Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: y2PqPZmzI7kXOvs+73ADG8gwLZyg9aKMRAFoNrYsveo=
Subject key identifier: 4D:D2:70:0B:BC:92:00:3C:5B:BF:04:FF:6A:EE:D4:63:51:44:70:2B
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 019E1E3527A79018DA2F457D96E6DCF73DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 13D6
Signing time: Tue 12 May 2026 22:01:00 +0000
Manifest this update: Tue 12 May 2026 22:01:00 +0000
Manifest next update: Wed 13 May 2026 22:01:00 +0000
Files and hashes: 1: 0MDmf31Geq28sqW5uhK6N30LoZg.roa (hash: EpA+5vkgIFjeVI3itIuTpuLJ6aAzCK55k0xhYt0MpnY=)
2: 2pu1vkKFjna4Dm_cwSi5R4FE2g4.roa (hash: FM1p/9Yj7KBBXqnWBSoCV4VhHGxp22FujL3gdqNAgz0=)
3: Xvepx433VAtdgPI_baO5XGR3A8U.roa (hash: Hb64A6S05X/K5EFwUyHoMmk1FNOpGqOBloL7O8dOS+s=)
4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: XXW5YTMQAplw0u0kBg5CiqSMo8xz9/afc6nGsC25KwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:27:a7:90:18:da:2f:45:7d:96:e6:dc:f7:3d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: May 12 22:01:00 2026 GMT
Not After : May 13 22:01:00 2026 GMT
Subject: CN=4dd2700bbc92003c5bbf04ff6aeed4635144702b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:d4:ed:01:8c:ce:83:de:07:7c:0d:e6:e4:
1b:98:7b:a2:c6:00:a8:ca:a1:c4:80:15:1b:3f:79:
1b:41:bd:3e:1f:27:b6:a7:85:f7:cc:ea:63:ec:e8:
71:81:48:7c:02:48:9a:f6:78:47:52:7c:68:28:74:
4c:48:73:16:9e:4b:d1:c5:d9:f0:45:f2:04:17:9d:
28:8a:57:a9:6a:0c:da:0b:b6:39:fa:d3:58:c5:99:
4c:54:a7:e8:ab:8a:f5:8b:8a:9f:43:84:aa:b0:f4:
49:a5:a9:fe:65:90:70:12:1c:c8:37:c8:66:f6:4e:
5b:e2:30:a4:2c:b0:e1:b7:f4:7f:c9:a1:cd:c4:12:
98:10:51:e6:dd:ba:5a:e2:4a:af:6e:07:25:15:07:
54:b6:77:5c:c0:9e:bf:c1:f9:00:de:55:4d:55:da:
42:01:3e:d0:a7:fa:3d:51:60:02:fb:29:9c:a5:e1:
a3:e7:09:fd:0c:0e:9c:57:9e:8a:23:47:75:40:ba:
54:53:fd:2f:7a:f9:8d:b3:92:07:6d:b0:b2:75:a8:
0e:41:96:c3:0c:1c:3c:b5:1f:1c:48:51:3e:eb:85:
f4:b6:97:43:0d:f9:1a:2c:aa:12:c6:f1:db:9f:a7:
8f:e2:db:4d:db:1f:af:4b:77:e0:d2:a8:97:2f:87:
6a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D2:70:0B:BC:92:00:3C:5B:BF:04:FF:6A:EE:D4:63:51:44:70:2B
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:43:f0:cc:15:6c:82:a7:42:2c:cb:f7:ea:b0:8f:b1:31:35:
46:30:e7:c5:7f:e0:39:2d:2e:ca:c9:f5:88:c7:b3:1d:35:74:
7f:55:af:0a:0f:61:d7:7e:11:ef:0a:e6:d9:5e:76:84:03:fb:
a9:28:b0:31:04:9d:e4:32:80:c0:92:d9:c9:f1:1d:d4:47:c6:
3a:18:03:1e:fc:4c:7e:0d:84:53:a0:0a:34:b8:76:d1:76:24:
c1:a9:b3:ea:da:90:b4:68:85:b7:f1:9d:01:f0:a3:64:52:7d:
6d:7e:9a:49:ff:28:df:a3:8c:fb:30:70:94:5f:7d:60:96:fb:
70:94:eb:5f:22:21:8d:bf:73:47:96:94:db:93:d1:c9:e0:b8:
40:01:d9:1b:03:ee:3e:0e:ad:c7:ab:11:da:ee:1a:68:a1:34:
c3:64:95:50:4d:3d:ae:4e:be:b5:78:a2:3f:fb:b0:f8:b5:08:
a8:b7:24:32:5b:a1:f8:3b:52:a6:62:a1:37:55:ed:8c:08:32:
a7:24:77:4b:54:bd:14:50:ac:ba:1b:c1:d3:90:d7:d4:ac:e5:
36:af:97:7d:ec:1b:38:32:6e:ed:a7:db:2d:61:36:6b:91:11:
96:92:d6:e3:22:ca:50:45:da:12:0e:44:41:32:34:2b:22:e4:
17:d4:1e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:47 2026 by rpki-client