Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
File: jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft (raw, json)
Hash identifier: XB/Aw5poio+HIRFbIDqv2wUpXKVh8KwtAQ3ZT8f0mKc=
Subject key identifier: 97:06:D6:7B:1A:39:BE:9D:3E:13:C4:D9:86:0E:B5:BD:8B:86:F8:A4
Authority key identifier: 8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
Certificate issuer: /CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Certificate serial: 019FA1BBF25947AE002DD7F0E802755F54DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 04:01:16 +0000
Manifest this update: Mon 27 Jul 2026 04:01:16 +0000
Manifest next update: Tue 28 Jul 2026 04:01:16 +0000
Files and hashes: 1: T-A-44juLtTcwFnkF5SXhOQIQ9I.roa (hash: 5FV/i01IPIqBUOBQNZQFuPYhK8LFfHjFfgoQlpXFS0o=)
2: jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl (hash: RgDJXiKWDTi1Si0FG9GD7SIAcgdq98vMZ4v/9lZYRwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:f2:59:47:ae:00:2d:d7:f0:e8:02:75:5f:54:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Validity
Not Before: Jul 27 04:01:16 2026 GMT
Not After : Jul 28 04:01:16 2026 GMT
Subject: CN=9706d67b1a39be9d3e13c4d9860eb5bd8b86f8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:36:72:e5:44:ab:20:05:e9:cf:11:69:8c:
33:e4:05:60:96:18:00:b7:18:15:7a:8b:85:2c:f9:
f1:e7:17:c1:59:ae:a7:68:93:e9:29:a9:ca:21:cd:
61:e5:82:98:27:bf:d3:02:d9:8d:d6:fd:6e:e1:2a:
2b:9a:7d:ea:c8:ae:2d:09:2a:43:12:94:85:b7:f0:
79:fd:4b:4f:aa:e9:ae:b5:79:e6:32:d5:6c:d1:4b:
08:c7:61:71:5a:d0:95:78:db:e1:a9:1d:7b:5c:a5:
49:6a:0c:9f:c6:84:49:50:9c:f5:b9:cb:44:5f:28:
af:4a:5c:d9:89:32:77:9f:2c:85:48:d8:9a:a4:07:
7f:fc:cd:79:da:7f:aa:85:f0:a9:31:5f:8b:de:28:
a9:44:7d:5f:2f:c9:47:48:78:7b:50:aa:f1:71:b3:
61:96:c5:0a:ba:52:8a:e1:32:ec:7a:94:25:53:c2:
95:3c:68:f2:5a:1a:9f:63:e0:47:20:62:6c:83:2d:
cf:72:4c:85:48:f4:51:4c:c3:04:37:3f:bf:21:3c:
6a:27:1e:53:3b:03:db:9b:41:32:5f:06:aa:20:92:
ec:33:63:8f:e3:7b:93:5d:f8:c6:7f:54:0d:dc:d4:
8a:87:3d:b0:27:5e:8e:94:e1:5f:02:0a:a8:e5:4f:
4a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:06:D6:7B:1A:39:BE:9D:3E:13:C4:D9:86:0E:B5:BD:8B:86:F8:A4
X509v3 Authority Key Identifier:
keyid:8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:63:a7:2b:c2:dd:13:7b:51:b5:29:52:38:9b:7b:2d:7d:2a:
8d:83:7d:2d:5a:a1:7d:c6:95:ee:7a:49:5e:a2:65:ab:db:4d:
53:8b:7e:8b:3d:df:24:a9:c6:8d:89:f2:fc:34:3b:33:1f:57:
41:de:46:57:3d:5f:68:14:ae:88:97:3d:f7:54:5e:c0:df:9c:
1b:94:86:0a:40:e8:56:e1:fc:95:4f:3e:64:e5:dc:dc:bd:a7:
af:32:5f:0d:f9:c0:46:4d:8a:36:23:f7:cf:90:0c:e8:af:40:
14:61:f7:b1:f8:3e:bc:af:9c:09:51:dd:01:1e:41:c7:3a:22:
e6:da:34:36:1d:45:43:6e:c2:96:67:0e:66:d5:e2:43:8a:6b:
69:28:41:94:2d:26:56:32:ec:5e:0d:b0:a1:78:2b:43:c3:64:
fe:bc:ce:9a:44:eb:05:98:5f:05:55:65:95:55:25:aa:59:d5:
f2:78:8f:a4:6f:69:94:b3:6a:c6:bb:71:1e:28:8c:cf:17:6c:
29:7e:7a:86:17:c8:fd:34:93:51:19:94:b6:fb:e7:35:e7:5e:
1a:11:1e:82:d1:c5:81:7e:fc:54:5e:00:48:d1:db:76:50:67:
7f:db:7e:61:ca:5d:f4:79:83:51:41:61:f1:10:df:86:fa:11:
f4:d7:42:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hu/JZR64ALdfw6AJ1X1TbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMDQxZDY2OWVhNmM0MTE3MGQ2ZjgxNDA5YzBmZmRjMjhl
NTY5MDcwHhcNMjYwNzI3MDQwMTE2WhcNMjYwNzI4MDQwMTE2WjAzMTEwLwYDVQQD
Eyg5NzA2ZDY3YjFhMzliZTlkM2UxM2M0ZDk4NjBlYjViZDhiODZmOGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8o2cuVEqyAF6c8RaYwz5AVglhgA
txgVeouFLPnx5xfBWa6naJPpKanKIc1h5YKYJ7/TAtmN1v1u4Sormn3qyK4tCSpD
EpSFt/B5/UtPqumutXnmMtVs0UsIx2FxWtCVeNvhqR17XKVJagyfxoRJUJz1uctE
XyivSlzZiTJ3nyyFSNiapAd//M152n+qhfCpMV+L3iipRH1fL8lHSHh7UKrxcbNh
lsUKulKK4TLsepQlU8KVPGjyWhqfY+BHIGJsgy3PckyFSPRRTMMENz+/ITxqJx5T
OwPbm0EyXwaqIJLsM2OP43uTXfjGf1QN3NSKhz2wJ16OlOFfAgqo5U9K9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcG1nsaOb6dPhPE2YYOtb2LhvikMB8GA1UdIwQY
MBaAFI8EHWaepsQRcNb4FAnA/9wo5WkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandRZFpwNm14QkZ3MXZnVUNjRF8zQ2psYVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xYThjYmQtNzJjZi00YTFjLTgzZDIt
YzIzZWFlZDRkMTI1LzEvandRZFpwNm14QkZ3MXZnVUNjRF8zQ2psYVFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8xYThjYmQtNzJjZi00YTFjLTgzZDItYzIzZWFlZDRkMTI1
LzEvandRZFpwNm14QkZ3MXZnVUNjRF8zQ2psYVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2OnK8Ld
E3tRtSlSOJt7LX0qjYN9LVqhfcaV7npJXqJlq9tNU4t+iz3fJKnGjYny/DQ7Mx9X
Qd5GVz1faBSuiJc991RewN+cG5SGCkDoVuH8lU8+ZOXc3L2nrzJfDfnARk2KNiP3
z5AM6K9AFGH3sfg+vK+cCVHdAR5Bxzoi5to0Nh1FQ27ClmcOZtXiQ4praShBlC0m
VjLsXg2woXgrQ8Nk/rzOmkTrBZhfBVVllVUlqlnV8niPpG9plLNqxrtxHiiMzxds
KX56hhfI/TSTURmUtvvnNedeGhEegtHFgX78VF4ASNHbdlBnf9t+Ycpd9HmDUUFh
8RDfhvoR9NdCWQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:19:36 2026 by rpki-client