Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json)
Hash identifier: yM31a95H2uQJVRcJNCPnlWZ4xPWzRC+03v6dpiEXFF0=
Subject key identifier: 41:A7:01:71:4F:E5:EE:10:A3:1B:05:79:37:36:4E:64:D8:9A:62:69
Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Certificate serial: 019E1D909A36CEDDA7A16C8EC74D8B42E615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
Manifest number: 13FA
Signing time: Tue 12 May 2026 19:01:16 +0000
Manifest this update: Tue 12 May 2026 19:01:16 +0000
Manifest next update: Wed 13 May 2026 19:01:16 +0000
Files and hashes: 1: L24zb2GPwHD-aPGno9VtNYT_9UA.roa (hash: TV8bwr8KXxyIpZ3hz+LfUH4wszhJw0hokfRXNpqsBSk=)
2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: 5PwiYcHQ57uGLhMHro8VWDPCwstEyNyCDpMLhYZKAMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:9a:36:ce:dd:a7:a1:6c:8e:c7:4d:8b:42:e6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Validity
Not Before: May 12 19:01:16 2026 GMT
Not After : May 13 19:01:16 2026 GMT
Subject: CN=41a701714fe5ee10a31b057937364e64d89a6269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:df:28:b4:40:b3:47:d0:77:d0:ef:cf:ff:e9:
74:c1:ae:e2:b4:d7:ae:94:bd:39:0f:06:c0:76:3f:
6c:39:7f:78:28:fd:43:a3:48:a5:59:85:46:ed:74:
22:3f:c1:c7:42:af:3e:69:cc:ee:fc:a1:b2:27:82:
a6:7c:30:11:87:c3:19:14:4a:ed:71:01:eb:bf:05:
17:21:41:e9:ad:be:49:84:19:ba:4f:98:07:50:13:
41:d2:5f:72:ad:52:ad:f6:13:93:25:45:53:1d:d1:
21:3e:c9:73:0a:e4:a4:b6:79:eb:30:a7:ce:0b:52:
9a:3b:5b:77:79:b2:93:f6:f3:2f:41:ab:5a:d2:a8:
d3:fd:a9:ab:31:8e:d9:8a:23:b2:51:d8:e9:cf:6d:
0d:81:96:31:57:50:e8:0f:bf:b5:d9:65:0b:72:37:
91:e4:a1:b9:99:20:ff:57:52:33:0c:0c:c7:86:e0:
44:7a:eb:7b:b3:97:ad:74:e8:16:8b:24:f2:28:14:
a9:6a:86:d1:d3:a5:34:58:76:12:99:ed:64:b3:64:
9d:e7:f7:e8:39:6e:c8:18:a1:d7:52:93:cc:e9:02:
41:92:79:8b:9d:e9:fb:3d:26:e9:d2:36:1a:c1:76:
b7:78:f1:51:3d:cb:f0:63:8c:3a:52:d8:f8:41:9b:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A7:01:71:4F:E5:EE:10:A3:1B:05:79:37:36:4E:64:D8:9A:62:69
X509v3 Authority Key Identifier:
keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:bc:79:2d:4e:80:e9:89:dd:14:7b:3f:45:80:b0:e7:73:fe:
ff:20:a2:17:6a:c6:f6:7b:b6:73:d9:51:2c:a8:9d:7f:66:e1:
7e:21:6e:77:8a:76:fb:f2:f5:37:e6:ad:80:07:74:69:89:89:
5b:35:40:b7:03:be:9c:89:45:6d:c5:56:8d:23:c7:d6:0b:06:
07:0b:00:2f:ba:17:b9:5a:83:a5:c9:49:1a:02:b7:98:f1:08:
d7:91:97:36:7b:c5:65:53:72:dc:5b:ea:ec:18:e9:f6:53:61:
10:a9:98:4f:78:2c:8b:e1:e0:f0:27:33:ec:2b:47:45:f6:61:
71:2c:81:1f:6a:a8:d3:0e:7d:12:18:34:90:65:3c:b0:b1:9a:
38:ee:3d:25:e1:bb:74:9d:4a:58:3b:d4:f5:d9:55:c6:63:4f:
17:f3:f1:f3:a1:ee:eb:82:d2:21:4b:c6:5c:36:aa:48:19:85:
03:80:d4:8c:ca:b2:a9:e1:2f:2f:e6:46:e3:70:5a:8c:4f:89:
c0:5c:ed:81:8d:bb:96:1f:75:57:0b:a6:08:a9:69:d5:e4:91:
35:a9:b2:c5:b4:c0:ea:d7:f6:43:fe:e1:e7:81:10:ca:f0:8f:
09:d4:eb:0b:47:61:fc:de:db:85:04:97:0b:f3:58:b0:e7:cd:
bc:02:85:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:23 2026 by rpki-client