Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: ZfC1WkNTv6uIpGSh3hHNVSkvo6RZoH1pjpT6MPXyccE=
Subject key identifier: DB:6E:C2:01:B8:8C:A5:C0:09:60:2E:80:F1:5F:56:B0:F3:55:47:75
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 019FA14DC9B11406951F7D41C075B40E056B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 19D8
Signing time: Mon 27 Jul 2026 02:00:57 +0000
Manifest this update: Mon 27 Jul 2026 02:00:57 +0000
Manifest next update: Tue 28 Jul 2026 02:00:57 +0000
Files and hashes: 1: 2qzM6x9baKtwfCTVUC_vOHhaD9Q.roa (hash: slF8umIXO8u1xfM7uQvlWuXSbFnPY4ktqm1QtTsVvaw=)
2: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: 9fFGOsiWls1yn+XXZotMfMnBj61Bj48PenI0i66DRYw=)
3: qj22xyeLu60pShMzvtnaPDnNQis.roa (hash: Fv9rfv3pioycRBue2RhOjkBOSKLXM7H4+uyv5DM79wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:c9:b1:14:06:95:1f:7d:41:c0:75:b4:0e:05:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Jul 27 02:00:57 2026 GMT
Not After : Jul 28 02:00:57 2026 GMT
Subject: CN=db6ec201b88ca5c009602e80f15f56b0f3554775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:7f:98:44:f7:20:6d:b4:45:2e:b4:de:4d:
05:0c:e9:83:b5:80:70:a7:28:d6:c6:79:f3:cc:24:
91:22:98:de:0f:ef:53:d1:42:22:62:eb:85:f7:9a:
f2:15:b7:4b:d5:16:5e:4c:b5:c1:40:86:73:da:b4:
cd:3f:0c:62:14:20:95:87:fa:ff:ee:36:ab:45:44:
70:38:b4:36:3c:c2:60:ee:2c:a8:8c:1c:65:eb:93:
33:96:f0:43:20:03:11:53:f5:c6:38:4c:c4:b0:05:
26:49:ff:31:26:75:05:64:5b:dc:1d:6f:b9:13:33:
cd:af:1b:53:fb:78:04:89:66:f1:c3:13:7c:12:c9:
36:71:fd:a5:70:15:60:22:0f:5d:bf:80:ca:2c:c0:
3e:6b:36:a8:89:47:03:0b:43:d2:37:e9:17:87:af:
db:06:f4:24:00:01:17:d3:b3:17:8d:95:c7:9e:0b:
c9:b3:ea:43:8d:61:4a:b5:51:66:8a:d8:35:93:55:
af:85:6b:2a:6d:21:96:33:b2:fb:df:54:29:f0:4a:
e5:1e:bf:e9:d8:aa:56:61:90:a1:a7:f1:e6:dc:ce:
76:84:80:ba:92:f7:30:13:e9:ea:a7:9d:d6:74:ad:
30:f2:8b:89:ca:36:0c:53:7f:9c:fa:7a:b2:e0:47:
08:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6E:C2:01:B8:8C:A5:C0:09:60:2E:80:F1:5F:56:B0:F3:55:47:75
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:60:64:e3:b0:8a:2c:38:12:8e:a0:53:82:34:89:f5:07:62:
a3:dd:45:3c:89:79:6d:23:79:d8:ce:47:5e:4c:06:96:01:cb:
1f:8e:bb:c8:18:2c:bb:5e:1c:2c:e8:5d:39:04:36:e4:86:c1:
eb:ad:ae:ac:a3:55:b8:d2:df:2b:33:de:fd:82:e4:84:b7:e5:
cc:fa:72:88:48:be:1d:2e:f6:a8:52:7c:7a:96:48:9d:2b:e5:
4c:10:6b:81:e9:1b:28:8a:8f:8f:a0:c2:1d:d2:38:a4:fe:e2:
53:76:b5:05:de:64:24:30:91:4e:74:db:40:e6:13:c0:66:5e:
cb:c8:b8:5a:5c:fe:67:74:7d:1b:1e:d0:76:4c:89:79:57:96:
aa:1b:18:d3:28:eb:31:56:f8:82:03:83:94:e3:34:da:dd:f9:
d6:cb:a2:0d:1e:ca:24:14:ed:eb:cd:47:47:61:5f:ce:ca:ec:
cf:43:5c:c0:12:c7:42:51:3c:fd:0b:93:e5:66:3b:68:2b:0d:
28:10:8d:2a:a4:83:47:8c:aa:1c:a9:0d:90:14:cd:db:3f:bd:
93:6c:05:12:35:69:d2:24:81:1a:a9:13:8e:62:95:3e:a9:2c:
e0:83:79:a8:06:02:39:a9:20:dd:fd:de:70:fb:4f:07:84:0c:
bc:91:d0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:01:15 2026 by rpki-client