Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
File: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json)
Hash identifier: KB6buOnI1TWLufvmHH23Km1T+HSt+bpzmlUqQNzd9Qk=
Subject key identifier: 88:48:B9:33:49:01:75:0C:D8:A2:43:51:BB:D8:F4:B7:0D:3A:95:74
Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
Certificate issuer: /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Certificate serial: 019FF835C0DFAA017FC8031B15EB2CF4B7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
Manifest number: 194F
Signing time: Wed 12 Aug 2026 23:01:40 +0000
Manifest this update: Wed 12 Aug 2026 23:01:40 +0000
Manifest next update: Thu 13 Aug 2026 23:01:40 +0000
Files and hashes: 1: 8yYMhh0gMT6CiQOLVp2cTc5vVZ0.roa (hash: 7gaVBUF1/eBBpHyrZMX3iYaRP7VQvzONGdsKY6mhoPg=)
2: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: EFONdqzbKzkPe03MIXb/9ZWoSTWe5BCS81f3S8RX3C8=)
3: jWXlavsE52YTVFZOpNefWWU1i6k.asa (hash: vEyTlENGA5Gaf1l2XTZgXp/m9z8nLu21MiVt4HAmg+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:35:c0:df:aa:01:7f:c8:03:1b:15:eb:2c:f4:b7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Validity
Not Before: Aug 12 23:01:40 2026 GMT
Not After : Aug 13 23:01:40 2026 GMT
Subject: CN=8848b9334901750cd8a24351bbd8f4b70d3a9574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:12:c4:80:2d:8b:83:86:77:75:e3:80:16:
bb:51:d8:3b:33:8e:c3:91:15:a9:e3:96:11:e6:97:
8b:4f:c8:85:65:5b:95:4d:98:fe:64:81:dd:12:b9:
cb:6d:ec:3f:dd:a9:c9:06:2b:f3:f6:64:e6:fe:dc:
42:ef:d7:31:91:16:62:af:98:3d:31:ec:1e:fa:7a:
2d:dc:17:1e:fd:56:86:45:43:b5:38:1a:d7:81:e0:
48:1f:b1:39:b8:fb:64:ba:76:c2:03:16:64:26:df:
3f:ee:0c:aa:90:7f:0d:a0:0c:c9:12:20:69:a4:42:
8f:9b:a2:a6:07:cd:50:4e:40:18:c6:49:d8:86:ed:
14:c8:f7:9a:f9:ff:d7:e1:c4:a8:0d:2b:30:90:a9:
a7:9c:c9:38:a2:6e:ea:b4:08:09:08:e9:cd:da:63:
40:90:67:dd:f7:6f:68:09:27:d6:a3:2c:74:8b:a0:
11:96:cd:fe:1b:a1:ea:66:6d:eb:e2:99:3e:c5:5f:
c7:ca:05:97:0d:5b:ab:49:0e:22:ec:1b:fd:ab:b7:
00:ac:e4:14:b4:48:b8:33:1f:42:f1:f5:a7:29:22:
a2:ec:85:19:08:34:f4:1c:c6:33:50:9e:7e:72:69:
b2:ac:b8:46:c7:8e:05:22:3d:90:41:1c:d3:69:8b:
99:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:48:B9:33:49:01:75:0C:D8:A2:43:51:BB:D8:F4:B7:0D:3A:95:74
X509v3 Authority Key Identifier:
keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:de:22:9f:d2:e0:8d:e0:01:88:ae:1c:f5:1c:64:33:7a:51:
5b:3e:df:d5:30:eb:df:51:1b:73:98:a2:d8:7a:0b:92:a3:e8:
04:2a:57:47:b2:31:4f:d3:70:4d:68:cf:94:b0:53:ab:20:5c:
fa:8f:d7:d2:09:93:3a:f5:57:a6:c1:39:22:63:f3:a5:69:44:
5e:ba:f8:59:c5:b6:1d:f8:d9:04:57:9d:f0:d6:bf:f1:18:fe:
0d:18:75:b4:0d:0c:94:2b:b1:d7:6f:31:60:ee:1d:25:01:05:
3e:86:e8:05:6c:d9:21:42:e6:fa:0d:c8:c5:0b:6d:97:be:59:
17:06:46:64:36:f8:d1:9e:cc:92:75:60:e2:49:3b:e2:bb:e7:
a8:47:36:5a:63:39:f3:f4:9c:36:99:04:6d:86:9d:1e:07:3a:
f8:28:f1:40:21:e7:da:40:b3:06:7f:52:03:ea:b3:92:03:27:
1f:08:93:1b:58:63:5a:e0:a7:29:0e:70:b1:6b:c5:ae:23:17:
fb:4f:23:cc:eb:21:94:a8:ce:5f:93:59:64:1a:b4:a9:01:64:
dd:8b:44:67:53:73:fc:d1:a8:f4:c5:37:95:f1:90:38:e4:cb:
3a:3a:c1:ca:91:c8:65:fd:77:1a:89:08:03:49:ed:79:fd:53:
ef:a1:74:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:37 2026 by rpki-client