Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
File: J_whhWzY4Denu4xjkqYZghOotPY.mft (raw, json)
Hash identifier: 2CYbCWbdD5jBAH1nVVWR/BYEpCrayeAYv8gzsC0aHPI=
Subject key identifier: 28:8B:AB:F9:CB:A3:E0:47:1F:DF:11:75:44:01:65:C4:DA:01:3E:4A
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Certificate issuer: /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial: 019FCCA65F7BA0F81BEAF903CD4304713C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
Manifest number: 10C6
Signing time: Tue 04 Aug 2026 12:01:23 +0000
Manifest this update: Tue 04 Aug 2026 12:01:23 +0000
Manifest next update: Wed 05 Aug 2026 12:01:23 +0000
Files and hashes: 1: J_whhWzY4Denu4xjkqYZghOotPY.crl (hash: RJr2O0zcWAs5IYlWNIL4ltW+fSba1cuDWz7xrVYyH/E=)
2: Zl9UixuUH0GLR4R_JPyHH_dGJ1Y.roa (hash: bKOmByPp72MyiwK2dxQMPNiiDG6ujdM2vWNSfqTcD8I=)
3: evUKjjQ-64urf3ID9QQeEJmSrho.roa (hash: jHjvWcJHTbQkaqv1cxn7W2VQ1dY8D8A2yCIoe6SeCXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:a6:5f:7b:a0:f8:1b:ea:f9:03:cd:43:04:71:3c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Validity
Not Before: Aug 4 12:01:23 2026 GMT
Not After : Aug 5 12:01:23 2026 GMT
Subject: CN=288babf9cba3e0471fdf1175440165c4da013e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:0d:3f:a4:78:7f:0b:a5:b3:d9:0f:12:61:
d6:4d:63:d8:65:11:71:2d:46:1f:f7:6f:22:36:70:
38:c6:f8:5c:b9:d0:1e:c6:0d:6b:f0:06:5a:e1:d6:
47:18:91:f9:52:37:f8:91:f3:be:db:15:2e:c8:26:
4a:3d:21:c5:06:39:b3:44:8e:0a:cc:5f:42:f7:23:
7f:e7:49:91:d4:c9:c0:ad:5e:ad:d2:a2:44:91:b4:
37:39:53:df:0d:36:fd:86:fb:63:3e:28:42:bc:56:
d2:b5:1d:e1:92:f7:29:4e:59:3b:14:49:b7:7c:31:
0f:89:54:30:90:09:c4:2d:cb:bd:b2:2e:e5:6d:ea:
54:aa:4b:56:5f:f0:61:30:1e:58:c8:9b:8b:22:6b:
06:21:d3:41:69:19:64:50:ff:d1:00:ea:5d:69:53:
33:bc:2a:66:2a:7c:d4:ec:71:59:03:8c:ea:48:d8:
64:29:31:8a:04:6e:24:ca:34:d5:4a:1f:2b:44:da:
da:35:7f:f3:cc:e5:26:0a:1a:43:10:80:0c:dd:30:
34:0e:bb:95:9e:a4:11:84:09:06:98:3f:de:6d:89:
c5:0f:fc:d5:1a:a1:19:57:1f:ab:a9:c8:70:4e:f0:
2f:4d:89:ac:ab:ef:06:2b:e1:e6:a0:f4:fe:aa:cb:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8B:AB:F9:CB:A3:E0:47:1F:DF:11:75:44:01:65:C4:DA:01:3E:4A
X509v3 Authority Key Identifier:
keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b9:a6:5a:52:d9:16:14:47:56:99:13:ce:9e:36:7a:67:fb:
99:97:5e:d3:d6:70:ef:f6:61:00:e5:34:58:37:fd:67:c4:9a:
86:d9:24:61:0d:ce:30:73:55:04:0e:73:74:c3:23:29:95:b5:
1b:f0:ae:dc:d6:f0:e7:c3:bf:f8:a7:52:7e:3a:fc:4d:43:e5:
68:1e:3c:e6:62:46:e6:df:b6:90:aa:c3:cc:b6:f0:3d:a4:36:
6c:8f:e0:c8:8f:61:fa:94:87:e6:b4:8e:c8:e0:7b:03:8b:c0:
b9:d1:9a:92:02:39:4d:4b:91:83:b4:36:b6:9a:08:31:e3:c7:
cc:59:a9:1a:0b:d7:8b:10:8c:6d:16:00:4f:5f:3c:bc:89:9b:
98:27:7e:83:ae:eb:42:5d:9a:e4:16:31:83:17:ce:aa:89:3f:
90:aa:77:71:85:0c:80:4e:99:c5:1e:3d:68:b0:2b:49:43:cd:
8f:c0:b6:e4:71:d4:2f:32:f8:fc:01:5f:59:3e:29:c9:34:ce:
6b:4d:9c:f2:8d:0b:95:8b:9f:31:9a:7b:85:88:64:ad:9f:a3:
6b:5d:80:b9:ff:69:a4:ae:bb:36:11:7d:3a:df:51:ba:15:4a:
93:49:76:48:1a:0d:c1:ec:72:ce:8c:9d:1f:f1:6e:6a:21:b7:
41:55:19:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/Mpl97oPgb6vkDzUMEcTx4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZmMyMTg1NmNkOGUwMzdhN2JiOGM2MzkyYTYxOTgyMTNh
OGI0ZjYwHhcNMjYwODA0MTIwMTIzWhcNMjYwODA1MTIwMTIzWjAzMTEwLwYDVQQD
EygyODhiYWJmOWNiYTNlMDQ3MWZkZjExNzU0NDAxNjVjNGRhMDEzZTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq94NP6R4fwuls9kPEmHWTWPYZRFx
LUYf928iNnA4xvhcudAexg1r8AZa4dZHGJH5Ujf4kfO+2xUuyCZKPSHFBjmzRI4K
zF9C9yN/50mR1MnArV6t0qJEkbQ3OVPfDTb9hvtjPihCvFbStR3hkvcpTlk7FEm3
fDEPiVQwkAnELcu9si7lbepUqktWX/BhMB5YyJuLImsGIdNBaRlkUP/RAOpdaVMz
vCpmKnzU7HFZA4zqSNhkKTGKBG4kyjTVSh8rRNraNX/zzOUmChpDEIAM3TA0DruV
nqQRhAkGmD/ebYnFD/zVGqEZVx+rqchwTvAvTYmsq+8GK+HmoPT+qst4nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiLq/nLo+BHH98RdUQBZcTaAT5KMB8GA1UdIwQY
MBaAFCf8IYVs2OA3p7uMY5KmGYITqLT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl93aGhXelk0RGVudTR4amtxWVpnaE9vdFBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jN2ZhNDgtMjg3Ni00MjJiLTg4MjUt
ZTFmMzY3ZTc5NjIwLzEvSl93aGhXelk0RGVudTR4amtxWVpnaE9vdFBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9jN2ZhNDgtMjg3Ni00MjJiLTg4MjUtZTFmMzY3ZTc5NjIw
LzEvSl93aGhXelk0RGVudTR4amtxWVpnaE9vdFBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7mmWlLZ
FhRHVpkTzp42emf7mZde09Zw7/ZhAOU0WDf9Z8SahtkkYQ3OMHNVBA5zdMMjKZW1
G/Cu3Nbw58O/+KdSfjr8TUPlaB485mJG5t+2kKrDzLbwPaQ2bI/gyI9h+pSH5rSO
yOB7A4vAudGakgI5TUuRg7Q2tpoIMePHzFmpGgvXixCMbRYAT188vImbmCd+g67r
Ql2a5BYxgxfOqok/kKp3cYUMgE6ZxR49aLArSUPNj8C25HHULzL4/AFfWT4pyTTO
a02c8o0LlYufMZp7hYhkrZ+ja12Auf9ppK67NhF9Ot9RuhVKk0l2SBoNwexyzoyd
H/FuaiG3QVUZfg==
-----END CERTIFICATE-----
Generated at Tue Aug 4 20:32:37 2026 by rpki-client