Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
File: jFh6LAkWf52nMnTSmPmf210od3s.mft (raw, json)
Hash identifier: R5Gyjeu3ItGco9w4opOb8ZEqx7qeZboFfyqX++pEESw=
Subject key identifier: 21:41:41:B9:0B:4E:69:16:BD:EA:59:77:74:87:F5:22:9F:58:59:F3
Authority key identifier: 8C:58:7A:2C:09:16:7F:9D:A7:32:74:D2:98:F9:9F:DB:5D:28:77:7B
Certificate issuer: /CN=8c587a2c09167f9da73274d298f99fdb5d28777b
Certificate serial: 019F84C3EC503A63F406009B90F0CBB17EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
Manifest number: 71
Signing time: Tue 21 Jul 2026 13:01:00 +0000
Manifest this update: Tue 21 Jul 2026 13:01:00 +0000
Manifest next update: Wed 22 Jul 2026 13:01:00 +0000
Files and hashes: 1: IeUZpA_cRarzmmAKl1mTNeS2w6Q.roa (hash: Zxv/aB//3mF6nuzItLAr8aMXf7kFc9bokYqKElvga2c=)
2: jFh6LAkWf52nMnTSmPmf210od3s.crl (hash: GP1IZZwzGvH2uzzgHEs3kq25CPiwaH2I3N1vmdEqOwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:ec:50:3a:63:f4:06:00:9b:90:f0:cb:b1:7e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c587a2c09167f9da73274d298f99fdb5d28777b
Validity
Not Before: Jul 21 13:01:00 2026 GMT
Not After : Jul 22 13:01:00 2026 GMT
Subject: CN=214141b90b4e6916bdea59777487f5229f5859f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c8:ec:9e:7d:eb:26:ae:86:c8:71:89:70:38:
c5:2d:20:af:38:a9:61:17:75:5a:fb:1b:1e:7d:60:
47:1e:7c:9c:81:ff:b2:75:ab:f6:8f:b9:3d:1b:74:
23:17:85:3e:5c:4e:9f:0a:0c:fe:80:8f:cb:99:69:
bc:72:bb:0d:32:00:cd:dd:22:80:4c:b1:f6:a5:65:
14:80:dd:76:87:52:3f:dc:03:9e:eb:6a:0d:8f:46:
5b:8f:70:11:53:0a:5f:f4:e8:bb:5f:fd:5b:9f:a8:
ea:ed:d8:4b:ae:17:1c:45:85:ad:e5:df:ee:c9:98:
85:74:6c:15:d0:cf:74:aa:d7:a3:55:33:a1:a6:bf:
ca:14:82:4d:8c:dd:e0:7b:63:ee:43:0c:e5:54:3b:
5d:eb:f8:e2:e6:f8:91:84:09:97:b7:3c:e4:ed:75:
37:9f:2f:10:4c:fe:84:68:d1:42:1b:cd:0d:66:20:
b1:39:9f:86:06:6d:b3:5e:be:d8:9d:56:b6:24:cd:
13:a6:72:46:6b:de:25:aa:39:42:27:54:2c:c1:6f:
be:ba:8c:fc:f1:1e:a6:c6:7e:e8:d0:15:66:e2:eb:
a1:ae:ea:05:63:e2:c5:f7:57:d7:22:b1:ec:47:72:
a2:2e:fb:21:39:b2:fc:8c:9f:9f:b6:87:65:ee:fa:
f2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:41:41:B9:0B:4E:69:16:BD:EA:59:77:74:87:F5:22:9F:58:59:F3
X509v3 Authority Key Identifier:
keyid:8C:58:7A:2C:09:16:7F:9D:A7:32:74:D2:98:F9:9F:DB:5D:28:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a4:67:bc:f9:e9:fe:0e:5a:4d:fd:1f:2f:01:23:72:19:60:
6f:93:ca:e5:85:46:e7:2e:b6:45:7d:c5:82:d6:42:a3:53:6b:
d7:00:71:b4:40:98:80:4a:7c:a8:e6:d7:e1:fe:10:20:bf:14:
cd:92:e5:4e:8e:be:29:df:ed:4e:d7:41:0a:19:6b:b3:54:66:
75:d9:6b:6a:87:28:48:be:b4:bc:cd:d2:4b:b8:90:0e:b3:bc:
9a:4e:57:c0:c9:3f:4c:de:6f:a3:06:6b:1b:7a:0e:71:5c:84:
b7:b2:c3:70:a2:4d:c6:c4:20:fe:49:24:e0:f8:75:4a:16:aa:
7a:7a:84:8f:6f:b0:ae:3b:c1:a1:73:6b:71:3a:aa:1f:fd:89:
bb:6b:38:b6:e8:33:19:5a:98:6b:06:e0:4a:74:7c:57:d5:02:
8a:90:58:ad:42:bc:3d:78:4a:f2:14:89:22:b3:25:42:4b:74:
83:ed:87:e4:3b:01:89:aa:28:71:0d:23:de:88:a2:2c:14:0d:
e8:3c:0d:0d:6f:1b:fe:9e:3f:6d:9d:7c:1b:96:1c:cb:a4:70:
0e:3c:37:4a:4e:ab:40:60:59:5a:55:65:96:16:93:26:a5:e0:
0e:45:e0:85:b5:96:b9:21:28:5d:7c:b8:1b:3d:f7:47:de:4a:
7e:b5:01:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:58 2026 by rpki-client