Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
File: jvxhDOe89HllH9lRjCiJTtHrWoQ.mft (raw, json)
Hash identifier: yZbH9PAC5vHDrH9rpMwIkPTdyK4IbqGnimh/gSVmRm0=
Subject key identifier: 37:85:D5:0C:84:B3:39:D3:4C:38:99:0F:A7:5E:DF:82:1B:BA:97:7B
Authority key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
Certificate issuer: /CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Certificate serial: 019F859F674351FAFC4063320E73C1DC2D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
Manifest number: 0A1E
Signing time: Tue 21 Jul 2026 17:00:44 +0000
Manifest this update: Tue 21 Jul 2026 17:00:44 +0000
Manifest next update: Wed 22 Jul 2026 17:00:44 +0000
Files and hashes: 1: jvxhDOe89HllH9lRjCiJTtHrWoQ.crl (hash: WV5f9+5Ov4PovF8Ug58MiGTYQCOtMXDhIm84bViqrrc=)
2: rx7GC_CHfYxl4Ofnp8MOvM23hM8.roa (hash: 81lkujtMvuC5mIlhZHNqQoKSuJAiHrlt9j7cnoTOQdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:67:43:51:fa:fc:40:63:32:0e:73:c1:dc:2d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Validity
Not Before: Jul 21 17:00:44 2026 GMT
Not After : Jul 22 17:00:44 2026 GMT
Subject: CN=3785d50c84b339d34c38990fa75edf821bba977b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a9:e2:5b:3d:27:65:d5:ac:2d:34:d8:20:91:
a8:2d:6a:fa:0e:4a:12:26:32:eb:88:ca:85:7c:22:
7d:74:ad:67:12:53:25:af:b8:4b:fa:50:e1:e1:ae:
f5:d3:d8:6e:b8:bf:b1:61:41:7e:a3:d8:ee:cb:db:
9b:42:fd:74:d8:e7:ec:55:ae:d5:80:64:c2:dc:7b:
bf:b1:7f:01:93:8f:91:53:eb:94:8b:69:9f:fd:2e:
4f:0c:61:23:f8:23:35:44:4b:1e:b3:62:d9:ab:b1:
46:2e:ec:84:35:a6:b9:83:82:97:15:b1:26:cc:c5:
1a:4b:2f:4b:8b:eb:84:54:2e:ec:ef:52:ee:38:3f:
35:d1:71:7c:99:22:34:53:bf:fd:b2:85:a5:c9:9c:
3d:1b:6e:16:cc:9f:c7:d6:a8:72:66:92:16:b4:81:
a6:1c:6c:2b:93:33:cd:4c:36:54:01:f6:2d:f1:03:
0c:01:c1:a0:e8:b8:e7:51:0c:c3:3c:0b:ae:52:d6:
b4:55:e0:f8:ad:a5:bd:ce:2a:db:0c:30:1e:cb:ce:
46:d1:91:20:bb:bb:ca:c2:20:fc:36:85:16:b5:4e:
93:2b:14:11:a6:1a:34:c2:a4:2e:3c:f6:c7:9b:d9:
73:71:83:02:8f:93:d3:99:84:9f:94:db:17:46:20:
11:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:85:D5:0C:84:B3:39:D3:4C:38:99:0F:A7:5E:DF:82:1B:BA:97:7B
X509v3 Authority Key Identifier:
keyid:8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5f:9a:78:59:32:32:63:6e:67:74:b0:50:d5:08:2a:dc:42:
75:9a:19:a0:e8:32:c7:53:10:fd:6d:fd:a5:3b:b0:51:e4:5a:
55:32:c8:56:e6:32:ea:6a:d2:f5:36:3e:29:e9:5a:5f:4c:ee:
88:c8:c8:ce:55:41:85:08:2d:f3:df:95:35:95:af:77:ea:16:
b6:d3:77:fe:24:9c:d5:4c:95:23:07:eb:95:4b:a3:4b:19:f0:
dc:cc:31:59:17:2a:a1:60:61:49:71:a4:b4:c5:09:bb:6e:30:
cd:4a:88:62:3b:49:6e:14:6d:c2:af:e6:0c:a2:42:a2:69:7f:
3a:ce:a7:50:03:0d:3e:9c:42:9f:37:0a:6b:c0:7e:ac:9a:1c:
a0:85:31:35:fb:29:4d:63:de:5b:d5:d4:47:8c:a5:02:4d:77:
cc:e2:c7:38:6d:43:09:aa:37:5b:e7:d0:3f:af:00:89:23:1f:
a1:40:23:bf:f0:3b:95:ce:ac:b6:79:8c:be:54:b2:de:ca:65:
8f:d9:a7:7f:dd:64:cc:96:55:4f:a7:51:7e:2f:a8:aa:98:d3:
63:c0:8a:b5:19:77:00:6b:6b:6e:67:ae:d4:8c:fc:3a:16:ea:
4b:06:f3:3f:ea:29:df:60:77:95:cf:f6:9b:67:eb:9c:91:78:
66:5c:3e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:29:14 2026 by rpki-client