Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
File: jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json)
Hash identifier: T6VCQUnBe+z9XLPTpZ7YKiwXCtljpofhX9APda1IE7I=
Subject key identifier: 2F:04:3B:22:B5:6B:B9:0F:8A:9D:82:5D:2B:DC:C8:91:B6:AE:23:35
Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
Certificate issuer: /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Certificate serial: 019E2023EB528C547FEF099D15A8A81EA498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
Manifest number: 18DB
Signing time: Wed 13 May 2026 07:01:25 +0000
Manifest this update: Wed 13 May 2026 07:01:25 +0000
Manifest next update: Thu 14 May 2026 07:01:25 +0000
Files and hashes: 1: 5F8fCYtrrQdfgsAoVZA3OcbnHm4.roa (hash: AzqyrkcpbN1w6j6KveyH418q6t/qMGxkXX4rVFhWMOc=)
2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: WauzJ5nyPgLd5wYzUGbpNTgBFsIc1Q+cokex89EM6f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:eb:52:8c:54:7f:ef:09:9d:15:a8:a8:1e:a4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Validity
Not Before: May 13 07:01:25 2026 GMT
Not After : May 14 07:01:25 2026 GMT
Subject: CN=2f043b22b56bb90f8a9d825d2bdcc891b6ae2335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:c3:62:13:1c:ad:1b:0d:d9:7c:9e:8d:be:
15:d5:14:7b:b5:c7:f5:1e:ec:25:45:01:5a:f1:43:
23:db:44:e5:80:9c:78:5b:e8:b0:89:95:80:d7:cb:
0c:06:9c:30:f3:49:b9:75:1a:ca:7f:6f:23:ec:89:
6f:4d:f5:d3:49:31:f1:af:e8:df:ba:1e:54:76:da:
53:09:5f:5a:e0:23:04:95:5d:6b:5e:c2:4d:a6:5c:
f0:a3:f6:ba:e3:ec:b7:0f:7d:05:7e:9b:46:ab:ce:
f4:3b:8d:25:ee:1f:4f:26:2e:9b:71:85:c6:e9:b2:
47:bf:b0:05:63:31:74:de:bf:db:fa:2c:97:5f:d8:
23:b1:7f:20:55:d7:ff:60:ad:78:2e:f8:23:52:5d:
4c:27:a0:4e:a7:51:b8:39:c6:7f:10:41:2d:1e:b0:
c5:ae:fd:48:a0:ab:bd:bf:3c:4b:ee:11:10:5c:89:
b6:89:1f:1d:22:19:7c:10:62:38:73:6b:bd:cc:41:
b2:ee:03:a6:02:17:99:07:2a:e8:31:f9:9c:ce:51:
76:3f:8e:9f:fa:cc:b8:81:47:02:ac:29:11:99:aa:
0a:4d:58:0a:d1:25:42:0e:5d:4a:ec:f8:5a:f0:d7:
9b:ad:51:6a:c2:49:6a:43:2d:d3:e0:41:a2:7d:50:
a2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:04:3B:22:B5:6B:B9:0F:8A:9D:82:5D:2B:DC:C8:91:B6:AE:23:35
X509v3 Authority Key Identifier:
keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:88:33:c5:68:b9:64:e6:05:0a:77:66:1a:a3:a8:e7:eb:90:
22:62:f8:7e:40:1e:df:87:3b:e2:4b:3a:71:d9:48:59:22:b9:
8a:55:8c:bc:77:b7:2b:9c:99:54:c3:4a:1e:b5:38:fd:8a:ec:
72:b4:e5:30:35:37:62:23:eb:f0:66:d5:84:bb:51:bc:40:f1:
20:73:04:45:5d:2a:66:b2:fe:12:96:4d:00:3b:bc:cf:8d:e1:
bc:28:5c:d2:fa:89:a7:d4:6a:cf:68:72:13:21:4e:d1:af:8e:
51:94:f0:26:10:76:b6:9a:1b:85:52:cf:d5:4c:5f:fa:74:14:
16:07:84:26:c0:0b:6b:3d:11:c8:5c:0b:0d:ba:e8:fe:ce:fd:
69:6c:8a:7c:5c:c8:a8:3a:20:89:65:c7:09:9e:5f:42:b4:6d:
d9:c4:94:44:21:f4:73:5a:54:54:c3:06:2a:da:fe:64:70:bf:
bd:24:ab:ad:28:13:d3:a3:87:41:7c:59:3d:e8:0b:ce:5f:8c:
1a:c3:11:c6:0d:96:45:eb:3f:93:60:10:f3:6d:fb:e9:d7:a4:
33:fe:1c:ba:2c:6c:7a:65:41:3d:6a:e1:70:9d:7f:a1:4c:cb:
cf:50:43:f0:e4:c5:12:8b:67:69:f1:74:60:d3:60:35:a0:ca:
74:8d:d0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:18 2026 by rpki-client