Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier: OtdPEHTvo+UfXgQ3jSymx7W6tvq8GKTBP+D3rreOl20=
Subject key identifier: DD:ED:5F:B5:C3:3F:CE:4E:EC:F0:2B:FD:95:BF:C2:02:1B:0F:B4:94
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 019F97387D87BD2428D0A5F15F5705B6B074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number: 19CB
Signing time: Sat 25 Jul 2026 03:01:29 +0000
Manifest this update: Sat 25 Jul 2026 03:01:29 +0000
Manifest next update: Sun 26 Jul 2026 03:01:29 +0000
Files and hashes: 1: A4GalviEuSvDRygo_-qVl6eCT10.roa (hash: sSlPwV0yRve9+trsnROr061h+b28t0Ygn3kbHKwNHiA=)
2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: qE6EbSjT9f1ZeF0dLwVsdiNVS88MTN3707DY7tCS6XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:38:7d:87:bd:24:28:d0:a5:f1:5f:57:05:b6:b0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: Jul 25 03:01:29 2026 GMT
Not After : Jul 26 03:01:29 2026 GMT
Subject: CN=dded5fb5c33fce4eecf02bfd95bfc2021b0fb494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:d7:a2:92:3d:2c:fb:7a:e0:28:35:e7:26:
6a:a6:ad:50:b1:09:58:50:f5:90:7a:99:bc:fc:82:
42:f5:0a:06:cf:91:33:53:b5:de:0f:2b:5b:2e:06:
6d:fb:6a:ac:da:ce:ae:ca:36:46:14:f3:fa:90:8b:
4c:6e:1a:ea:6d:2f:f4:e1:1d:4b:a1:ac:ec:11:c1:
72:0c:69:99:90:78:17:67:de:bb:b3:41:88:0e:62:
d3:e4:4d:dd:86:49:b5:8c:11:e4:bd:41:8b:69:fb:
18:29:50:0c:cc:d9:08:49:ee:0d:2d:ae:01:a0:b7:
42:9f:89:fd:a2:ab:94:9f:2a:c6:1b:96:95:f4:22:
eb:ab:cb:f0:6c:69:8a:98:0d:d0:53:8a:27:cb:74:
45:8a:a6:11:cd:8e:d6:c0:00:10:31:b5:a1:fb:7c:
26:2c:91:22:6a:f1:2e:8d:10:0b:ce:c8:a3:54:45:
3f:9c:68:c6:01:bd:dd:c8:50:ee:b5:8e:12:62:9a:
01:f2:e9:b4:ff:a3:e8:79:9d:9c:e1:fa:3e:27:00:
89:a0:2a:36:b8:a2:78:bb:93:e9:17:f0:39:c6:20:
cc:52:32:02:ba:59:56:b7:31:86:96:4b:84:89:b2:
c5:29:56:a0:51:a8:b0:bb:fe:2f:22:be:c0:25:26:
24:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:ED:5F:B5:C3:3F:CE:4E:EC:F0:2B:FD:95:BF:C2:02:1B:0F:B4:94
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ea:f1:20:09:61:4c:f0:e7:90:10:a7:c1:ea:1c:22:0f:54:
88:9d:60:08:72:46:1a:76:42:13:c0:f9:58:d3:b1:89:de:90:
f5:d8:e0:ae:0f:b3:10:67:e6:03:6b:70:3c:8f:4b:40:22:d9:
e5:08:57:8c:51:c9:aa:bd:93:54:22:90:9b:91:23:07:22:12:
55:c3:45:ec:51:d5:f0:1d:80:70:87:cb:96:d1:9f:75:5f:dc:
bc:1b:b4:a1:e5:79:c1:81:78:9e:16:84:90:58:72:0f:b6:69:
31:eb:0e:f2:a1:4e:7d:19:47:96:cc:cd:0a:9b:57:46:93:f5:
15:b0:71:7d:a8:0d:86:34:54:57:31:1b:c5:81:d1:2f:7a:22:
97:6d:ff:d5:f5:93:e5:c8:40:5b:b2:b6:fb:d7:62:9a:99:ea:
29:08:07:56:e3:2a:36:a5:7d:2e:06:85:5d:5c:97:43:94:a3:
79:ca:fe:46:0d:79:68:b4:a1:9e:06:99:03:b7:df:c2:06:8d:
c2:70:6c:f0:24:4c:90:c8:8f:a5:a4:91:c4:4a:93:9e:29:74:
8c:08:29:03:53:d3:c7:bf:a4:96:56:15:c4:ff:90:66:40:8e:
0e:56:bd:a2:01:d9:f5:91:1e:07:75:76:be:93:fc:f5:60:76:
d7:a0:f9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 07:58:34 2026 by rpki-client