Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
File: JjycXuMYJkcwl2-vxykVM-vasK4.mft (raw, json)
Hash identifier: KQj879H4I/R6DqWqTqKY5EO0+6UH7oFbLjM1CcWtPRU=
Subject key identifier: ED:3C:CE:63:7C:0E:21:B9:99:29:27:A3:D5:B3:94:33:26:E9:84:37
Authority key identifier: 26:3C:9C:5E:E3:18:26:47:30:97:6F:AF:C7:29:15:33:EB:DA:B0:AE
Certificate issuer: /CN=263c9c5ee318264730976fafc7291533ebdab0ae
Certificate serial: 01A0035DF4E2876C3271BF3455ECFEA03DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
Manifest number: 7B
Signing time: Sat 15 Aug 2026 03:01:24 +0000
Manifest this update: Sat 15 Aug 2026 03:01:24 +0000
Manifest next update: Sun 16 Aug 2026 03:01:24 +0000
Files and hashes: 1: 3s2ZJUQAOdZQJN2QTpFD73M4leg.roa (hash: +xm6BHzusOZzGKozAQdu+MZkDVhhL6TdcM7wkPQ8Ae0=)
2: JjycXuMYJkcwl2-vxykVM-vasK4.crl (hash: ELcNmvrGm0oCvbkiUgUMsJieses8kvNZl5mYqQe6w90=)
3: sijAZFXqLEAsSi2rQmlGly-OpqE.roa (hash: nt4ShhsIrV0zPjcFLpG+lSg9q9cr8DdHdWhyP7LPzjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:f4:e2:87:6c:32:71:bf:34:55:ec:fe:a0:3d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=263c9c5ee318264730976fafc7291533ebdab0ae
Validity
Not Before: Aug 15 03:01:24 2026 GMT
Not After : Aug 16 03:01:24 2026 GMT
Subject: CN=ed3cce637c0e21b9992927a3d5b3943326e98437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:84:68:56:83:17:f9:63:c5:9b:d0:83:31:
18:f1:36:ba:4c:02:04:af:4a:54:b1:29:1b:dd:1a:
04:c0:5c:46:2f:5b:ef:b9:11:c4:4f:7e:14:ae:87:
9a:e4:6e:0f:e6:e2:c4:67:56:27:e7:27:ef:0f:4f:
8d:87:10:27:68:cd:43:8d:68:22:9a:c7:c7:cb:55:
19:6c:a2:2b:5e:a4:45:a7:83:eb:04:02:e7:46:46:
0b:30:5f:25:64:ad:d9:fe:a0:0b:d1:0c:62:7f:3f:
2d:63:fe:e8:b9:8c:be:9f:e3:69:83:ac:af:de:56:
3f:76:f6:87:08:6c:a9:a2:65:96:e4:41:7b:d3:02:
1d:14:b8:d0:54:6b:46:80:a6:71:a3:a0:b7:aa:d3:
1f:07:0c:b9:d4:9c:22:6a:9f:39:be:ea:f5:2d:7d:
c8:c5:b6:cb:b5:b0:16:94:7c:a8:55:b1:f7:bd:f4:
1b:9f:4b:4c:f9:b2:12:6e:3a:62:6f:8c:f4:6e:09:
30:c5:5f:85:65:73:f0:69:48:49:f1:f6:2e:0f:33:
9b:9c:e5:69:67:c4:b5:db:e5:c1:94:1d:24:40:3e:
a1:49:cd:3e:9c:98:b5:ed:8d:10:11:9e:f2:6f:c9:
5c:f5:ed:d2:20:f5:d9:5c:c7:7a:01:30:94:a3:00:
1a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3C:CE:63:7C:0E:21:B9:99:29:27:A3:D5:B3:94:33:26:E9:84:37
X509v3 Authority Key Identifier:
keyid:26:3C:9C:5E:E3:18:26:47:30:97:6F:AF:C7:29:15:33:EB:DA:B0:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a7:27:f1:a1:e8:d6:21:8d:66:76:a8:f8:52:93:62:ea:e9:
3b:d1:00:8d:80:06:f1:d5:93:60:c0:f6:a9:fd:c3:1c:05:65:
22:69:de:a8:2c:93:ef:1a:3d:73:f3:b6:eb:1c:03:78:08:49:
2e:60:4c:4a:7b:21:78:43:90:71:36:31:82:bc:d9:af:c1:41:
43:3e:a6:6b:9d:a7:a4:ed:0d:bd:7d:40:bc:12:8d:8e:c0:2e:
bb:50:40:66:9c:d9:29:02:38:7f:6b:70:89:66:2b:02:e6:b2:
c3:e7:92:02:58:9b:36:ce:21:4c:c0:fd:9e:6c:5e:76:d1:e3:
e9:a5:10:94:9e:d2:65:16:27:8a:d3:7a:d0:9c:6a:44:d9:5d:
9b:57:b3:51:a0:88:9c:51:26:1c:91:31:25:96:3b:53:68:42:
69:b1:6a:68:ec:1b:32:14:1a:41:81:a5:69:c8:a8:51:c6:53:
74:45:45:21:fa:16:2f:7a:59:8a:ba:1e:5f:7a:30:77:75:56:
d2:ca:dd:db:32:43:22:96:f0:ef:63:e9:0f:d1:57:31:eb:b8:
d9:1d:54:0a:22:cd:a1:f8:15:40:5f:9e:c0:bf:0a:f0:f4:9f:
a5:78:55:12:01:4b:fd:97:59:d1:58:f5:cc:6c:f8:48:ac:51:
1d:c4:df:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:52:13 2026 by rpki-client