Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
File: jAfs12ZszvkegvfsvOC6KFM2-0U.mft (raw, json)
Hash identifier: 9A7HfktzBBDL4sQZ3rT6bM5CFFtTB2Zqg3DfQiI6Po4=
Subject key identifier: 46:1F:59:AD:DA:9C:3C:DB:70:BE:DA:BF:5F:CA:51:AE:7D:42:52:85
Authority key identifier: 8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
Certificate issuer: /CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Certificate serial: 019FA1BB2B7C6EF0DC133861C88C0F49C7E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
Manifest number: 1669
Signing time: Mon 27 Jul 2026 04:00:25 +0000
Manifest this update: Mon 27 Jul 2026 04:00:25 +0000
Manifest next update: Tue 28 Jul 2026 04:00:25 +0000
Files and hashes: 1: 4LLVtuowBMlt-elcg04sJ4SEZ4U.roa (hash: 9EzE57I9U9jlMNZnR2WQt4Ucc7HAdhe5JFz8hozLIH0=)
2: jAfs12ZszvkegvfsvOC6KFM2-0U.crl (hash: xUbSXzmzy4AA33CJqxe01wIEfa4TRKmeiWcz34zE1zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:2b:7c:6e:f0:dc:13:38:61:c8:8c:0f:49:c7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Validity
Not Before: Jul 27 04:00:25 2026 GMT
Not After : Jul 28 04:00:25 2026 GMT
Subject: CN=461f59adda9c3cdb70bedabf5fca51ae7d425285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:f4:9b:4e:d0:33:b8:b5:41:e0:90:74:34:
94:df:fc:cf:f0:f8:e2:df:a2:bf:a0:9f:95:3d:a8:
2a:46:ec:54:1a:bb:5b:ef:0a:c1:13:31:40:51:89:
ec:cf:35:81:ba:bf:1f:43:b2:c3:a3:60:93:f9:50:
91:20:d6:9c:71:c5:26:01:f7:0a:c1:be:e5:3c:73:
07:ae:fa:42:0a:78:47:97:d4:f3:d0:c5:b0:ed:bd:
5e:06:26:c6:b1:6a:da:2c:66:7d:95:a5:9e:7e:d2:
89:5a:eb:62:7e:1c:b8:56:a3:50:0d:da:17:45:77:
9b:03:d8:76:26:1a:d7:4b:3b:15:7c:12:c6:03:c6:
6e:66:bd:c7:36:a9:65:22:18:7f:67:5a:3f:11:b9:
a4:5c:e2:9e:42:75:e3:6c:2d:58:cb:7a:5a:b5:7b:
47:da:9c:f3:16:0b:fc:06:4c:65:80:2f:bd:30:c3:
9a:33:5a:47:f2:fb:3a:91:b0:f5:36:14:42:9f:d4:
4c:6f:73:34:56:b4:63:0b:6d:fa:01:5b:78:5c:7c:
3e:fa:3d:fc:bb:9b:75:94:3c:66:d1:70:f3:46:5f:
16:17:91:ed:eb:59:7b:f8:68:a7:94:0e:28:85:23:
e1:d6:96:d6:96:42:ee:46:30:2f:f4:e1:45:ec:c2:
8a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1F:59:AD:DA:9C:3C:DB:70:BE:DA:BF:5F:CA:51:AE:7D:42:52:85
X509v3 Authority Key Identifier:
keyid:8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:58:fd:31:4d:9a:80:0f:ae:d8:9d:62:4c:8d:61:bc:e4:9b:
a8:45:f9:d4:d4:05:4e:2b:19:96:d2:65:ea:8f:ce:9d:68:ef:
cc:9e:8d:32:ee:9f:67:9d:2c:91:e9:d2:ac:32:a6:46:f8:a7:
0a:12:23:e6:69:df:0b:da:36:dd:32:98:3d:14:5f:e0:f6:1f:
80:e5:81:6a:00:0d:23:77:c4:d4:b0:da:30:3d:0e:74:48:cc:
28:c4:be:e8:31:2b:c4:e4:5c:03:e4:a4:a1:b7:d5:de:9f:b2:
b9:90:36:11:20:fb:86:03:15:e3:0e:20:db:44:32:ab:2e:0e:
97:21:0f:76:3b:c4:f9:70:6c:f3:cc:ea:ef:85:26:fa:06:1b:
f6:2c:07:93:ec:79:a8:63:77:99:76:a7:59:93:56:4a:9f:4a:
2c:a2:b5:07:a4:16:ba:50:2d:ab:f9:d3:2b:95:a2:cf:be:64:
4e:f5:24:38:e6:56:6c:c6:24:5b:df:9f:92:cd:1b:86:2e:f3:
46:90:5f:54:8c:2b:52:c4:90:ff:39:1d:21:c3:4c:38:f2:aa:
f2:ea:1a:7c:53:73:a9:d4:ae:3a:a6:d8:13:3d:f6:56:12:ba:
9d:ed:b4:f7:47:b8:d0:5b:05:e2:d4:ed:b6:b3:4f:66:f5:85:
1d:d0:3d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:51 2026 by rpki-client