Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
File: jc19OY_EZuEhvEX69Q3YfDa7yW0.mft (raw, json)
Hash identifier: eIHyAHar0BVf79gaFiKjICbFjFCaUfQdGO9nFDHgLEk=
Subject key identifier: 33:E4:2D:0C:D2:86:05:8D:CE:AE:E4:51:CC:82:46:48:13:8B:5D:E8
Authority key identifier: 8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D
Certificate issuer: /CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
Certificate serial: 019FD68501D5AD9047594B940F63BC980EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
Manifest number: 05A7
Signing time: Thu 06 Aug 2026 10:01:08 +0000
Manifest this update: Thu 06 Aug 2026 10:01:08 +0000
Manifest next update: Fri 07 Aug 2026 10:01:08 +0000
Files and hashes: 1: iYRjHQAbJIp2oowSGAKJD6LLKmw.roa (hash: OcorZbUCquJDtFh4AjtJAw2ooEcP9az5ezvyYCaccyU=)
2: jc19OY_EZuEhvEX69Q3YfDa7yW0.crl (hash: fa5Ujx/MtkDyhw1ZaYcF0N458DUTOStYLFiKOKShF8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:85:01:d5:ad:90:47:59:4b:94:0f:63:bc:98:0e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
Validity
Not Before: Aug 6 10:01:08 2026 GMT
Not After : Aug 7 10:01:08 2026 GMT
Subject: CN=33e42d0cd286058dceaee451cc824648138b5de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:b9:98:1b:03:60:19:38:33:7f:4c:1b:5f:
4b:d7:bc:9e:8d:bf:99:24:e8:aa:44:18:b9:fb:f2:
0a:f6:12:7c:02:d2:19:56:15:0b:50:62:a2:12:2d:
89:a8:d7:0e:e5:d9:f4:41:7e:f0:61:05:0e:5b:4e:
75:d4:69:3c:e9:25:e0:0b:d0:32:27:ae:8c:e9:41:
ab:02:b5:53:b0:47:92:b8:4f:f8:e1:c9:fe:27:eb:
e8:88:8c:66:34:c9:9d:97:88:77:d3:ff:21:2f:41:
2e:ed:6b:3b:d7:b1:a2:1d:23:50:4c:1c:b6:86:a5:
52:59:58:ae:a5:0f:e6:29:df:c1:3b:a1:44:86:ec:
17:7d:3e:a6:9f:94:03:b5:12:64:79:73:6f:a6:03:
34:b5:4e:6a:a2:c9:d6:f6:f0:94:8f:94:a6:62:31:
5f:c4:43:9c:b1:e1:73:f8:e5:f3:c8:50:6b:2a:10:
79:77:c3:cb:c3:aa:ed:5f:7d:89:4a:02:b1:4d:bb:
b6:ed:c3:7c:7b:54:96:48:8b:8a:cc:d3:68:0b:5f:
f9:87:94:24:19:d6:53:2f:d1:7b:95:f5:b1:81:86:
18:16:b3:9c:9d:9f:48:74:a8:0e:de:62:1d:15:c3:
4a:a6:61:2a:b8:92:53:eb:99:36:a6:76:a1:69:20:
a2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E4:2D:0C:D2:86:05:8D:CE:AE:E4:51:CC:82:46:48:13:8B:5D:E8
X509v3 Authority Key Identifier:
keyid:8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:58:b4:33:8e:92:13:75:0f:7b:12:ec:bf:e8:ef:05:74:8f:
32:9b:92:c7:f3:07:fe:28:40:68:26:09:94:8b:8f:b4:4d:e2:
5d:0a:0c:af:ae:6b:7d:42:24:70:5d:6f:46:d2:9b:7f:8f:38:
0a:e7:ec:42:cb:63:6b:ee:f1:95:35:30:16:41:ef:9b:52:c8:
c4:00:9b:99:f6:fa:7d:d4:92:56:bd:e5:30:80:72:22:55:e3:
8a:32:f0:40:16:58:8c:f2:4d:25:5b:22:df:21:9c:09:a6:7d:
8e:4c:d9:5a:19:3a:f3:06:fd:d0:25:9c:e1:f3:9c:bd:24:77:
62:b6:4f:16:45:5d:77:9e:d0:70:2f:52:36:87:a9:f3:3a:d4:
40:08:bc:4d:82:80:75:57:fa:62:f6:b2:fb:2c:c1:16:91:c1:
7f:af:b2:03:0f:57:c0:99:37:6c:df:82:e1:47:0b:90:60:92:
1f:83:49:43:27:e1:b3:7a:d8:6c:4c:19:7c:35:13:2a:6e:85:
7a:ed:f9:0e:d8:66:fd:cb:5d:5f:a7:df:d2:b5:16:06:94:52:
d9:b3:11:e8:1a:22:0f:2f:55:bc:53:e5:fe:86:4d:00:f6:b5:
90:f7:d2:02:33:5d:bf:9a:0e:e3:f9:08:3a:09:94:1b:a7:97:
dc:1d:00:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 18:53:46 2026 by rpki-client