Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: MkWtT4DjdgFzFR711b4t3jP3OKE3YbGvLp0vEeuukj0=
Subject key identifier: F9:9D:EF:93:D9:47:ED:5A:D6:2C:EB:E6:BA:84:5B:90:A5:B6:78:70
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 019FA1F2A0EAFEE731696730C466989C222D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 18D0
Signing time: Mon 27 Jul 2026 05:01:00 +0000
Manifest this update: Mon 27 Jul 2026 05:01:00 +0000
Manifest next update: Tue 28 Jul 2026 05:01:00 +0000
Files and hashes: 1: aGm4oWzWCr3hZ2n5emUeTMzgGSk.roa (hash: m6Rf2fpcq/fb4aUDhuQy0L8UgTU/UIaDKJQ6AQd8ZLw=)
2: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: 07fHdZ3emvJLdqGyBrqeLemd6388N/yoTqMDwwc+duA=)
3: xCi0G_e0Q695aPNT6gcJGjk5Aik.roa (hash: 5ipSKU666jOWKtI/B+Mronv23Zfmy4lLPWtuX/CkhF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:a0:ea:fe:e7:31:69:67:30:c4:66:98:9c:22:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Jul 27 05:01:00 2026 GMT
Not After : Jul 28 05:01:00 2026 GMT
Subject: CN=f99def93d947ed5ad62cebe6ba845b90a5b67870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:32:7c:26:e3:9e:47:f8:76:73:18:62:17:
24:2f:57:d4:c4:a2:b7:88:a1:9c:a9:4f:de:de:e4:
fd:a2:23:1b:1f:c4:2d:5f:78:84:b8:b3:f9:83:a1:
58:57:91:c9:0d:cc:b1:23:7c:b5:d4:bd:3b:5c:de:
38:cc:dd:79:7f:e8:f9:3b:81:15:ee:34:ca:01:b2:
01:55:27:7c:9e:0c:ac:c8:a4:a0:69:fc:90:ea:9a:
e8:9c:74:d0:36:85:f2:71:86:71:68:b5:82:26:a7:
a9:f5:15:26:ae:eb:92:3a:f8:a1:69:49:d4:91:85:
82:11:59:20:d5:3f:e2:a4:f2:51:fa:a6:0f:f5:b5:
7d:24:ab:07:69:76:c0:8a:dc:41:e6:5d:28:97:aa:
0d:f7:67:01:50:73:c8:6e:3f:73:68:26:2c:27:b4:
90:e5:61:5b:6a:72:45:b5:aa:68:56:4d:77:0c:e3:
a0:46:a4:d2:ef:73:1e:f1:7b:ad:a7:57:48:0f:c0:
4e:d3:f3:da:bc:c8:b0:b2:39:e2:93:af:79:4f:ca:
f8:7f:96:0a:61:b9:a7:59:81:d6:16:6b:f0:2d:a2:
cc:8c:ea:45:59:c4:6b:90:bf:1c:75:09:ff:3a:37:
c1:00:09:44:d3:a1:0a:b8:2b:e3:5b:be:2b:19:69:
1d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9D:EF:93:D9:47:ED:5A:D6:2C:EB:E6:BA:84:5B:90:A5:B6:78:70
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:aa:04:f2:fa:75:77:90:d4:09:82:ab:fc:ee:91:f6:0c:9b:
61:54:3c:2c:b5:3c:bb:b0:44:71:b5:a8:d2:1b:ab:7a:46:90:
34:c7:75:c7:3d:39:1e:db:f5:c8:56:41:c9:4d:1a:bc:5a:31:
4d:f5:24:26:38:52:79:57:db:10:2c:6f:9d:03:ae:9d:e9:bc:
b5:5b:84:e5:86:bc:ea:ca:14:ab:97:2e:b1:d8:de:4f:42:95:
97:5f:aa:9a:be:08:63:86:76:80:c9:fd:0b:92:cb:20:8a:3a:
ac:78:6d:8a:89:02:f0:10:b4:ce:c6:b9:42:4a:23:97:c3:c1:
8d:87:3c:24:d9:85:66:3d:85:df:c7:c8:ba:36:2a:d0:4c:88:
7b:67:2e:19:ae:1c:4f:6b:19:5e:b9:1e:49:81:da:de:75:17:
50:c1:c0:0c:bb:a7:ab:7a:a6:41:e0:1a:3b:5b:c4:85:6f:eb:
58:58:db:7f:22:5e:1c:62:a2:79:76:a4:58:f6:38:89:ab:65:
35:9e:1a:61:60:39:4a:58:ca:3e:be:06:7c:0d:ba:ae:4f:aa:
5f:99:3f:8f:76:83:74:05:8a:5c:88:5c:6f:68:62:fb:d8:74:
aa:b0:50:03:d6:62:72:ff:e7:46:39:d4:63:dc:ce:58:52:98:
74:ff:81:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:07:52 2026 by rpki-client