Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier: zwCGAbThA1LQXtStv6e3M1DPHEqtZguCDEMytQZojEk=
Subject key identifier: BE:0C:6C:62:A1:B2:72:51:13:88:C1:05:57:CA:AE:24:C5:10:B6:D5
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 019FA2CE3295BE4C6C98F5FED9BF353393DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 09:00:49 +0000
Manifest this update: Mon 27 Jul 2026 09:00:49 +0000
Manifest next update: Tue 28 Jul 2026 09:00:49 +0000
Files and hashes: 1: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: mDscG5Uxie/JvlTWiTTUm5+bpX4BT5ES6AHSWrYrIZA=)
2: fH7jpTfOw73ogmMvWrEFRq2Avio.roa (hash: PFBzuOPj54GvMEMM5OOIFBp/nYApNQPXPXoK+zClv8U=)
3: uDCd91-kIRTx4Oler7V-1bWJeEE.roa (hash: MPw5XG6tMFKBuwGKWin9/7K5TyzvM+BrLD5tHi46a6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:32:95:be:4c:6c:98:f5:fe:d9:bf:35:33:93:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: Jul 27 09:00:49 2026 GMT
Not After : Jul 28 09:00:49 2026 GMT
Subject: CN=be0c6c62a1b272511388c10557caae24c510b6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:16:46:b5:73:28:3f:d2:b9:0e:e3:d9:f7:ea:
c4:46:46:ee:ca:c6:c8:f7:25:f2:3d:d9:c1:4d:83:
65:c2:84:d6:f4:6a:f6:65:f3:2e:ce:12:27:6b:99:
0f:e7:6d:d3:50:7a:4f:b3:69:f1:8c:a6:0e:6c:f2:
fe:9d:b2:c0:66:dc:63:98:5d:08:01:0d:21:26:59:
a9:4a:89:e5:be:9d:c2:ba:2c:7b:e2:95:08:c6:05:
87:da:5d:ef:45:4a:b9:8d:68:74:51:93:45:fc:cd:
1f:c5:1a:0a:77:ba:19:54:66:49:8a:6e:eb:73:2b:
c9:00:c3:ba:aa:39:4b:68:e5:9d:d2:bc:7a:1d:c1:
5b:eb:11:a9:6e:2c:a7:b3:34:0f:df:3f:96:b7:85:
c1:87:e0:4d:a4:ba:ba:c2:a0:d3:4c:8b:63:95:60:
fc:a7:8b:60:0d:93:ff:4d:7d:9b:76:18:89:57:6d:
95:26:89:db:85:bf:51:74:db:6a:7b:f5:b7:d9:f8:
c4:a9:4d:29:25:50:9c:9d:93:b1:dd:0c:1d:80:cd:
17:5d:20:cc:73:9d:3d:8d:8f:12:93:e4:9d:fe:d1:
6a:12:78:6e:53:32:22:f3:5a:ef:b8:75:2b:12:86:
54:ae:82:9c:25:48:61:80:97:6f:73:53:b7:74:7c:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0C:6C:62:A1:B2:72:51:13:88:C1:05:57:CA:AE:24:C5:10:B6:D5
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:35:9b:54:fc:23:c4:f7:b5:f9:dd:64:8d:f9:de:f4:ba:56:
a2:10:fb:ea:b0:e1:e4:e6:25:f5:ec:d5:f1:66:c5:55:9b:8b:
b2:e1:f2:9e:86:fd:3e:d5:49:38:b6:07:8d:e0:db:36:65:66:
91:a7:5e:73:a2:cd:0b:4e:a6:e5:3a:c7:07:50:42:8a:1a:66:
05:40:b6:bd:09:51:88:27:8c:cc:d5:a1:b4:a9:ec:41:71:58:
c6:b2:59:9b:9b:06:b6:4b:76:f6:14:bc:1c:c7:59:68:06:49:
41:7b:22:c9:3c:42:32:68:db:5b:98:07:76:61:9c:5f:25:c8:
00:3e:28:e4:c1:df:a7:9f:05:07:9c:4f:d6:1d:d4:cb:a9:45:
49:6c:50:6a:d4:27:0f:87:99:f1:fb:0b:1f:05:02:38:e2:bc:
63:40:1a:a6:78:14:23:7c:87:d1:6c:a4:a4:fc:e3:67:3a:d8:
8a:38:39:90:cd:5d:63:b8:57:ef:cb:3b:1d:74:d7:00:91:53:
2c:ff:1b:58:6e:60:83:43:8e:76:42:7b:ab:31:b2:36:d8:2a:
2e:85:84:2f:bd:f5:d6:12:79:9c:63:11:e1:a6:69:ab:32:70:
39:ac:eb:98:8c:38:aa:a0:cd:84:68:26:15:75:9c:3d:2d:df:
d3:12:c5:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+izjKVvkxsmPX+2b81M5PfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZTBmN2JiYmU0MDMxYTI0ZWYxYjlkYjE5NmFhYjA2NDJl
ODRhMDYwHhcNMjYwNzI3MDkwMDQ5WhcNMjYwNzI4MDkwMDQ5WjAzMTEwLwYDVQQD
EyhiZTBjNmM2MmExYjI3MjUxMTM4OGMxMDU1N2NhYWUyNGM1MTBiNmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xZGtXMoP9K5DuPZ9+rERkbuysbI
9yXyPdnBTYNlwoTW9Gr2ZfMuzhIna5kP523TUHpPs2nxjKYObPL+nbLAZtxjmF0I
AQ0hJlmpSonlvp3Cuix74pUIxgWH2l3vRUq5jWh0UZNF/M0fxRoKd7oZVGZJim7r
cyvJAMO6qjlLaOWd0rx6HcFb6xGpbiynszQP3z+Wt4XBh+BNpLq6wqDTTItjlWD8
p4tgDZP/TX2bdhiJV22VJonbhb9RdNtqe/W32fjEqU0pJVCcnZOx3QwdgM0XXSDM
c509jY8Sk+Sd/tFqEnhuUzIi81rvuHUrEoZUroKcJUhhgJdvc1O3dHxGLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4MbGKhsnJRE4jBBVfKriTFELbVMB8GA1UdIwQY
MBaAFCfg97u+QDGiTvG52xlqqwZC6EoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84YWJhNzEtM2JhOC00YjhkLThlYjYt
MzQ2YTNlYzE4NjhjLzEvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84YWJhNzEtM2JhOC00YjhkLThlYjYtMzQ2YTNlYzE4Njhj
LzEvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyTWbVPwj
xPe1+d1kjfne9LpWohD76rDh5OYl9ezV8WbFVZuLsuHynob9PtVJOLYHjeDbNmVm
kadec6LNC06m5TrHB1BCihpmBUC2vQlRiCeMzNWhtKnsQXFYxrJZm5sGtkt29hS8
HMdZaAZJQXsiyTxCMmjbW5gHdmGcXyXIAD4o5MHfp58FB5xP1h3Uy6lFSWxQatQn
D4eZ8fsLHwUCOOK8Y0AapngUI3yH0WykpPzjZzrYijg5kM1dY7hX78s7HXTXAJFT
LP8bWG5gg0OOdkJ7qzGyNtgqLoWEL7311hJ5nGMR4aZpqzJwOazrmIw4qqDNhGgm
FXWcPS3f0xLFkQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 11:14:22 2026 by rpki-client