Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft
File: jSO9EjEKkSMxYPAReGphEDDw-l8.mft (raw, json)
Hash identifier: nSJKrQHTGjEs++kd3hRseKgHCoVKboaonAk/7rZnTSU=
Subject key identifier: 98:27:12:F3:9F:E9:73:33:11:96:CB:5A:4F:D8:AF:4A:66:33:75:F0
Authority key identifier: 8D:23:BD:12:31:0A:91:23:31:60:F0:11:78:6A:61:10:30:F0:FA:5F
Certificate issuer: /CN=8d23bd12310a91233160f011786a611030f0fa5f
Certificate serial: 019FA304FB52CEAE75A867F89E89EC17A38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft
Manifest number: 02D4
Signing time: Mon 27 Jul 2026 10:00:40 +0000
Manifest this update: Mon 27 Jul 2026 10:00:40 +0000
Manifest next update: Tue 28 Jul 2026 10:00:40 +0000
Files and hashes: 1: jSO9EjEKkSMxYPAReGphEDDw-l8.crl (hash: hxKOM506z3dBAh9NkCU6hDXUGm62VNjQnLkMabcxot0=)
2: qN669ymg8nK0FcenUzEimvS6bD0.roa (hash: BwVKGc9Um4MKhEVa9QsPEHNNx57h0Tvo1ZPD7iZnTWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:fb:52:ce:ae:75:a8:67:f8:9e:89:ec:17:a3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d23bd12310a91233160f011786a611030f0fa5f
Validity
Not Before: Jul 27 10:00:40 2026 GMT
Not After : Jul 28 10:00:40 2026 GMT
Subject: CN=982712f39fe973331196cb5a4fd8af4a663375f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:95:6d:a5:fb:d5:6b:fb:e3:26:fe:8e:89:0b:
48:80:d6:1e:52:eb:ba:58:a6:8c:4b:95:dc:18:ec:
bd:5e:18:7a:cd:b2:da:30:b8:9b:1f:60:c2:32:61:
70:8b:a1:20:1c:b3:9b:cf:a2:5d:8e:4e:29:66:76:
0a:25:03:61:20:22:2f:dd:f3:2f:33:bc:bf:b3:56:
fe:d6:c7:c8:70:90:23:0f:8d:2a:11:b8:78:55:8c:
70:37:9b:7f:b6:7a:92:6d:03:5d:83:6c:50:dc:c3:
bc:21:8d:52:04:3d:67:4c:47:ae:b5:60:df:21:95:
cf:6a:fa:49:2d:3f:fa:bf:f4:59:da:05:3f:6f:15:
67:58:61:42:6b:2a:9f:8f:2e:a6:d7:96:eb:86:e8:
d3:bd:b8:5e:ce:88:6f:8c:14:3a:de:a9:33:62:09:
0a:94:c2:60:8e:20:5c:6c:34:13:97:a8:9c:d7:7a:
7f:eb:66:ee:1d:bb:db:ff:8f:8d:04:18:15:37:0a:
4b:74:47:aa:dc:b7:f8:74:c4:a2:db:fb:7f:ce:fa:
70:fb:6b:d6:85:3f:d0:be:58:7c:38:37:83:77:e5:
d0:5c:b1:a3:33:6f:7e:7f:d5:a1:aa:89:79:c0:b8:
ab:68:7f:0b:2b:e9:6d:f5:01:31:cf:1e:39:a6:fa:
a3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:27:12:F3:9F:E9:73:33:11:96:CB:5A:4F:D8:AF:4A:66:33:75:F0
X509v3 Authority Key Identifier:
keyid:8D:23:BD:12:31:0A:91:23:31:60:F0:11:78:6A:61:10:30:F0:FA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ad:9b:f1:22:f3:78:5e:cb:62:e0:71:ee:90:af:9f:76:03:
33:8c:c8:c3:a8:8e:df:bc:43:1c:18:0c:55:dc:e8:fd:66:0e:
b2:9d:0e:fc:ef:b8:c7:bf:0b:6e:9c:f7:fa:b0:f8:2c:96:b0:
f1:06:2c:3e:0e:39:ce:a5:b6:40:99:7f:01:e2:70:da:51:35:
7d:ed:06:dc:fc:8c:fc:a2:78:1c:78:5a:37:fc:f7:57:9b:6c:
94:4d:01:2b:32:c3:a9:3d:75:17:8c:ff:76:e5:96:4f:f6:dd:
ed:81:a2:0d:05:6b:84:ed:69:a9:ef:ca:e6:0e:6f:44:1e:d0:
ba:b0:99:40:ee:95:2f:b4:7c:de:cb:0f:72:f8:24:3b:67:b6:
14:e9:7b:33:00:84:d5:0f:06:ac:d5:4e:f1:cc:b8:c2:4e:87:
b9:a5:63:56:1d:85:13:60:4b:79:32:02:c2:79:e9:76:05:c0:
9f:26:9d:c1:f2:19:6d:7f:9a:24:e9:e5:bc:1e:ed:00:1e:fc:
37:f7:c4:89:3f:8c:d5:53:b5:a5:dd:62:66:4d:77:50:11:98:
05:44:2a:a5:82:a1:ac:f0:93:05:87:26:86:1d:43:ff:63:72:
c8:a3:04:ba:bf:67:65:25:5a:83:54:31:f5:49:39:29:aa:c4:
cc:e6:d2:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jBPtSzq51qGf4nonsF6OOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMjNiZDEyMzEwYTkxMjMzMTYwZjAxMTc4NmE2MTEwMzBm
MGZhNWYwHhcNMjYwNzI3MTAwMDQwWhcNMjYwNzI4MTAwMDQwWjAzMTEwLwYDVQQD
Eyg5ODI3MTJmMzlmZTk3MzMzMTE5NmNiNWE0ZmQ4YWY0YTY2MzM3NWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpVtpfvVa/vjJv6OiQtIgNYeUuu6
WKaMS5XcGOy9Xhh6zbLaMLibH2DCMmFwi6EgHLObz6Jdjk4pZnYKJQNhICIv3fMv
M7y/s1b+1sfIcJAjD40qEbh4VYxwN5t/tnqSbQNdg2xQ3MO8IY1SBD1nTEeutWDf
IZXPavpJLT/6v/RZ2gU/bxVnWGFCayqfjy6m15brhujTvbhezohvjBQ63qkzYgkK
lMJgjiBcbDQTl6ic13p/62buHbvb/4+NBBgVNwpLdEeq3Lf4dMSi2/t/zvpw+2vW
hT/Qvlh8ODeDd+XQXLGjM29+f9Whqol5wLiraH8LK+lt9QExzx45pvqjAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgnEvOf6XMzEZbLWk/Yr0pmM3XwMB8GA1UdIwQY
MBaAFI0jvRIxCpEjMWDwEXhqYRAw8PpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalNPOUVqRUtrU014WVBBUmVHcGhFRER3LWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNzFlNDUtODBlZS00ODg3LTgzYjEt
NDk4YjlkNGY3NTdlLzEvalNPOUVqRUtrU014WVBBUmVHcGhFRER3LWw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hNzFlNDUtODBlZS00ODg3LTgzYjEtNDk4YjlkNGY3NTdl
LzEvalNPOUVqRUtrU014WVBBUmVHcGhFRER3LWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAva2b8SLz
eF7LYuBx7pCvn3YDM4zIw6iO37xDHBgMVdzo/WYOsp0O/O+4x78Lbpz3+rD4LJaw
8QYsPg45zqW2QJl/AeJw2lE1fe0G3PyM/KJ4HHhaN/z3V5tslE0BKzLDqT11F4z/
duWWT/bd7YGiDQVrhO1pqe/K5g5vRB7QurCZQO6VL7R83ssPcvgkO2e2FOl7MwCE
1Q8GrNVO8cy4wk6HuaVjVh2FE2BLeTICwnnpdgXAnyadwfIZbX+aJOnlvB7tAB78
N/fEiT+M1VO1pd1iZk13UBGYBUQqpYKhrPCTBYcmhh1D/2NyyKMEur9nZSVag1Qx
9Uk5KarEzObSHw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 16:24:47 2026 by rpki-client