Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File: jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier: 3YrsJTnsL6gLMgTkN4+93vS4Ub1TDaprGCfn5BkSIe8=
Subject key identifier: B6:B5:8E:91:06:E9:1A:66:09:E3:81:2E:13:F2:9A:D5:73:98:D7:70
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer: /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial: 019F419A8656EDA432EF22518F4E8ED4009F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number: 1582
Signing time: Wed 08 Jul 2026 12:01:13 +0000
Manifest this update: Wed 08 Jul 2026 12:01:13 +0000
Manifest next update: Thu 09 Jul 2026 12:01:13 +0000
Files and hashes: 1: 0yWPvFtMAYIcTAg5JfApwnsaFGI.roa (hash: 1p9eIfwmhKokMGTrk5iOiVMk3FImaB8EaoWESHMvCLQ=)
2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: jxjTlF1OLTUgoeqEjbsA1ukEF3LLKRtDxSdG7E5s3Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:9a:86:56:ed:a4:32:ef:22:51:8f:4e:8e:d4:00:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
Validity
Not Before: Jul 8 12:01:13 2026 GMT
Not After : Jul 9 12:01:13 2026 GMT
Subject: CN=b6b58e9106e91a6609e3812e13f29ad57398d770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:85:b5:a2:8a:b4:70:d3:53:d9:a2:63:11:
2d:50:2a:45:c9:de:62:3b:0f:0c:c5:74:05:b7:8f:
64:39:6d:08:95:38:4a:3b:2d:9f:6b:5c:cc:a6:82:
35:b6:7c:20:ac:5a:60:70:02:17:c5:f9:49:94:d6:
9c:5d:b2:d0:a1:4e:cd:02:ad:71:c7:d3:d8:50:3b:
eb:fe:05:8c:0a:97:dd:06:83:26:ab:75:c7:b3:c7:
56:f0:0c:21:36:93:ec:30:f8:75:8b:f0:dc:22:53:
a3:73:61:a8:f5:d8:f8:94:32:e6:64:d8:43:36:db:
34:6a:3b:37:71:42:ae:95:b7:df:c1:f7:33:7f:ed:
04:d1:94:66:8a:a0:07:9a:21:5c:43:af:6b:33:1f:
3a:38:ef:5f:e4:61:f9:9d:fb:73:88:de:d4:b9:43:
26:d0:e5:d9:b7:eb:a2:cf:3a:44:27:47:3a:14:f9:
54:d0:9e:ee:d8:08:a3:61:9c:b2:c1:ae:7e:6e:ee:
6a:3f:d6:52:2c:bb:df:51:66:3d:ce:d2:ac:b6:07:
5d:64:5e:fd:86:79:71:51:3f:97:b3:17:d4:64:60:
39:a1:4b:b9:18:ff:a4:49:c8:85:2d:da:d4:28:65:
e5:ff:9e:ab:6b:7f:21:ae:3a:86:9c:0c:9d:7b:d8:
f8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B5:8E:91:06:E9:1A:66:09:E3:81:2E:13:F2:9A:D5:73:98:D7:70
X509v3 Authority Key Identifier:
keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:56:01:0b:dd:a5:3a:70:02:36:e8:2f:fd:b8:d8:68:64:ed:
cb:ad:50:0e:04:12:39:c3:f0:39:96:99:69:11:5b:fc:3d:e0:
54:0f:0c:18:e4:66:27:4d:0d:8e:54:2f:b7:57:ae:92:cd:a4:
55:08:84:b2:81:18:9b:cf:6e:d5:c2:04:cb:03:2d:b3:a6:f1:
34:9a:0b:82:c6:3a:a1:34:c0:25:b7:72:f2:8c:65:2b:4e:3f:
d6:25:77:03:87:3a:b2:a9:ae:f5:a3:92:83:b9:80:e2:b8:b7:
ef:e5:dd:48:5e:a2:17:17:1b:49:68:19:5e:8e:52:18:23:20:
45:de:50:13:1c:10:f8:7d:2f:ff:64:06:bb:88:ae:bf:46:a3:
82:28:4e:3c:53:2c:61:43:d7:56:d9:7e:fb:b9:8d:dd:93:9e:
8a:f7:ac:62:01:74:ea:10:42:d4:7d:73:ad:30:6e:01:ce:4e:
54:ed:a0:e7:c5:4b:ed:b3:4f:df:b2:21:7a:6e:46:f7:10:2c:
91:99:c4:cb:67:e8:ad:c7:2d:9b:e9:ad:dd:77:27:ed:f3:8c:
11:69:7b:e3:ed:9f:70:38:3a:63:14:13:3a:35:2a:94:11:f7:
20:f3:4a:3b:8c:f5:bb:36:7c:23:dc:e7:c7:2a:2e:28:a0:c0:
a5:e3:5f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:37:53 2026 by rpki-client