Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: f4RoLivNt0d35EIKsw9x96Cu9JRGxaI6QFiFvJOB6L4=
Subject key identifier: EC:33:D4:74:57:7A:D7:1B:1B:57:8F:B8:2D:5C:3F:77:5A:F4:96:9B
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 019F864476744D103E21193290FC332363B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 1821
Signing time: Tue 21 Jul 2026 20:01:01 +0000
Manifest this update: Tue 21 Jul 2026 20:01:01 +0000
Manifest next update: Wed 22 Jul 2026 20:01:01 +0000
Files and hashes: 1: 8pRpGLC7ufdVgfYDDUF6Zet2ESs.roa (hash: N6b81cttyVRNjS1aPTuek9kLwNALHCKPqaI95N5VpXM=)
2: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: CQ9VMGc0CtwfKJZ/KhFrqnqFJIQO6kKK9+fz3ViitWg=)
3: iLJXM2riD2xLyWPgVHhFPJznv3A.roa (hash: htQVMbTQl+9gmW8aaJPtyq2ErZGw3e/ACgLnMofyCY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:76:74:4d:10:3e:21:19:32:90:fc:33:23:63:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Jul 21 20:01:01 2026 GMT
Not After : Jul 22 20:01:01 2026 GMT
Subject: CN=ec33d474577ad71b1b578fb82d5c3f775af4969b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:7d:61:6f:5c:c1:1b:5c:78:a2:40:d9:e3:
e1:a0:ab:7d:cc:2e:b3:95:0b:8f:60:ba:da:e6:c3:
ed:f7:a2:82:c6:98:44:8b:47:73:77:f2:50:46:45:
77:29:8e:d6:d5:09:27:46:b3:90:72:39:7c:e4:7b:
7d:4e:4f:7c:33:5c:b4:35:9f:17:dc:a5:55:61:38:
43:1a:20:66:72:f1:f7:d8:12:4a:7a:53:c2:31:77:
52:27:30:fb:9b:09:cc:10:e9:9b:40:87:b7:36:db:
7f:69:61:2e:22:d2:0a:d5:51:4f:09:31:6f:e2:9f:
da:82:ac:46:52:be:b0:c4:37:2c:2f:f8:45:9e:f3:
44:c1:dd:aa:6b:b7:1b:e9:aa:a9:2a:d8:33:07:ac:
6b:34:1f:44:9a:8b:57:6a:7a:11:7f:24:7e:7a:28:
62:71:c6:0c:d2:eb:e5:18:c9:54:86:34:d4:d4:52:
ab:97:37:08:20:4c:3a:0c:a2:82:f6:02:5a:42:d9:
74:5d:f5:66:d3:b9:49:29:05:f6:6b:91:f8:02:ed:
aa:b4:0a:86:e5:6e:26:d7:25:c3:b8:3e:4e:e0:db:
26:6b:a1:e2:fb:3d:20:9c:ac:63:37:ae:a3:df:b9:
44:f3:01:e3:b9:2a:5d:da:77:c8:56:f9:82:bd:b8:
be:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:33:D4:74:57:7A:D7:1B:1B:57:8F:B8:2D:5C:3F:77:5A:F4:96:9B
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c4:2d:24:c8:a7:c4:ce:96:f1:49:e9:dd:3a:ce:b7:a5:52:
f9:08:34:ec:bd:cb:07:6e:5a:fc:32:9b:6f:ae:80:bd:8e:42:
3b:05:5f:1d:c1:fc:21:c5:58:19:7b:b7:25:3b:dd:44:9a:61:
eb:4b:bd:8b:67:a2:8c:d1:f0:42:20:ac:8c:7c:77:55:82:e9:
6c:88:5d:4f:26:1e:6c:44:20:6f:25:7c:cc:17:5d:8c:c2:e8:
52:d5:8a:58:04:79:a9:73:5e:6f:c7:5d:62:49:92:63:79:e5:
4c:ac:46:c0:67:54:63:5b:73:21:61:79:ea:90:29:12:6d:73:
eb:7a:38:03:93:41:d1:4d:cb:0c:a5:1a:8d:90:87:b3:cf:56:
67:2c:a3:d6:ca:56:c9:43:f0:11:64:19:8c:39:14:78:ac:33:
c4:71:f9:60:d4:7e:12:0e:71:c0:41:f2:3f:e8:c3:87:59:29:
34:33:c5:66:61:eb:02:99:c7:cc:94:29:c1:28:d2:ca:8d:39:
cf:bb:e0:0b:4c:72:17:38:5d:b6:a4:17:8f:43:7d:a5:c2:16:
10:d7:7c:e7:4a:27:72:41:f5:aa:0c:f8:1c:e2:b6:c8:bd:85:
44:b6:ca:7e:e8:7f:0b:e4:39:4d:d0:ae:b3:7a:1e:37:1d:80:
fa:91:d7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:03:28 2026 by rpki-client