Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
File: JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft (raw, json)
Hash identifier: Hq4lQxjNuj4vxhFOM/VeBHDQwmvMD5uUt4FhK4wbO44=
Subject key identifier: AC:08:58:27:30:25:C3:8E:4F:C8:A4:35:EF:B5:32:39:CA:AE:99:E0
Authority key identifier: 24:7C:DB:5E:A8:2E:03:33:36:64:0E:9E:EC:8E:A0:98:CA:C8:61:80
Certificate issuer: /CN=247cdb5ea82e033336640e9eec8ea098cac86180
Certificate serial: 019F9EBA8CB0CB0118CDCCC9A84AE7553B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
Manifest number: 0132
Signing time: Sun 26 Jul 2026 14:00:53 +0000
Manifest this update: Sun 26 Jul 2026 14:00:53 +0000
Manifest next update: Mon 27 Jul 2026 14:00:53 +0000
Files and hashes: 1: JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl (hash: vRaymb4koYQvjxXrfGR3WykBu0xbrcQpr6ZkS3xjSMc=)
2: sr5kiWaUNJb3k53oHKiE3zAeNCc.roa (hash: 4lKEnHHPq8ieSuUmi9tpKwDYW28NC9iz/gZMj6c8NHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:ba:8c:b0:cb:01:18:cd:cc:c9:a8:4a:e7:55:3b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247cdb5ea82e033336640e9eec8ea098cac86180
Validity
Not Before: Jul 26 14:00:53 2026 GMT
Not After : Jul 27 14:00:53 2026 GMT
Subject: CN=ac0858273025c38e4fc8a435efb53239caae99e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:fc:5f:1a:7d:4c:e9:64:7f:33:e1:7d:ca:
62:72:6f:e1:68:0b:92:d9:62:18:bf:fd:c0:d3:d2:
8e:2f:75:1d:aa:56:b6:51:4a:f5:42:34:45:d3:1a:
ac:d0:a7:fa:8b:ed:7e:79:d5:e9:30:86:2a:4a:e0:
ff:31:91:24:ff:d3:2b:78:89:51:23:2c:e7:21:ef:
27:ba:6c:16:fc:01:39:de:39:1a:d3:9d:4a:4b:8c:
ab:f3:01:46:9b:5b:27:9c:b4:cc:39:97:14:f7:69:
18:f0:ae:e8:a9:0d:27:1f:40:91:c9:82:c3:bd:8c:
56:81:92:48:0d:04:a6:84:2d:52:8b:f5:18:7f:97:
e4:b1:29:ff:0f:e6:ea:64:a3:80:6f:27:90:a4:46:
5f:84:9c:12:a6:bc:0d:0b:08:f7:91:4e:08:2a:bf:
60:27:ab:34:c3:66:e1:42:24:a4:39:b8:ed:8d:91:
6d:e5:69:2d:6e:50:f2:5e:55:2b:dc:f0:29:f5:b6:
0c:8a:ad:e2:cb:4d:17:70:cd:58:c0:e2:c3:dd:1c:
ef:26:8f:ce:70:8f:09:cf:61:ba:05:b2:0f:77:39:
02:a5:cf:28:f2:dc:5d:e9:30:01:6a:af:5d:29:ab:
34:9c:55:7c:48:57:dc:e9:30:7d:a0:fc:96:11:10:
33:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:08:58:27:30:25:C3:8E:4F:C8:A4:35:EF:B5:32:39:CA:AE:99:E0
X509v3 Authority Key Identifier:
keyid:24:7C:DB:5E:A8:2E:03:33:36:64:0E:9E:EC:8E:A0:98:CA:C8:61:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7e:92:15:da:3f:9e:44:bc:f2:05:22:8d:4a:b1:cc:46:69:
37:bc:5e:9a:d8:5f:64:08:2a:da:e8:c6:c2:70:a7:bb:03:af:
3c:fc:c1:78:1f:05:d4:f4:47:15:b2:eb:01:29:c9:5f:90:a1:
2e:fa:5e:03:53:da:8b:84:83:68:92:af:1b:0d:ff:de:40:52:
09:89:3d:58:73:ae:4f:db:f4:ea:d4:af:21:f0:3e:79:fd:1a:
1c:ff:5b:6f:d7:ea:0d:8a:71:c8:f7:e9:bd:22:1b:a9:a7:be:
12:07:8d:4e:b5:68:55:64:19:37:d8:cc:d8:57:9c:a4:56:b1:
10:0a:cb:e1:d3:0c:21:18:5c:f3:39:e8:c4:22:76:48:24:38:
50:78:92:a1:f1:34:e4:b8:9c:a5:c4:9e:dc:89:51:87:f5:8f:
8d:43:56:36:2a:48:71:78:96:fe:f0:f0:82:db:cb:8a:5b:a0:
9a:d6:a2:6a:96:0c:e9:6f:c1:8b:fd:43:e3:de:57:14:e9:c7:
1d:98:73:a8:cb:38:49:3d:06:7e:a4:e6:b3:99:ad:b3:2b:02:
e5:7f:12:7c:6f:2b:e0:1b:55:47:e5:62:96:df:98:ea:ea:92:
f4:f0:a4:61:45:e8:75:61:ca:ed:da:a0:c3:1e:2e:54:35:a4:
9a:22:76:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:32:28 2026 by rpki-client