Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
File: jdADrwR3TdPjlzBJeYmjoXFRYlI.mft (raw, json)
Hash identifier: M2hiz6KiqB1jlNKQDbSvdRf3Kn/4E5T2jrXLsoFqVL8=
Subject key identifier: 0F:28:9C:83:20:59:A8:C2:B2:07:C3:1F:93:38:E5:66:8B:BF:B5:61
Authority key identifier: 8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
Certificate issuer: /CN=8dd003af04774dd3e39730497989a3a171516252
Certificate serial: 019FA33BD0AB6B0BFD729F23EEDEE115196D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
Manifest number: 1476
Signing time: Mon 27 Jul 2026 11:00:33 +0000
Manifest this update: Mon 27 Jul 2026 11:00:33 +0000
Manifest next update: Tue 28 Jul 2026 11:00:33 +0000
Files and hashes: 1: Dcx8h4CiQxGZDM9GxaHxjohozgs.roa (hash: JQ8uIK2vUMKNWaAjfc0A3/ZC5vK96qHNS+69HHvjW+s=)
2: jdADrwR3TdPjlzBJeYmjoXFRYlI.crl (hash: WI0fd1EhcpJbTBjw65cY6WIVn8Pci0g0xbpJm0xgmxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3b:d0:ab:6b:0b:fd:72:9f:23:ee:de:e1:15:19:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dd003af04774dd3e39730497989a3a171516252
Validity
Not Before: Jul 27 11:00:33 2026 GMT
Not After : Jul 28 11:00:33 2026 GMT
Subject: CN=0f289c832059a8c2b207c31f9338e5668bbfb561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:58:62:ab:02:cf:b3:ff:04:86:c8:db:f0:
36:45:ac:4c:23:2e:15:69:3c:46:91:7a:77:23:ca:
ba:49:2f:05:42:ec:48:d6:d2:bb:34:d6:64:e9:75:
26:7e:8b:60:06:f8:d8:2f:f3:f7:a9:c1:5e:0f:eb:
35:d3:1d:10:d4:a0:b4:d4:3f:b4:a7:5a:bf:75:17:
d2:d9:1e:4a:bb:a3:8e:07:7c:3f:6b:92:b0:ea:ca:
06:0a:68:9e:91:8b:c2:35:d6:5b:01:a2:1b:17:82:
b0:7c:e7:ba:80:00:a2:94:d7:f5:25:51:0f:30:3f:
6a:46:ee:b0:38:e1:17:a4:4e:d5:d4:c6:f3:a9:40:
8b:4e:91:56:df:06:8b:18:7b:20:20:bd:4c:e9:32:
b0:3b:45:95:f0:73:80:8e:ca:5c:5f:59:d3:11:5e:
17:c7:d5:e8:fa:84:e3:58:a0:c3:97:83:0d:9e:e7:
b5:4e:ee:34:f5:48:4c:65:91:71:a9:64:6c:bb:0d:
19:9e:b7:0a:b1:dc:fd:f9:25:95:6f:40:7c:f1:92:
38:55:d6:11:cf:d2:21:a2:f5:0e:41:54:4c:27:50:
c5:f2:db:26:b8:2f:cb:9b:1e:32:d4:6c:37:20:ba:
92:96:b3:8a:3f:aa:bb:12:f0:07:83:58:89:4f:60:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:28:9C:83:20:59:A8:C2:B2:07:C3:1F:93:38:E5:66:8B:BF:B5:61
X509v3 Authority Key Identifier:
keyid:8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:29:55:83:45:f7:53:7f:d7:ae:7d:e2:cd:0c:1c:08:1e:72:
24:00:9a:25:b2:a5:d7:b8:2f:a6:b3:d7:38:9e:e7:82:fd:85:
95:c5:51:17:9a:c1:b8:44:8c:92:92:9a:3b:86:c0:92:94:50:
86:d6:d0:56:ff:95:36:b4:ea:aa:5a:b0:69:4c:22:f2:2a:35:
09:c4:0c:e4:42:d9:7e:57:ae:1c:51:fe:b9:f4:d7:c0:dc:73:
91:70:01:65:05:38:c3:e5:e4:25:74:9e:b8:cc:b0:3f:40:3d:
34:62:cd:f9:e9:1d:b5:12:77:08:62:43:27:d6:d5:4f:b6:85:
91:91:8b:d8:a4:2a:e1:d9:41:db:46:df:df:e5:24:09:65:14:
f2:6c:1e:31:11:6d:54:bf:99:6c:8a:71:22:eb:de:ce:2d:3a:
1d:61:9c:b3:1c:fc:f0:e2:70:2a:4f:e2:28:86:ae:18:74:ff:
c0:a0:a9:1a:27:96:c6:28:dc:d2:7e:b3:72:ee:b1:35:a3:e1:
f8:b1:96:93:d5:77:5c:ab:3a:26:77:b8:4b:c8:23:5d:dc:c9:
39:e1:7d:8a:59:cb:69:fb:78:6b:35:fe:65:e7:bd:99:08:bc:
aa:12:5b:20:75:23:82:fa:93:2a:fb:09:08:94:9f:5d:8b:e9:
45:03:74:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:46:47 2026 by rpki-client