Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.mft
File: jLsZbctbQbLDX2jNw9CKcj-OMKc.mft (raw, json)
Hash identifier: 40+SjkufIFmKOFNDKfsb0e24uFv0+XcugSMzaOOm4xc=
Subject key identifier: D9:D5:36:F4:59:7F:20:EF:71:E0:BD:87:5B:D0:DA:1E:0D:17:03:8A
Authority key identifier: 8C:BB:19:6D:CB:5B:41:B2:C3:5F:68:CD:C3:D0:8A:72:3F:8E:30:A7
Certificate issuer: /CN=8cbb196dcb5b41b2c35f68cdc3d08a723f8e30a7
Certificate serial: 019F85D64E83EE9FB0FA38ED7489E9861A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLsZbctbQbLDX2jNw9CKcj-OMKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:00:42 +0000
Manifest this update: Tue 21 Jul 2026 18:00:42 +0000
Manifest next update: Wed 22 Jul 2026 18:00:42 +0000
Files and hashes: 1: jLsZbctbQbLDX2jNw9CKcj-OMKc.crl (hash: fse9F2myk5l5hpTRphlisq17MEQPHzpN9PhumwHb7JM=)
2: pjDwdQHNJVDo70btJAsKcL2t8Wc.asa (hash: 9hs9uCk4t0lY0AxWzX7WklKc5C2LiY8Jejt1rMjXdhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jLsZbctbQbLDX2jNw9CKcj-OMKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:4e:83:ee:9f:b0:fa:38:ed:74:89:e9:86:1a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbb196dcb5b41b2c35f68cdc3d08a723f8e30a7
Validity
Not Before: Jul 21 18:00:42 2026 GMT
Not After : Jul 22 18:00:42 2026 GMT
Subject: CN=d9d536f4597f20ef71e0bd875bd0da1e0d17038a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:2f:80:00:5e:5b:92:97:e6:cd:78:aa:b4:
1b:46:44:19:ce:7e:e9:6b:a7:68:dd:ae:fc:bf:c5:
da:b0:5f:31:58:ad:7e:bd:8c:b5:af:f8:a1:3e:41:
61:94:b1:0f:a7:2c:c9:24:36:06:42:4c:42:18:d8:
b0:74:9e:5a:d2:bc:af:a9:88:35:4c:8f:f7:23:fa:
54:37:59:e3:f2:05:8d:6c:a2:c9:58:97:cf:b6:36:
ac:3f:8e:d4:2f:90:d1:c4:60:f4:b1:90:68:3a:6d:
e9:9b:4d:6c:dc:82:fe:99:9c:fd:a9:f1:5d:10:74:
fd:f2:e0:bb:cf:61:58:eb:31:24:ec:2a:80:fc:60:
a7:af:33:4a:7d:6a:28:41:b5:00:ae:86:8e:db:6c:
da:79:a8:97:fe:4a:d0:c6:60:b3:d8:96:f1:a1:6c:
ff:07:37:11:51:de:0c:d7:9f:16:36:04:fe:d4:69:
99:f1:79:23:29:83:33:79:9f:c8:ba:72:81:93:e8:
8a:e6:20:75:c0:60:62:98:35:47:b1:e1:ea:40:07:
34:a4:c1:86:4e:a8:1e:70:8a:11:6f:5a:f1:85:25:
ee:e4:55:30:9e:0e:74:e7:53:df:ec:ce:ad:25:ad:
d6:99:d2:54:e5:d7:ce:13:b4:32:61:c5:1f:8f:7e:
d6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D5:36:F4:59:7F:20:EF:71:E0:BD:87:5B:D0:DA:1E:0D:17:03:8A
X509v3 Authority Key Identifier:
keyid:8C:BB:19:6D:CB:5B:41:B2:C3:5F:68:CD:C3:D0:8A:72:3F:8E:30:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLsZbctbQbLDX2jNw9CKcj-OMKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ac:92:e0:99:f5:42:61:27:3e:3d:77:80:b8:51:55:dd:d0:
46:62:7d:d8:a1:c4:ab:78:c3:db:5d:2b:6e:a6:90:7a:e7:26:
a2:ab:cd:a7:35:5d:70:ef:b6:81:1e:97:cb:89:48:c6:98:5c:
4c:72:b0:cb:6f:ab:61:4e:7f:2b:c0:33:7e:fe:58:f1:ad:56:
4c:45:2e:c0:db:81:60:f6:62:00:7c:29:6a:89:35:16:61:e5:
ed:64:01:89:33:7d:be:d9:a0:68:b1:ea:23:83:19:f4:68:86:
9f:14:59:88:ce:89:e1:7f:30:23:e7:51:52:47:67:38:02:34:
8c:cb:ea:93:8a:6f:16:a0:66:7d:63:4f:6a:d4:74:48:b1:27:
66:f7:35:13:ef:9b:aa:e5:3a:22:e0:40:88:57:6d:42:e7:a7:
f0:da:65:7f:03:8e:d9:12:43:0b:88:74:f0:3b:80:17:46:ad:
d2:2f:80:aa:55:41:7e:1e:9b:fe:48:56:c1:47:34:3f:f3:5f:
fa:7c:fa:f6:0f:cb:34:03:cd:bd:78:68:c7:cc:4c:32:ca:9a:
16:0c:57:6c:00:91:bf:c9:01:49:a2:81:8a:a0:a8:74:21:38:
ee:e2:76:6c:b2:ea:1f:7e:3a:f8:58:49:0a:23:0e:11:55:c9:
7d:69:fd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:07:43 2026 by rpki-client