Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
File: JTYSS5962om34iZByFbTBTA8H3w.mft (raw, json)
Hash identifier: yYm1/ubk3P1jVMegyEbKdixi+nGj03v/NTsLQTtCMvs=
Subject key identifier: 0D:AA:57:31:BD:15:98:46:98:73:65:2F:74:BE:ED:49:1F:A2:ED:6B
Authority key identifier: 25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
Certificate issuer: /CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Certificate serial: 019FA260D9C4A4EE24D5C2036B845A1F65D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
Manifest number: 19CD
Signing time: Mon 27 Jul 2026 07:01:23 +0000
Manifest this update: Mon 27 Jul 2026 07:01:23 +0000
Manifest next update: Tue 28 Jul 2026 07:01:23 +0000
Files and hashes: 1: 1WsHGlHkp2WjNpTEWov_RNt1288.roa (hash: pr8q/7m/guyhubc0Lv+HgEZYXjReEisDa6/5dcWRxog=)
2: JTYSS5962om34iZByFbTBTA8H3w.crl (hash: xLYY5VYeNPhD4eOCL5qiQafJuDFDc8QltDeid/VVcig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:d9:c4:a4:ee:24:d5:c2:03:6b:84:5a:1f:65:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Validity
Not Before: Jul 27 07:01:23 2026 GMT
Not After : Jul 28 07:01:23 2026 GMT
Subject: CN=0daa5731bd1598469873652f74beed491fa2ed6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:b6:0e:58:b4:e7:77:e2:af:f6:df:6d:4e:
a1:cc:59:fb:e0:7e:e5:2f:1c:a5:aa:95:be:0d:20:
ae:73:01:98:1c:6f:42:df:a7:93:38:29:52:99:d2:
e6:5a:5a:3d:c3:bc:5d:08:34:84:bf:fe:c6:48:b4:
37:40:0c:47:23:23:f4:45:58:ef:37:77:c3:a2:fa:
6c:f3:10:ac:da:80:12:ae:a7:30:a4:ba:db:66:eb:
65:83:04:bd:67:5b:c8:d5:16:4a:ef:5f:5f:7f:02:
c8:d1:b6:d1:e4:bc:c0:09:9a:0d:96:73:b8:a1:38:
20:0c:39:ec:fb:a4:49:e8:ba:56:46:46:83:1d:c2:
bb:66:01:47:3f:73:38:2d:47:76:01:8e:5a:bc:07:
9e:8e:e2:12:66:7b:7c:26:14:40:88:3e:c4:5f:f8:
d8:6f:b5:40:74:4a:50:da:57:cd:61:b9:b6:f7:f1:
7e:d4:32:04:cd:8b:61:24:a7:d2:f1:90:b2:c1:7b:
77:91:c5:b1:e3:8e:26:ab:01:13:92:16:a8:05:44:
3d:7d:70:84:a4:cf:ca:c9:a0:84:69:25:f5:5d:94:
61:4a:06:54:25:ca:25:b5:3d:09:a1:9d:6c:33:51:
0f:33:31:91:84:97:86:f0:4b:c3:78:21:e2:76:a3:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AA:57:31:BD:15:98:46:98:73:65:2F:74:BE:ED:49:1F:A2:ED:6B
X509v3 Authority Key Identifier:
keyid:25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:34:26:ee:06:80:8b:0a:12:1c:9e:89:cc:55:df:5b:7c:b9:
9a:4c:3c:45:f8:07:1d:a5:ba:b9:cc:54:f5:84:94:ed:f9:51:
14:0e:73:ad:dc:70:2e:dd:c6:37:63:32:58:0d:b6:b9:27:cc:
fc:69:6e:7a:17:51:d2:7e:3c:47:d9:2c:5b:67:4b:d5:56:a2:
96:74:54:cd:16:76:c1:51:45:62:38:93:86:f2:56:e8:60:5c:
83:8d:16:fb:f6:e0:9a:ac:86:14:17:41:4a:71:d5:e9:d5:00:
ae:14:bc:9f:74:8e:54:3f:e1:01:1a:4f:68:31:1d:9a:28:78:
58:8f:9b:b8:c8:2b:d6:45:38:f3:a5:54:9a:f9:bb:83:be:5d:
d8:c9:6b:77:12:5e:c5:83:77:51:82:10:d5:c7:3a:5c:d8:4f:
15:00:f9:df:5a:94:06:f3:1f:d8:13:e2:1b:6b:31:b8:17:3e:
3c:85:4b:f9:03:63:cc:f2:df:fc:b8:df:3a:fe:2c:ee:dc:43:
68:16:3f:9a:da:8e:32:d0:bb:6f:c3:15:12:98:24:7e:6b:4d:
b3:7f:23:24:50:83:47:8c:fe:f2:a3:7e:5c:c9:eb:9f:2a:8f:
55:9b:54:98:1c:a7:95:34:1c:18:c7:db:98:21:2f:8e:09:23:
32:3f:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:11 2026 by rpki-client