Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier: hZWP3IlXunrQkDUoI4V8jm+COqGZA4OXaaPYMzWRabM=
Subject key identifier: AA:EB:89:10:64:BF:DF:1C:41:C4:91:7D:48:C6:F1:02:DA:B1:9E:EE
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 01A002B8BC605D79A49A747AB51853798E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number: 12DB
Signing time: Sat 15 Aug 2026 00:00:56 +0000
Manifest this update: Sat 15 Aug 2026 00:00:56 +0000
Manifest next update: Sun 16 Aug 2026 00:00:56 +0000
Files and hashes: 1: 0oxdyMukMZaAGBeo9l9rFsh78pk.roa (hash: DX6ZwX+iC1cN81KUv6aS7NPJaf7Awa86RPypXOmFS5E=)
2: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: wWDtTa3huK0fU5FT1fdiYeEVH4uEaKeJcUGRhd5dyFQ=)
3: dyVWHuwmCwNemfhA3NEDaxJ2sdw.roa (hash: Q8NYEk98UWxN0ux4Y6DtAD9386w6kojLNf1xUJ5/UcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:bc:60:5d:79:a4:9a:74:7a:b5:18:53:79:8e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Aug 15 00:00:56 2026 GMT
Not After : Aug 16 00:00:56 2026 GMT
Subject: CN=aaeb891064bfdf1c41c4917d48c6f102dab19eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:3e:16:fd:e7:60:e2:05:e1:0f:67:43:bd:5e:
27:e1:ae:ac:1c:94:e6:b7:e1:66:76:eb:7f:96:76:
cb:a2:2d:e3:cf:f7:36:0d:18:1d:71:3d:0d:2e:fc:
eb:59:2a:1d:42:4d:bf:29:55:fe:2b:73:a5:19:39:
dd:75:61:eb:30:65:15:4a:69:1b:5a:ba:eb:85:45:
f8:2c:4e:2c:3e:df:c5:ed:c5:29:4f:2e:7e:1f:25:
7b:c4:87:42:56:0a:17:c0:26:7a:ff:15:fe:74:9a:
51:53:77:80:a1:b7:bd:e1:29:59:52:cf:3c:36:6c:
c2:f9:2a:3e:cf:d8:53:01:2c:8c:77:71:c2:ff:0f:
c4:88:18:e7:84:dd:40:65:0f:d3:ab:25:ff:3e:89:
aa:fa:d1:5b:35:45:85:41:9c:17:61:57:76:10:ae:
67:a0:29:c8:f0:a6:3f:48:20:91:bc:c3:8e:13:69:
65:ec:9a:97:62:11:b4:69:61:04:7c:80:9e:eb:d2:
40:a7:0b:6f:ca:a6:ae:2e:43:60:92:dc:ab:da:d1:
7e:50:b9:a9:ed:21:5c:2d:c1:91:4a:3d:16:20:64:
e5:06:4b:38:c6:e1:f2:e3:99:2f:47:8c:b3:32:a0:
c8:eb:c4:84:69:e8:8e:33:96:86:24:06:b8:5e:f8:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EB:89:10:64:BF:DF:1C:41:C4:91:7D:48:C6:F1:02:DA:B1:9E:EE
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9e:6c:21:3f:1c:3e:03:fa:2d:b1:5f:95:8b:7f:30:a5:62:
ee:ef:b0:1f:df:be:e5:c0:e4:02:c4:63:40:7f:df:79:9b:12:
05:7c:70:77:70:fc:83:0e:44:50:9b:df:c4:0e:72:ce:ac:6c:
83:07:a9:1d:2e:3d:bb:ef:06:c7:c1:5d:d3:ec:52:7d:5a:0b:
69:7e:03:64:e6:98:39:84:2c:4a:2f:13:b0:a8:5e:85:40:bb:
09:d0:68:cb:73:cb:52:0f:40:f3:e0:84:22:8c:c0:b2:3a:4a:
28:af:b5:9f:f6:b9:0f:f1:be:69:65:bc:43:1f:2a:47:e4:a3:
94:11:c8:df:5e:2d:00:48:c8:2d:bb:c1:d6:59:4e:1a:4d:67:
86:7f:f1:27:df:fc:fb:c5:b2:11:24:d8:ef:bd:b2:be:d8:c6:
1f:e7:b1:a1:92:91:ca:f7:b4:77:f4:a6:80:dd:48:6a:18:7f:
58:94:47:35:80:a3:e6:9f:4c:75:67:ab:58:17:31:cf:06:50:
41:0e:ac:1b:e2:6a:e0:bb:df:9d:93:5b:ec:f3:0e:ba:d4:1e:
45:86:83:52:a2:cc:43:3d:91:2c:a9:de:d3:f1:15:87:5f:42:
8d:39:4f:3d:17:b5:c0:87:32:53:ff:76:0c:5b:ec:15:1a:fe:
28:bf:8f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:45:49 2026 by rpki-client