Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
File: J0PbfuNKwtTtV49JXgCWy5iv9xw.mft (raw, json)
Hash identifier: rb1JxO/Fgmrn2G9nFxw7h4KaOTn2DqH5NKQhN4hSPj4=
Subject key identifier: C9:AC:94:F5:3F:A4:77:9E:60:DC:2D:D9:8F:79:F3:06:23:6B:BD:F3
Authority key identifier: 27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
Certificate issuer: /CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Certificate serial: 019FA1F26076FDA2A0D0979D297993726BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
Manifest number: 051A
Signing time: Mon 27 Jul 2026 05:00:43 +0000
Manifest this update: Mon 27 Jul 2026 05:00:43 +0000
Manifest next update: Tue 28 Jul 2026 05:00:43 +0000
Files and hashes: 1: FSCr9rK0vEudDS9_bQ3O-hGkqrk.roa (hash: ddVmg0mXECaptmy2zncQhSGmVK6AKxm9h3sGTc6VHOM=)
2: J0PbfuNKwtTtV49JXgCWy5iv9xw.crl (hash: JRSTWAEqDqz8lSZoQOQUBzo6p+kXM8SUkC84gikGFno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:60:76:fd:a2:a0:d0:97:9d:29:79:93:72:6b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Validity
Not Before: Jul 27 05:00:43 2026 GMT
Not After : Jul 28 05:00:43 2026 GMT
Subject: CN=c9ac94f53fa4779e60dc2dd98f79f306236bbdf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:77:7b:7b:1d:c9:01:14:fc:dd:ac:da:3d:27:
be:42:33:3a:ad:5e:fe:af:5b:d5:6e:4f:02:af:34:
2f:c5:24:e6:6c:58:cd:6d:d9:23:ba:fd:43:36:8a:
d0:bf:f5:55:00:49:14:bd:4c:9d:9a:4c:06:41:68:
f3:55:d8:d1:a5:f1:f5:62:ba:da:04:6b:12:96:f3:
12:56:1b:3a:9b:01:a4:93:ba:03:96:45:8b:fb:4e:
33:f0:c0:5b:00:59:47:08:59:24:73:14:d7:78:3a:
2d:31:f9:85:90:01:f2:38:38:b3:10:fb:e3:15:de:
12:ce:b0:c1:6d:3f:96:3d:ee:85:f8:30:32:69:f0:
d3:bf:38:89:58:a0:3b:de:d3:7e:2f:a5:10:aa:67:
3c:55:c4:95:4e:57:19:f4:e1:ae:be:e9:94:4e:54:
58:92:9f:58:7a:45:79:08:2a:12:be:03:dd:4e:c5:
92:df:e3:f5:31:ff:0e:f5:16:35:f2:99:8d:3e:25:
99:c5:8c:35:c8:88:11:33:dc:d0:86:a1:4d:18:00:
4b:bc:f5:c2:30:f0:71:46:73:ca:6d:44:c7:ed:99:
f4:9a:e4:28:e1:2a:c0:36:1c:78:07:fd:6b:dd:c6:
e6:8f:25:d1:c6:24:99:34:34:77:08:c5:36:5e:4f:
07:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AC:94:F5:3F:A4:77:9E:60:DC:2D:D9:8F:79:F3:06:23:6B:BD:F3
X509v3 Authority Key Identifier:
keyid:27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:49:f0:68:27:6f:03:e9:71:e8:7e:e0:5e:ba:4e:44:6b:89:
2b:fe:e6:d3:df:43:43:fa:f2:69:99:18:ac:b0:d1:b4:ac:74:
82:dd:d8:33:9d:68:79:82:90:fd:55:33:f4:ae:3c:43:13:61:
cc:3a:e2:ea:23:10:c1:b5:8f:00:be:9a:83:65:30:55:65:cf:
3b:45:c0:02:06:96:24:a8:0d:d5:4f:c5:c8:3b:0e:8e:89:ad:
36:34:5a:ec:d7:b7:cf:89:6c:b4:5c:8b:60:57:00:8b:6b:d7:
07:4d:a0:d4:cc:5b:2e:59:8e:74:b0:c0:f2:7d:68:47:74:4e:
02:d7:7a:58:dd:b8:81:2a:88:e8:cd:6c:59:74:87:d8:25:7a:
bb:16:42:ff:44:0d:3f:35:8f:80:d5:c4:f1:6d:25:75:dc:df:
4d:cd:c0:19:0b:95:81:01:52:94:be:0b:03:a8:a5:4b:73:ab:
76:13:79:63:72:a0:5e:bc:9d:e5:47:6e:0e:d2:48:e6:89:00:
ec:10:39:95:12:a6:f1:88:eb:41:45:2e:e0:6f:d4:58:3b:35:
b8:8b:90:ad:2a:f4:0d:28:f0:3a:c2:df:b9:19:71:eb:1a:56:
bf:87:6c:4f:55:9f:de:01:9f:64:e5:b3:41:d4:10:56:02:15:
01:f5:d6:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8mB2/aKg0JedKXmTcmurMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDNkYjdlZTM0YWMyZDRlZDU3OGY0OTVlMDA5NmNiOThh
ZmY3MWMwHhcNMjYwNzI3MDUwMDQzWhcNMjYwNzI4MDUwMDQzWjAzMTEwLwYDVQQD
EyhjOWFjOTRmNTNmYTQ3NzllNjBkYzJkZDk4Zjc5ZjMwNjIzNmJiZGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHd7ex3JART83azaPSe+QjM6rV7+
r1vVbk8CrzQvxSTmbFjNbdkjuv1DNorQv/VVAEkUvUydmkwGQWjzVdjRpfH1Yrra
BGsSlvMSVhs6mwGkk7oDlkWL+04z8MBbAFlHCFkkcxTXeDotMfmFkAHyODizEPvj
Fd4SzrDBbT+WPe6F+DAyafDTvziJWKA73tN+L6UQqmc8VcSVTlcZ9OGuvumUTlRY
kp9YekV5CCoSvgPdTsWS3+P1Mf8O9RY18pmNPiWZxYw1yIgRM9zQhqFNGABLvPXC
MPBxRnPKbUTH7Zn0muQo4SrANhx4B/1r3cbmjyXRxiSZNDR3CMU2Xk8HKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmslPU/pHeeYNwt2Y958wYja73zMB8GA1UdIwQY
MBaAFCdD237jSsLU7VePSV4AlsuYr/ccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBQYmZ1Tkt3dFR0VjQ5SlhnQ1d5NWl2OXh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8yZmJjNjctZDZmOC00ZWE0LWJkZTMt
NTNiMzEwNDRlZDViLzEvSjBQYmZ1Tkt3dFR0VjQ5SlhnQ1d5NWl2OXh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8yZmJjNjctZDZmOC00ZWE0LWJkZTMtNTNiMzEwNDRlZDVi
LzEvSjBQYmZ1Tkt3dFR0VjQ5SlhnQ1d5NWl2OXh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy0nwaCdv
A+lx6H7gXrpORGuJK/7m099DQ/ryaZkYrLDRtKx0gt3YM51oeYKQ/VUz9K48QxNh
zDri6iMQwbWPAL6ag2UwVWXPO0XAAgaWJKgN1U/FyDsOjomtNjRa7Ne3z4lstFyL
YFcAi2vXB02g1MxbLlmOdLDA8n1oR3ROAtd6WN24gSqI6M1sWXSH2CV6uxZC/0QN
PzWPgNXE8W0lddzfTc3AGQuVgQFSlL4LA6ilS3OrdhN5Y3KgXryd5UduDtJI5okA
7BA5lRKm8YjrQUUu4G/UWDs1uIuQrSr0DSjwOsLfuRlx6xpWv4dsT1Wf3gGfZOWz
QdQQVgIVAfXWgw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:42 2026 by rpki-client