
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft
File: jSO9EjEKkSMxYPAReGphEDDw-l8.mft (raw, json)
Hash identifier: HF1070o9qze49FtKzxNJlFnyZGUCk0R/WvpVnP+7Vz0=
Subject key identifier: FA:6F:18:CD:7C:BE:C9:B0:8F:E0:0B:60:0F:87:EF:88:EF:13:0B:F3
Authority key identifier: 8D:23:BD:12:31:0A:91:23:31:60:F0:11:78:6A:61:10:30:F0:FA:5F
Certificate issuer: /CN=8d23bd12310a91233160f011786a611030f0fa5f
Certificate serial: 019E20C878A6DBC71D772DFD5BC5D6775E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft
Manifest number: 020C
Signing time: Wed 13 May 2026 10:01:09 +0000
Manifest this update: Wed 13 May 2026 10:01:09 +0000
Manifest next update: Thu 14 May 2026 10:01:09 +0000
Files and hashes: 1: jSO9EjEKkSMxYPAReGphEDDw-l8.crl (hash: 4T7wO4r5/wQ/d7omcW7Qy1p30/VOHCaej1GZeWNolC4=)
2: qN669ymg8nK0FcenUzEimvS6bD0.roa (hash: BwVKGc9Um4MKhEVa9QsPEHNNx57h0Tvo1ZPD7iZnTWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:78:a6:db:c7:1d:77:2d:fd:5b:c5:d6:77:5e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d23bd12310a91233160f011786a611030f0fa5f
Validity
Not Before: May 13 10:01:09 2026 GMT
Not After : May 14 10:01:09 2026 GMT
Subject: CN=fa6f18cd7cbec9b08fe00b600f87ef88ef130bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:09:2b:75:00:71:cf:5f:f6:20:c7:ba:66:10:
84:84:4a:00:50:6e:47:c0:4c:02:bd:8b:ab:06:5c:
13:dc:e6:9e:60:53:25:6a:ba:69:d9:86:b7:56:bb:
c5:a5:0c:80:f8:35:80:04:8e:47:06:52:83:e3:d6:
96:12:ce:7e:e4:7d:4e:55:c7:70:eb:98:4d:c8:45:
dc:d0:78:15:a8:02:e4:8f:f0:7b:86:d4:cf:16:ce:
14:15:8c:6d:c5:47:e7:fa:e3:ee:d1:5b:f3:81:08:
56:94:a9:d0:98:2b:17:68:15:68:1d:c4:a5:3e:56:
d0:7b:80:4f:d3:87:6e:6f:c1:cb:1f:e8:ea:49:8d:
b2:d1:a7:aa:c1:98:2f:f7:48:4c:e6:f6:d3:57:1f:
23:93:d8:d9:92:c1:c2:7f:04:12:bf:84:1b:c4:bf:
f4:c7:53:48:3c:3f:51:f2:bc:53:38:51:a6:4b:1c:
8a:b4:93:59:df:eb:1a:af:99:c3:18:be:91:e3:d9:
33:f9:5a:38:00:41:49:e3:f0:d4:f2:4f:5c:99:5f:
1a:1b:f0:96:8d:27:96:bc:f2:58:33:73:9a:54:3b:
5a:58:27:ee:2d:8f:87:87:36:70:ac:ea:7c:ec:35:
f3:76:8a:73:b9:34:e5:52:0e:f2:03:7d:f4:0f:84:
cf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6F:18:CD:7C:BE:C9:B0:8F:E0:0B:60:0F:87:EF:88:EF:13:0B:F3
X509v3 Authority Key Identifier:
keyid:8D:23:BD:12:31:0A:91:23:31:60:F0:11:78:6A:61:10:30:F0:FA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:97:c3:11:5d:8f:a4:6a:c0:e7:bb:f9:89:95:71:35:32:10:
28:7a:0f:cc:74:10:5c:02:2e:9a:1d:30:70:2c:55:f3:93:80:
c5:cf:49:cd:5e:99:92:fe:61:04:03:27:45:79:29:26:80:75:
7c:69:53:b3:8c:7b:8b:ab:3b:63:e4:b8:db:b1:73:7e:d2:bb:
c5:22:7e:96:c8:d1:e9:b3:ed:80:34:be:82:74:53:e2:c9:d8:
58:11:06:34:db:2a:5a:89:fb:20:b8:9c:35:c1:fe:ae:a0:a8:
4d:2d:39:17:aa:58:36:73:5c:23:e2:d8:a3:51:3e:00:ee:d4:
b0:3f:46:9f:09:36:58:2f:09:35:ab:0c:41:ff:9c:ea:48:0c:
ab:6d:4e:33:26:62:58:31:97:16:18:e5:d5:6e:d2:a7:31:8c:
6f:fe:5b:05:11:d9:7f:ff:8c:95:9a:b2:57:41:32:c9:98:4c:
fb:f6:7e:b4:a5:bb:0a:ab:5c:73:30:a5:4a:db:91:2e:a2:07:
0b:f5:07:4e:cf:f9:6f:ed:33:c5:b8:af:7b:50:6e:74:7b:f1:
f4:1d:f0:b5:8a:1e:f5:fd:87:8d:d5:e9:d6:03:8c:b3:3b:f0:
86:19:1c:29:ae:50:df:e3:ef:7a:98:ed:0e:14:4a:f2:82:e7:
f2:fe:be:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:54:17 2026 by rpki-client