Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
File: Jd40sXxTewli5M272bxnKcix2Qo.mft (raw, json)
Hash identifier: qFZRdlvIvvGl7pxkWk/IDFYaXuYGWUuXRGEfiqgsEUE=
Subject key identifier: 28:83:22:B2:52:B9:10:F7:68:34:4B:51:3A:B6:FE:27:DE:3C:FF:C8
Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
Certificate issuer: /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Certificate serial: 019FFB366DF8F4C7C3B2E59A4C04786EFFCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
Manifest number: 03E2
Signing time: Thu 13 Aug 2026 13:01:15 +0000
Manifest this update: Thu 13 Aug 2026 13:01:15 +0000
Manifest next update: Fri 14 Aug 2026 13:01:15 +0000
Files and hashes: 1: Jd40sXxTewli5M272bxnKcix2Qo.crl (hash: eN0pBb7RbXo/KZwE3NKrSev/uVjLoTfvXZFY5SzykB0=)
2: LPtgrCTtvqxu3cjuNnJKHmVe1hU.roa (hash: BGV23TnfOPa93rWNrPOH2klHvaD0qSg8RA6zxqAnbzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:36:6d:f8:f4:c7:c3:b2:e5:9a:4c:04:78:6e:ff:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Validity
Not Before: Aug 13 13:01:15 2026 GMT
Not After : Aug 14 13:01:15 2026 GMT
Subject: CN=288322b252b910f768344b513ab6fe27de3cffc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:d2:8c:d6:85:d6:94:4f:71:28:0f:7e:d3:
60:d8:35:63:3b:1e:88:4c:38:4d:cb:81:db:df:e8:
b7:74:3f:8a:2c:d9:1c:20:62:87:4e:8d:e9:3b:fa:
35:6a:e4:e2:db:3f:b1:6c:d8:e2:f6:2a:6f:fa:64:
29:dd:ea:4c:b1:b9:db:d8:14:d0:d6:a7:4d:18:4f:
8e:99:fc:c8:22:3f:ec:50:2f:3e:66:05:66:6e:6b:
5b:77:41:04:a2:ba:f7:44:6f:8d:1a:22:85:62:14:
f0:6f:4e:86:96:09:65:42:ef:97:b6:85:dc:2a:2c:
b2:14:0a:6e:fa:67:91:fb:ed:63:b5:50:99:56:fd:
a4:f8:5c:29:c0:55:34:d1:fd:a4:3c:9f:5a:8c:23:
b2:8e:05:ae:ab:0f:14:13:ad:27:0b:94:5b:33:fb:
44:c7:fb:9f:16:bf:52:93:34:3f:d9:65:fc:a8:87:
27:fb:21:ed:bd:4a:c4:29:16:45:92:32:ee:33:35:
20:a3:88:13:7b:e1:44:c8:d4:cb:8b:b7:5e:c8:33:
4d:40:43:dd:18:50:36:c6:02:5b:c3:45:f4:75:6c:
ca:29:6a:0c:d8:c6:56:f0:e2:17:3f:5e:1e:c0:b7:
d1:f9:3a:b0:63:4d:da:51:8f:ba:ab:43:c4:31:fa:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:83:22:B2:52:B9:10:F7:68:34:4B:51:3A:B6:FE:27:DE:3C:FF:C8
X509v3 Authority Key Identifier:
keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3b:97:13:57:48:1b:e4:5f:9b:45:08:05:07:df:36:c7:4f:
74:7c:a3:ef:40:37:ba:30:e3:2e:16:26:36:03:5d:26:4f:b1:
92:da:fe:c9:c2:27:23:86:32:d8:65:e8:04:02:10:3b:0b:9b:
88:b5:37:49:ca:8e:3f:44:4b:d9:e4:ef:39:3b:42:97:2b:93:
d8:54:e6:11:8f:6c:48:9d:7a:a8:66:81:2e:0b:3f:49:09:38:
bf:2e:f9:b2:52:4c:ba:26:fd:f7:58:48:72:55:f2:b7:4f:92:
13:c5:7a:89:ae:f4:c0:d8:f4:14:a1:0e:83:64:ce:8a:d3:27:
a1:2c:98:2b:45:ff:20:03:59:ec:4a:f0:1c:06:43:e2:24:69:
50:30:ea:61:09:56:2d:97:38:77:2b:0b:2f:40:da:0c:ab:95:
17:75:1a:b6:dd:8f:28:17:50:1f:bd:f3:bb:5c:69:5c:69:96:
8a:f1:ac:4f:54:d5:b4:3c:dd:ae:63:62:30:91:97:05:1a:67:
38:e3:21:5d:8f:e9:f2:a6:85:16:c3:f4:8f:ae:01:d5:c6:c7:
e0:da:78:e8:23:26:09:52:91:c6:26:c1:5a:95:43:ce:b2:29:
72:af:51:52:de:53:aa:14:74:7f:00:d3:31:32:0a:2c:0d:0a:
f3:7b:e3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 17:29:33 2026 by rpki-client