Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
File: jJED0ak0JRu5ixHxacuLK97Gojk.mft (raw, json)
Hash identifier: Ds5T3c3Ucc3FsGP69yh+hM11c3hF12gwomtLMOQHP1w=
Subject key identifier: D9:6E:E8:18:2A:72:1F:97:BD:43:55:AF:AE:08:F8:E6:5F:4F:CE:61
Authority key identifier: 8C:91:03:D1:A9:34:25:1B:B9:8B:11:F1:69:CB:8B:2B:DE:C6:A2:39
Certificate issuer: /CN=8c9103d1a934251bb98b11f169cb8b2bdec6a239
Certificate serial: 019FA0E081F46BDF26396AA39F7713C27B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:35 +0000
Manifest this update: Mon 27 Jul 2026 00:01:35 +0000
Manifest next update: Tue 28 Jul 2026 00:01:35 +0000
Files and hashes: 1: 59pj5vxlXpnK-XW5WwGqyEvdvU4.roa (hash: JfG2EIx3IMJpZJW/JIpT9Ra8SYgVicx3XtVxcMb037E=)
2: jJED0ak0JRu5ixHxacuLK97Gojk.crl (hash: 7lkNLpv6ZxrUUGlXe4+PlyK2xQGGYp1HGdNGGo6ZuVI=)
3: nYzmu5Mu67b3nOfjI7AnlWUe1RA.roa (hash: HUxHKo/Q8v3KIv8CGuS4MzSdG9gmRYG9CV801LmEvVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:81:f4:6b:df:26:39:6a:a3:9f:77:13:c2:7b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9103d1a934251bb98b11f169cb8b2bdec6a239
Validity
Not Before: Jul 27 00:01:35 2026 GMT
Not After : Jul 28 00:01:35 2026 GMT
Subject: CN=d96ee8182a721f97bd4355afae08f8e65f4fce61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:98:c6:c9:57:c2:57:6a:54:b8:a8:b8:90:60:
b6:44:f7:9a:16:ac:9c:ae:63:82:26:d9:df:8a:f2:
8b:14:ac:d1:e1:23:5e:de:cc:eb:b7:10:12:c9:78:
95:25:57:1e:f8:ef:f0:1a:40:05:95:43:86:87:20:
f9:cf:f4:ca:a0:38:1e:22:cf:37:a5:ae:32:15:f3:
d0:60:00:02:76:95:72:74:a1:7e:63:35:d7:5b:6e:
08:7d:a7:8e:41:d1:3a:54:e5:78:da:e9:20:73:a7:
fd:e1:8f:73:c8:50:47:cb:d5:8a:16:37:4d:18:0a:
54:65:77:1d:b4:2f:bb:07:73:0e:0b:30:8e:fc:ef:
a3:7b:d9:88:1c:fa:f6:9e:97:f6:4e:e4:06:72:2f:
5f:fe:59:2c:5f:f2:f0:52:8f:51:d8:25:7f:db:fe:
98:8d:1b:51:5f:4b:87:fd:75:b7:2c:b4:be:2c:b6:
88:aa:0a:da:3e:3f:01:82:cc:27:fb:aa:be:27:46:
75:87:08:7b:43:b9:c4:2b:d9:0d:51:01:f0:e6:b6:
e4:79:b2:b5:6c:7f:70:8f:e5:a6:8c:0e:a2:5e:07:
1f:22:a9:c3:0f:54:28:f6:85:9e:f9:e7:60:07:19:
67:db:a9:13:23:5c:14:c3:ea:27:01:0c:b9:e1:33:
1d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6E:E8:18:2A:72:1F:97:BD:43:55:AF:AE:08:F8:E6:5F:4F:CE:61
X509v3 Authority Key Identifier:
keyid:8C:91:03:D1:A9:34:25:1B:B9:8B:11:F1:69:CB:8B:2B:DE:C6:A2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1a:a1:74:55:82:9b:81:64:2f:71:6d:5b:b1:2a:14:a1:ac:
00:21:ba:b0:64:90:7f:82:37:e2:b2:49:65:df:37:bf:04:b1:
61:4d:d9:9e:62:14:de:01:5c:1b:54:72:b9:78:de:4c:d0:d3:
cb:86:fb:a4:99:8e:dc:5e:d6:91:6b:2b:13:87:31:42:51:83:
c2:d1:28:85:85:87:b6:ad:8d:ed:44:ae:11:e8:23:d3:0c:93:
51:ef:b6:1c:27:bf:d2:6b:b2:c6:d1:43:96:e8:39:3d:5d:93:
1a:d4:19:51:20:2e:26:58:08:ea:3c:03:e1:ac:88:a8:11:67:
16:13:b8:a7:20:01:8e:f3:40:9f:e4:54:c1:9e:64:36:f3:7e:
9e:6b:3f:f5:17:50:1e:8b:51:4c:16:c4:24:31:f7:4c:a6:a7:
fa:e2:c0:7c:b5:87:68:34:ac:6c:e5:78:ae:60:d2:34:03:da:
dc:d1:d6:63:a0:f2:41:5b:39:8f:77:99:0c:8e:8b:d4:1d:db:
f0:fa:1a:18:cd:a7:dc:e7:e6:93:54:f3:85:87:46:04:80:b3:
73:f3:67:3a:1d:2c:3f:20:53:cb:35:0d:72:65:49:57:1f:61:
3b:63:b4:5f:d5:a7:c2:69:83:39:91:b0:88:f9:25:51:88:3e:
6a:48:eb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:32:21 2026 by rpki-client