:14:
86:ee:af:03:ca:62:77:15:c6:a9:b4:d2:e7:27:c3:
6b:d4:f0:2e:39:ea:1d:bd:09:3b:de:1c:2a:2d:49:
2f:a1:57:a4:f9:32:44:f9:ad:03:4a:95:fb:6d:d0:
a8:af:9c:70:60:47:ba:80:e6:a4:92:63:e3:59:ea:
81:44:05:d0:65:92:57:8b:d3:fc:6d:cf:84:44:5b:
3c:3a:69:84:05:1f:dd:ed:c1:a4:e4:26:0d:f5:4e:
58:91:15:91:a2:7c:bc:75:ca:2c:05:b7:3e:df:ad:
78:b7:40:f9:42:78:e5:c1:33:ad:a7:fe:bd:73:f2:
ab:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:96:73:54:B7:AC:B3:E8:3C:C6:A9:FB:8F:53:42:EB:AF:92:AF:F1
X509v3 Authority Key Identifier:
keyid:25:FB:43:1B:8B:41:47:63:EE:33:FA:DF:29:8E:46:A0:78:E3:24:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JftDG4tBR2PuM_rfKY5GoHjjJDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:87:81:49:b4:41:1b:6e:60:f1:cd:4c:46:fa:6d:28:1f:34:
de:cd:7a:67:58:21:80:7c:f3:f0:01:97:a1:27:a7:e4:9b:93:
0d:4c:b3:fd:35:76:d5:f6:5b:c7:56:53:05:19:a8:65:0f:4a:
40:a3:7d:7f:2c:67:77:93:9d:54:d2:c3:49:ae:fa:7f:eb:8b:
5c:ad:5c:0d:ec:14:a4:54:74:d5:32:a6:95:e1:9d:ce:3d:0d:
a9:eb:90:46:c0:ab:25:c3:63:f8:3e:59:d9:c8:6c:55:53:46:
e9:ae:b7:5b:5a:06:72:d6:16:71:67:cc:16:19:0a:13:73:57:
f7:a3:81:a9:b7:c9:7c:72:e1:ed:f1:f2:c2:53:d7:a2:c0:41:
fe:c2:dc:fc:48:ce:5b:b2:a9:75:69:bd:de:1b:5b:41:f5:51:
c7:11:a6:2d:f6:67:75:86:77:13:44:d6:81:d6:10:82:b7:83:
90:f6:15:69:12:a4:54:f9:c5:de:4d:cd:27:7d:35:de:44:81:
09:97:ee:df:44:4a:47:7a:3f:83:90:61:c2:35:f6:f5:a2:ea:
51:ea:c5:e7:2c:e2:53:24:e1:77:a1:8a:4c:4c:46:57:33:f1:
87:f3:6f:6d:c4:f5:0d:84:74:7b:f5:13:03:35:72:64:1e:a7:
40:6d:77:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:53:12 2026 by rpki-client