Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier: eXsff1wfciw/ejvOe5KCsRBOdh0ZVzalia9mNINWjos=
Subject key identifier: 54:CC:F5:3D:EE:D5:F8:44:33:BE:B3:5D:78:77:3F:F4:0D:4E:3D:78
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial: 019FA3AA723D4EFF1C6BA709A43F9F400E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number: 0896
Signing time: Mon 27 Jul 2026 13:01:24 +0000
Manifest this update: Mon 27 Jul 2026 13:01:24 +0000
Manifest next update: Tue 28 Jul 2026 13:01:24 +0000
Files and hashes: 1: 13QEtilMsPvjSBACtmSM2gevovs.roa (hash: 7sZAAEzQHgY8dc7AwJ5Zb9+RwpGZZztjrIKtYajzllU=)
2: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: um+cJdFerNNp4PQJBqDyK3nRDtEB9cD4g1YyEqLDVNQ=)
3: UvLYNIhvwJQmFVsOPpU_BD36ddY.roa (hash: yXxmCleC93S0pqurn9Uelv8pljT932UA9IhlOEdPEeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:aa:72:3d:4e:ff:1c:6b:a7:09:a4:3f:9f:40:0e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Validity
Not Before: Jul 27 13:01:24 2026 GMT
Not After : Jul 28 13:01:24 2026 GMT
Subject: CN=54ccf53deed5f84433beb35d78773ff40d4e3d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:96:9e:04:c5:b0:47:b3:9e:90:95:8c:e3:
18:dc:78:ad:a7:eb:7f:8c:f1:f0:fe:48:7d:92:77:
79:fb:91:aa:e2:48:72:f5:33:8f:bd:2a:13:33:96:
e6:f5:56:67:3c:29:82:17:15:00:4f:2b:43:b2:72:
c8:59:e3:ef:88:1d:d2:4d:72:0e:03:72:56:7c:11:
ea:5c:01:95:66:74:d6:a3:b5:3e:c4:c7:1b:83:21:
f9:01:ef:84:87:3d:f5:ec:eb:d2:20:6e:18:88:23:
52:4c:f5:c2:85:b1:c0:f8:56:c2:f4:15:59:ca:b4:
86:e0:2a:ec:1e:09:e5:eb:6a:5b:52:42:ce:48:d6:
ae:26:98:49:ef:86:01:18:1a:77:40:1f:e0:ea:c9:
68:28:03:02:98:14:7e:d0:d8:74:db:03:1d:4d:52:
b7:aa:46:a6:ff:04:cf:b6:f0:47:b4:91:73:d8:7a:
1b:a8:9a:5b:92:ff:dd:87:9b:1d:a2:e7:82:b1:a1:
d2:c8:75:e4:31:67:94:06:56:2f:e0:61:cd:cd:c0:
12:c2:df:20:8c:e2:9b:b8:72:8d:67:25:f0:f2:fb:
f4:6a:82:62:6b:30:3c:31:41:5a:45:28:00:f5:57:
dc:63:5c:97:7b:fe:a8:bd:f1:4f:de:c5:d0:b1:2c:
11:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CC:F5:3D:EE:D5:F8:44:33:BE:B3:5D:78:77:3F:F4:0D:4E:3D:78
X509v3 Authority Key Identifier:
keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:20:8c:cb:a1:e4:1e:53:ff:2b:41:35:82:fa:2b:18:17:67:
ac:93:14:2d:96:40:61:5a:51:66:9d:a8:6f:f2:b0:55:c8:98:
34:01:54:4f:44:b6:d6:cc:ec:84:20:e2:a0:04:78:d7:db:46:
fe:61:e8:d5:e9:dd:1f:a4:b8:c2:42:5b:1c:8a:f5:95:df:d1:
de:d6:43:3d:42:2f:e1:e4:b3:73:65:6d:41:7d:82:8f:59:68:
f0:21:d3:9e:46:30:f0:29:23:ea:80:7a:4d:6d:fe:ee:06:66:
86:3c:7e:ac:28:e5:cb:f5:81:c6:1f:a0:fe:9f:eb:6d:f9:67:
df:dd:de:73:c8:f0:7c:4b:a8:f3:68:ae:2e:39:a0:c8:92:f1:
92:29:ac:9b:b7:f8:ac:08:1b:94:fd:80:5e:35:3e:d8:00:e7:
63:60:df:0d:d6:81:c3:15:1d:36:e0:3b:45:d3:58:db:b8:81:
3c:d4:cb:e5:b8:76:e8:3a:83:2e:25:ca:73:0c:d0:9e:2f:a9:
80:1e:58:00:18:e4:09:12:85:27:33:7e:1a:ad:ff:53:0d:4d:
a5:aa:6b:e2:d5:8c:61:a2:a4:fc:84:ab:e8:56:f5:f3:a4:a1:
89:29:a7:61:97:07:02:8a:e1:24:4f:83:8b:83:63:d1:7a:b2:
4d:6d:44:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:49:38 2026 by rpki-client