Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: 7PB5YOZFgM6cZSofPqU+JLLwgKqdn/vgDciBEgtAI+A=
Subject key identifier: 0A:66:03:26:69:AA:F7:1E:7E:F3:5A:B6:F7:C9:3F:C1:CF:87:35:82
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 019FA184B0CA09A6236772DE0C36E4F3F665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 03:00:55 +0000
Manifest this update: Mon 27 Jul 2026 03:00:55 +0000
Manifest next update: Tue 28 Jul 2026 03:00:55 +0000
Files and hashes: 1: 2u4DW90i6pJn6TNxJSQdCJPO9PA.roa (hash: z+7kYSl922ZGHRd4ve+viSStXQUCmw3QVQ5Lgiw6cXk=)
2: 7YQffxRE0rSLQxPURshHecG_JTc.roa (hash: uQCBTYo2a3hrZABdDnP1fnClvfQjBgoT9LYi5KTntlk=)
3: AsS6Pm-pzCccfpBN7h6vWbKNH-0.roa (hash: QSEqtIt5+vLOlNNT3jvuTFm3bvcUsPaUnJycOPB71zs=)
4: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: EuAkCMRVhW0HjXMwSe/UAZoUdksAeK+Q6i0HOnF1jtw=)
5: tgt22Xbh2dYkc5Tjjf4Gx-Xa2eY.roa (hash: XvxWV+DKU6Gtey3JNABlz2pi2cGrZK+aZ7VTSpuGXSw=)
6: vM268rav9B38xfaLn_yfc-f5loY.roa (hash: L3My8FF3Oma4omxz1SHFdJJ/WgvkO4FPZLAe6cqle1I=)
7: wsHpLkBYw1EeftdDR6sp04VigBw.roa (hash: /kY3oNdD/MtjNpfjYxiTgX3Hn7hLZLYXv3Sx0dMMAnA=)
8: zOqpyrA-mf4nkA9uzKu6WERUh9M.roa (hash: YZ3w9TWP7euxVmL2Kl9d48zmDrmJVrnCAiOTTTRIhhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:b0:ca:09:a6:23:67:72:de:0c:36:e4:f3:f6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Jul 27 03:00:55 2026 GMT
Not After : Jul 28 03:00:55 2026 GMT
Subject: CN=0a66032669aaf71e7ef35ab6f7c93fc1cf873582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:ed:5c:59:6d:a9:00:b5:e6:f6:97:be:d2:
e0:55:6b:7b:71:92:ce:bd:97:e5:10:c6:be:9b:e9:
c6:12:f4:b1:1a:71:f1:67:59:0d:6e:c8:21:6b:86:
ca:da:a9:a0:b9:0a:38:af:43:a7:b1:37:dd:ea:f3:
72:31:da:8b:1c:38:b6:ba:0c:af:6f:38:7c:00:0c:
8b:cc:cc:e4:d7:4e:57:eb:4e:cc:1f:9c:66:bf:61:
4d:6d:dc:88:9f:3e:07:3a:5f:ba:ea:b6:52:c2:0c:
0a:21:52:fb:f9:c0:d5:84:a9:66:b0:30:4d:b3:0c:
c3:5e:b3:97:bd:f9:31:78:12:c8:69:1a:ae:80:c7:
9e:40:73:fc:3e:24:3e:f5:6b:f6:a8:b9:86:d3:64:
ea:f6:2d:77:e5:d9:3e:d7:f5:70:65:91:14:ba:31:
bd:24:5c:fa:76:a3:67:8e:dd:b8:24:d2:62:5a:3d:
bf:2e:84:2f:89:48:89:5e:ad:e8:1d:ed:82:1a:fd:
d7:41:bd:d2:81:e2:a6:ea:15:01:6b:f0:37:52:79:
3d:71:28:29:ec:cb:08:e2:da:ea:44:cf:76:36:f1:
65:19:47:73:7b:db:b7:69:1f:5b:eb:02:88:12:52:
84:03:e7:c6:7a:f8:5e:1f:e5:80:e8:fe:e4:ad:12:
1a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:66:03:26:69:AA:F7:1E:7E:F3:5A:B6:F7:C9:3F:C1:CF:87:35:82
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0a:2f:a2:6e:5a:a5:a5:31:e8:03:29:b2:50:83:39:c0:47:
68:4a:aa:25:cd:ed:a6:d6:cb:0a:a5:ee:20:4b:8f:83:31:84:
72:00:77:23:40:3f:c5:3e:dd:5f:a8:2d:6b:37:ef:39:bf:2d:
80:90:b5:f1:6a:df:a0:bf:9d:73:d2:b5:2c:da:ff:e1:8d:22:
65:20:6d:dd:ca:1f:cd:83:2b:93:5b:f7:48:43:27:24:15:d1:
24:2c:61:79:45:24:24:4c:19:9f:dc:13:26:a9:f8:9e:2f:1e:
50:a1:e2:9f:c8:82:2c:3d:a7:1a:06:31:33:b6:9a:58:69:09:
1b:89:95:ae:bd:91:ec:37:a0:75:4c:18:20:6a:89:f6:71:1e:
dc:3d:13:e9:2c:04:8a:11:c4:25:a8:4c:1a:dc:43:02:e1:34:
0b:cf:5f:a6:cb:02:68:ee:26:16:e2:61:25:dd:d4:b8:fc:19:
97:8a:6d:5c:7c:67:f5:1a:cb:a4:ad:42:1d:4e:bd:38:64:b4:
9a:20:ba:27:6d:93:be:66:97:21:c3:c1:f9:46:ca:5c:b8:9d:
8c:41:5c:d6:81:75:76:37:8c:8f:0e:87:3d:64:66:23:7e:33:
39:fc:7a:5c:41:a2:fe:42:6e:96:0b:62:0e:71:d6:3c:cc:36:
7d:a2:c3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:53:39 2026 by rpki-client