Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
File: JfzJXxkPb63_o5NBMcdMs6BojXI.mft (raw, json)
Hash identifier: yxe4bFr0+wA9RpPkCB6HBe1fW4aFpXKEadqTNFMgXdE=
Subject key identifier: 78:A3:B1:8C:CE:EE:7B:44:3F:B5:89:88:75:62:40:23:EF:47:DE:E5
Authority key identifier: 25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
Certificate issuer: /CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Certificate serial: 019F9F2802E925D39DCF1B1B94DF823D6576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
Manifest number: 01AA
Signing time: Sun 26 Jul 2026 16:00:27 +0000
Manifest this update: Sun 26 Jul 2026 16:00:27 +0000
Manifest next update: Mon 27 Jul 2026 16:00:27 +0000
Files and hashes: 1: JfzJXxkPb63_o5NBMcdMs6BojXI.crl (hash: SYVZ9rw32gYjwDHUMHAQHc1BsO+2GJ/1453ChUA/G5o=)
2: g4SpKvZLDrCSSEc4j2eY2sgyR8k.roa (hash: F6VZpsG6B4dQY8+6I93tdHS61Qfv0yiT02WGdhA/ATs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:02:e9:25:d3:9d:cf:1b:1b:94:df:82:3d:65:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Validity
Not Before: Jul 26 16:00:27 2026 GMT
Not After : Jul 27 16:00:27 2026 GMT
Subject: CN=78a3b18cceee7b443fb5898875624023ef47dee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:0d:32:43:e8:6a:06:3a:38:87:ea:2a:a1:
d9:72:15:43:4c:98:c6:53:ea:af:df:ee:fd:bf:e2:
00:75:be:08:bd:97:38:97:27:f0:8d:7b:5c:54:10:
a8:ea:1c:05:36:8b:37:f5:75:1f:fe:45:33:1f:a3:
1e:8b:fc:bc:48:ef:ec:58:8b:3c:fe:ce:09:7e:d4:
9e:8d:70:1a:4e:ba:a4:93:b3:8a:53:59:3c:8d:6c:
58:e3:9e:b1:22:81:c7:3c:f5:21:3c:5c:23:6d:dc:
05:9b:92:39:9e:80:93:56:66:83:5b:55:8d:f0:1b:
67:9e:1e:c0:3c:b8:ec:2b:fc:c5:46:53:e6:d4:2e:
45:35:b8:aa:1d:ec:f1:50:b3:d9:3d:1a:aa:b6:3e:
d0:d6:5a:49:e0:4f:65:f4:af:58:99:49:49:a6:ea:
0f:11:68:89:0e:c5:6e:e7:2c:76:e2:64:a3:d7:70:
fd:95:d8:22:5e:a4:2f:74:a3:d4:12:b1:d1:07:c1:
1d:52:80:21:53:0a:90:17:b8:64:4a:78:3a:fc:4d:
94:70:df:77:ed:9a:8c:6e:74:7f:dd:6a:4b:5e:93:
eb:99:75:8e:30:1d:6b:75:e0:c0:14:56:14:1a:d9:
91:05:42:08:45:66:6f:84:ac:69:f6:af:1c:47:e9:
31:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A3:B1:8C:CE:EE:7B:44:3F:B5:89:88:75:62:40:23:EF:47:DE:E5
X509v3 Authority Key Identifier:
keyid:25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:58:4b:8b:e8:02:0b:f3:60:d3:eb:9b:f2:8a:c0:2d:a7:09:
bf:30:2f:0d:fc:e5:15:04:66:f6:e0:a2:bc:82:44:91:1c:72:
55:38:d5:7c:c7:9f:d2:26:05:e0:e2:d3:d1:d2:a6:31:c3:aa:
54:31:36:58:f7:be:db:ef:12:69:12:47:29:52:26:31:a5:d8:
b2:2d:90:43:80:08:8f:5b:1a:14:62:0f:b0:ff:93:73:b5:06:
73:a4:6a:3c:f6:4a:72:99:a8:3d:5d:96:71:55:5d:53:30:6b:
7c:90:d4:bc:bc:db:da:8a:dd:cc:72:ea:0d:7a:75:41:a7:87:
52:4c:9c:37:35:32:df:2d:55:27:c2:2a:f7:e7:13:92:b9:56:
70:a3:83:6f:d2:70:c5:39:83:e6:08:07:8e:63:fe:7a:d5:98:
84:f6:1c:b8:ed:3e:37:f7:89:91:de:64:27:ee:c5:bc:eb:77:
49:97:85:d6:37:e9:a4:81:ba:10:c8:5c:36:a3:0f:33:5b:ee:
bc:af:1d:d7:e7:3b:ae:92:dd:7b:3a:8f:4b:13:d5:4f:37:b9:
30:63:bf:28:ba:d9:d5:0e:54:63:60:e7:2a:dd:4c:4b:fb:50:
da:79:c6:2a:11:9c:56:bc:ca:8f:85:4c:13:3d:db:45:07:7d:
49:23:8a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:54:07 2026 by rpki-client