Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/JaizJB9Uy4zEo2EkJxnto1ALWPM.mft
File: JaizJB9Uy4zEo2EkJxnto1ALWPM.mft (raw, json)
Hash identifier: s/in1f5BxuqnkcKbga5EP9Oj8OLbb1urr3J1ZDR/Fec=
Subject key identifier: 8D:06:8C:0F:A7:2A:52:C4:56:6F:85:1B:D0:84:8D:2B:96:C2:1A:36
Authority key identifier: 25:A8:B3:24:1F:54:CB:8C:C4:A3:61:24:27:19:ED:A3:50:0B:58:F3
Certificate issuer: /CN=25a8b3241f54cb8cc4a361242719eda3500b58f3
Certificate serial: 019F867B1586B5C83294EC17AD36B17C113B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaizJB9Uy4zEo2EkJxnto1ALWPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/JaizJB9Uy4zEo2EkJxnto1ALWPM.mft
Manifest number: 0101
Signing time: Tue 21 Jul 2026 21:00:41 +0000
Manifest this update: Tue 21 Jul 2026 21:00:41 +0000
Manifest next update: Wed 22 Jul 2026 21:00:41 +0000
Files and hashes: 1: JaizJB9Uy4zEo2EkJxnto1ALWPM.crl (hash: TdgcCB36wc+JdJkyP+rA9xdSNu4mw/w5cWJ55X0siVM=)
2: f8IMUeFD4nC8SZ-FnXMVQXrQOmQ.roa (hash: 4sDgm+XOigmig9qbzZKlgtnrz0wx8lArACN7Tm+Zbek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/JaizJB9Uy4zEo2EkJxnto1ALWPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/JaizJB9Uy4zEo2EkJxnto1ALWPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaizJB9Uy4zEo2EkJxnto1ALWPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:7b:15:86:b5:c8:32:94:ec:17:ad:36:b1:7c:11:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a8b3241f54cb8cc4a361242719eda3500b58f3
Validity
Not Before: Jul 21 21:00:41 2026 GMT
Not After : Jul 22 21:00:41 2026 GMT
Subject: CN=8d068c0fa72a52c4566f851bd0848d2b96c21a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:93:dc:78:ce:8e:e8:e7:be:d1:6b:23:c3:
d2:0c:2e:c5:3d:c8:82:57:96:80:28:0c:48:68:5f:
92:3a:5c:51:82:b3:df:67:02:53:77:63:54:eb:4d:
17:07:4a:ef:bc:d8:d0:21:3b:58:d7:15:1d:ba:78:
55:43:13:9c:00:c8:cb:f4:93:5e:97:c5:c8:f4:46:
14:b0:3a:b3:e5:39:f1:4e:62:f9:a5:e1:96:ce:ee:
1f:df:85:c5:7a:e7:71:4a:2d:d9:f7:68:60:0e:55:
9d:41:93:d3:be:ad:96:0f:1c:04:6f:80:f3:6a:2c:
b0:6c:30:c2:60:92:1b:b0:de:39:3c:00:ed:db:c0:
41:a0:cc:18:b8:ff:18:6c:1e:cc:07:92:79:49:66:
79:e0:80:8e:67:13:11:ed:2a:0e:1b:41:c2:fe:5f:
c2:5a:ce:c8:78:f3:f9:2d:3c:5d:a0:49:a2:ba:6f:
b4:88:3a:dd:0a:f1:af:3f:92:9b:fa:fa:5d:26:e4:
c8:ba:76:76:9a:bf:1f:de:fb:92:22:38:ba:a3:4c:
5c:1c:e7:c0:01:c4:30:1f:2f:5a:0a:f1:f7:44:95:
dc:80:f1:1a:36:08:6f:df:b9:72:55:64:d8:7e:10:
4d:30:84:54:f3:ea:6f:78:48:23:a6:ff:88:f1:a6:
51:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:06:8C:0F:A7:2A:52:C4:56:6F:85:1B:D0:84:8D:2B:96:C2:1A:36
X509v3 Authority Key Identifier:
keyid:25:A8:B3:24:1F:54:CB:8C:C4:A3:61:24:27:19:ED:A3:50:0B:58:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaizJB9Uy4zEo2EkJxnto1ALWPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/JaizJB9Uy4zEo2EkJxnto1ALWPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0b70ee-c064-42e7-acff-c2fdec7619a1/1/JaizJB9Uy4zEo2EkJxnto1ALWPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c8:ab:b2:40:f9:3f:38:75:be:4b:47:3b:c8:58:52:97:d0:
e1:39:95:2a:68:a4:99:87:a0:d0:5e:df:fc:64:04:91:e2:82:
8f:a3:33:58:d4:dd:bb:36:e0:c4:e4:5e:76:2c:fd:66:ff:40:
cc:9d:89:7f:75:87:fd:8e:4b:f0:f6:3c:8a:24:be:71:f1:10:
17:5c:3d:77:be:5b:f5:0e:84:32:71:79:ee:7c:03:5c:f3:82:
8a:70:d2:99:68:4e:a3:c1:58:05:bb:36:f2:11:1a:b5:37:36:
3d:01:48:0e:2b:45:f3:93:5c:40:ed:7b:13:58:cc:98:41:16:
71:ab:f3:25:4f:27:ad:a3:af:f0:92:77:b6:58:e3:0b:bf:2e:
ae:a6:ff:5c:28:d9:28:08:9d:ed:c0:8d:7a:22:29:03:ab:39:
16:e4:99:b0:d2:b3:63:96:d8:f4:3e:26:c4:fe:ed:63:16:db:
eb:13:1e:38:61:11:3c:a6:36:a6:a8:ac:90:e9:e7:22:23:4d:
99:1e:5c:a7:1b:55:5e:2f:33:58:50:f8:3a:7d:58:e7:4f:5c:
00:97:d5:82:bc:89:dd:6f:78:7e:54:d5:f9:b1:c2:9b:c3:bd:
61:f6:ec:90:91:91:e5:a3:c9:8f:92:3f:ab:19:a3:0a:f4:70:
65:32:ba:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:10:33 2026 by rpki-client