Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
File: JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft (raw, json)
Hash identifier: jm7ZhD7wmmEZ4MdqvnEb0UP3HgIrsh/z19N52MtfGbg=
Subject key identifier: 77:20:CD:FD:44:EA:C0:33:23:BC:27:07:E6:E0:E7:98:60:11:8D:C4
Authority key identifier: 24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
Certificate issuer: /CN=24bc98ddeefdb561aa69eca7349060d84059e192
Certificate serial: 019F8230EFA6E22DDD4FE0F868CE81AB003F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
Manifest number: 084D
Signing time: Tue 21 Jul 2026 01:01:12 +0000
Manifest this update: Tue 21 Jul 2026 01:01:12 +0000
Manifest next update: Wed 22 Jul 2026 01:01:12 +0000
Files and hashes: 1: JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl (hash: t8/69qCVu1QkgQ8auxS6kSzSAkXBOKVvQ9goQShqgCE=)
2: pCSMBqmn-2xkRzGOrRbDhgjt1ZQ.roa (hash: qEIf3vrVO3maTFTQZWMGFxBk+5hFDaz1/E5BMr9cl+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:30:ef:a6:e2:2d:dd:4f:e0:f8:68:ce:81:ab:00:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24bc98ddeefdb561aa69eca7349060d84059e192
Validity
Not Before: Jul 21 01:01:12 2026 GMT
Not After : Jul 22 01:01:12 2026 GMT
Subject: CN=7720cdfd44eac03323bc2707e6e0e79860118dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c9:d8:b0:2d:5c:2e:2a:81:4d:32:36:a4:e7:
75:a7:89:36:97:f5:a0:9e:19:18:0d:eb:8a:32:68:
b1:e5:6d:fa:0d:8e:2f:bb:9f:51:fa:48:4f:9a:f6:
57:13:90:e8:de:30:99:8e:4a:f5:4c:3c:97:af:60:
89:3f:3f:be:bc:b2:d8:d8:9a:be:b7:86:65:a4:80:
15:ff:a3:03:34:cd:0d:1b:f4:1b:81:d3:5a:5e:cc:
e2:18:8b:f7:73:ca:52:85:7a:8d:35:d9:ed:65:da:
7f:e4:68:1f:b5:96:fc:e4:d4:06:da:a8:7c:24:d1:
04:2b:3e:1d:9b:59:b7:d5:13:49:bd:5b:e3:15:b8:
a8:69:41:c9:01:16:f7:cc:59:20:a4:85:40:bc:15:
ef:f9:c8:62:66:15:c8:e6:5b:ac:5d:19:6d:aa:8d:
db:c7:a7:d9:80:2c:ba:84:27:ba:35:71:9f:6e:06:
d0:19:c7:d3:51:5e:0f:86:38:b4:81:50:6f:1d:e4:
57:5f:1b:e9:72:99:c0:84:4f:af:e0:91:ed:62:bf:
6a:f1:2e:08:b7:88:16:38:36:5c:f7:87:ad:8b:10:
d3:14:d4:dd:6b:fe:92:0d:fc:e4:c9:25:a2:83:51:
e0:12:6a:cb:48:ea:0f:a0:e2:f3:1b:78:24:f8:bc:
62:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:20:CD:FD:44:EA:C0:33:23:BC:27:07:E6:E0:E7:98:60:11:8D:C4
X509v3 Authority Key Identifier:
keyid:24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d9:c7:f7:eb:c8:c7:69:60:69:19:ef:80:02:96:36:16:40:
70:f7:b9:98:1b:69:81:70:40:c9:db:26:a5:bb:a6:08:19:94:
6e:cd:a6:f8:e2:33:c6:20:32:b6:cf:93:e9:88:07:6d:27:9c:
0b:18:36:9e:a7:42:f7:39:11:21:ab:72:37:7b:d3:de:b8:45:
3d:48:4c:f0:3a:8f:7c:3a:4e:c4:02:d2:1a:1d:9a:53:1e:28:
bf:c8:26:9b:93:e0:88:98:4c:25:1f:5d:07:50:20:76:95:1a:
08:45:32:fe:35:c8:d6:27:cb:40:ce:3b:0a:f8:ed:f2:b2:10:
38:93:a2:41:be:49:4e:d4:2d:d2:0b:56:ac:c6:46:a7:4b:64:
1b:fb:9f:05:e9:8d:e8:ab:e2:f1:6b:fc:92:40:91:b4:ac:23:
0b:0e:26:ee:59:8c:22:ab:22:a2:76:32:64:9c:cb:34:72:64:
83:09:83:34:3a:19:53:9c:bf:96:8f:84:6a:f0:49:79:db:a0:
d1:1f:4d:4a:91:6f:fe:33:2c:1e:43:f4:51:70:58:94:df:e3:
8f:96:1c:79:1d:97:f9:1a:b5:55:07:d5:85:d6:f0:21:40:78:
47:c2:e5:c9:a1:6d:00:27:e7:e9:cb:70:ab:f8:e8:b1:a9:c5:
e5:13:78:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:50:56 2026 by rpki-client