Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
File: JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json)
Hash identifier: PBGnojlLQX4mdh8tJILsf8IbxdbUv9qeD0VLbko3MKk=
Subject key identifier: 14:5C:F2:FE:64:A0:5A:E7:69:47:3C:31:BC:54:5B:4A:2D:21:7B:67
Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
Certificate issuer: /CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Certificate serial: 019F9F965FF0C5471BA910BEC76096BDA36B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
Manifest number: 0402
Signing time: Sun 26 Jul 2026 18:01:00 +0000
Manifest this update: Sun 26 Jul 2026 18:01:00 +0000
Manifest next update: Mon 27 Jul 2026 18:01:00 +0000
Files and hashes: 1: D17eb-YaN69zmYAWu9of4KG5E8Y.roa (hash: stGJZzeKt4km6Sv/uUT+Q3OWclxmp1dOYGAe5XGVe2w=)
2: FZgi84RMvT9_2vE42FDuM9M6yQo.roa (hash: MWv0A+a3Hv1l7nsYC0PKMV2mBEaDOEQF7nbo1KN1I5Q=)
3: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: zNKKlGbPku0/4kdIBR3Xt4px+AQlMxO8y6K+esJBh8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:96:5f:f0:c5:47:1b:a9:10:be:c7:60:96:bd:a3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Validity
Not Before: Jul 26 18:01:00 2026 GMT
Not After : Jul 27 18:01:00 2026 GMT
Subject: CN=145cf2fe64a05ae769473c31bc545b4a2d217b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:fb:d3:cb:05:aa:ce:9d:34:dd:80:ca:6b:
5b:f4:f2:20:75:1c:77:81:db:04:b2:b0:fc:c9:7c:
13:fa:aa:5c:63:90:40:61:36:93:b1:cc:1f:4d:4b:
df:da:3d:36:c0:73:b6:ef:3c:f3:61:02:18:f8:96:
17:c6:7f:40:bc:70:1e:70:4c:7b:cc:e7:77:4f:be:
c8:f1:5e:41:a2:70:d6:4f:a2:77:61:1b:6f:32:31:
a2:cd:85:db:aa:f4:10:ce:db:5c:a3:e7:66:e3:e5:
ca:14:b2:00:30:49:3a:ce:7f:8d:d2:79:88:3b:d8:
96:68:17:0e:e4:51:5b:4c:2b:08:c8:3c:e2:be:a9:
51:55:f2:0d:60:2f:5b:4c:dd:e8:67:21:11:03:ab:
2e:f6:d5:4b:39:32:df:93:45:0b:38:74:74:c3:fb:
00:cb:5d:44:f9:07:34:2c:18:90:e0:2f:94:8f:57:
2c:1a:83:8b:98:dc:8a:b8:0e:02:06:06:1d:a7:68:
92:9c:e7:53:89:19:f4:5e:49:17:b4:77:cd:55:d8:
93:d1:c0:76:ce:f2:c3:0a:2a:ed:48:49:cc:27:2a:
80:29:b4:60:71:fe:df:e9:b6:75:6c:c1:3d:a4:0e:
77:e0:20:45:a0:e6:db:55:ad:d1:6e:ad:4e:bb:49:
69:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5C:F2:FE:64:A0:5A:E7:69:47:3C:31:BC:54:5B:4A:2D:21:7B:67
X509v3 Authority Key Identifier:
keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:83:23:2d:c5:15:4c:a0:7c:25:b0:41:27:39:a7:b5:a2:52:
a4:5f:5f:0a:70:e2:2b:d0:c1:42:08:92:b7:d3:2f:89:01:dd:
ca:46:2f:b9:e3:23:da:88:2a:18:d1:4a:54:d4:40:0e:39:63:
bf:73:57:9c:d6:89:64:31:03:99:e1:2f:54:0a:94:ff:f7:f5:
53:ae:f0:d8:8c:9c:9c:66:25:f0:54:99:a2:7c:08:33:8b:98:
cf:55:ee:2c:76:d5:0f:f3:dd:6f:8f:6d:ea:46:eb:d4:5b:c9:
ba:a4:3b:05:f8:4f:c4:68:eb:0e:3c:a3:eb:a0:39:5b:a0:b1:
ec:c6:f0:52:de:fe:fa:69:db:67:0e:7b:ef:28:16:a6:ba:a4:
39:23:64:01:f4:6f:ee:ea:f6:ff:0c:ce:a9:e5:0e:d6:0e:0e:
93:32:6e:cd:b3:ce:3e:88:87:5a:14:d2:9c:c5:a7:c6:0e:53:
9e:be:bb:5e:e0:59:4c:34:4b:e7:ae:fb:18:3c:50:89:31:d6:
25:1e:36:61:6b:c6:f3:09:a7:14:33:40:94:64:82:8e:63:9b:
8c:9b:b8:85:5f:75:5f:07:b6:b5:f8:8d:ea:7b:ba:c7:16:70:
f6:9e:11:62:8a:0e:81:0c:bf:f5:0f:f1:86:17:d1:2c:13:28:
d5:7f:ff:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:08:58 2026 by rpki-client