Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
File: jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft (raw, json)
Hash identifier: U+zxeczOnm4hKw5fwpljz7ASLVl3z/DtIDhel3gP3rE=
Subject key identifier: 9A:31:15:BC:0A:2E:20:23:97:20:1D:B9:77:A5:3A:00:E2:F0:B6:45
Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
Certificate issuer: /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Certificate serial: 019E1DC70446CCA11E3520546F3113B9BF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
Manifest number: 0CFA
Signing time: Tue 12 May 2026 20:00:42 +0000
Manifest this update: Tue 12 May 2026 20:00:42 +0000
Manifest next update: Wed 13 May 2026 20:00:42 +0000
Files and hashes: 1: 46dJ70ivY5CNHN3HEFGJKfLPS7Q.asa (hash: cjg8FehaVwYpVxS8eMe+m9njoOgOCXMZ/KMVF3PXYLk=)
2: jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl (hash: gypTHA4Nl01aAywlyM2eaIK2643UVGc9IguWjkj2Wak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:04:46:cc:a1:1e:35:20:54:6f:31:13:b9:bf:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Validity
Not Before: May 12 20:00:42 2026 GMT
Not After : May 13 20:00:42 2026 GMT
Subject: CN=9a3115bc0a2e202397201db977a53a00e2f0b645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b6:d9:b6:8e:93:62:62:b2:36:4c:ca:5f:1b:
74:d2:c2:64:9c:98:fb:ae:f5:b7:dc:a2:73:87:7f:
f8:23:95:a0:02:6f:52:59:79:f0:bc:5c:1d:b5:f8:
2d:db:b2:8e:24:35:3c:33:57:09:57:b7:f5:54:59:
e1:77:83:a4:59:75:1a:9c:a5:cd:ff:74:c9:ba:99:
03:f3:0d:8e:37:06:ae:66:35:81:4d:f9:2c:26:97:
a0:83:42:6f:06:ef:15:08:7f:09:97:f1:a0:52:c1:
f0:3e:46:3e:bb:39:3e:8c:ad:14:00:dd:ec:1f:4b:
e7:79:78:c3:b0:c9:92:60:27:ba:82:c8:ff:88:f9:
bc:de:c0:92:e8:69:38:c0:4e:c0:f0:0a:c5:c2:11:
a5:c9:a4:7f:58:06:07:12:e2:20:67:25:45:12:ee:
eb:f4:6d:5c:5e:2e:18:76:d6:04:ab:fd:78:99:a5:
20:78:42:36:e5:a9:8a:3f:75:b8:02:15:69:81:38:
46:0b:38:d4:2b:69:de:a5:72:2b:9d:e1:93:de:bf:
4c:9c:96:0c:4a:ca:fb:3f:aa:15:3a:60:8e:06:11:
22:e1:91:85:6b:b0:d0:ab:60:e4:3a:51:c9:12:e9:
73:e6:de:ac:66:c3:96:4a:d7:19:c2:78:19:6f:15:
33:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:31:15:BC:0A:2E:20:23:97:20:1D:B9:77:A5:3A:00:E2:F0:B6:45
X509v3 Authority Key Identifier:
keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:05:36:1b:8a:e7:05:84:a5:5a:12:66:a3:fd:00:d8:82:87:
ff:12:b6:97:40:ba:b5:6d:3b:f4:e8:56:b6:0b:1a:00:ce:08:
04:c2:38:5c:48:3d:0b:ec:5d:5e:6d:99:8a:91:27:ac:e8:f7:
c3:88:b3:b8:b3:49:e5:56:12:e7:59:50:9c:7c:50:d9:bb:a0:
a9:da:16:65:04:c6:c1:39:35:a1:e2:aa:81:b8:79:92:be:66:
35:d5:92:7e:2e:c3:cf:55:52:e6:4f:c0:55:7c:77:dc:a5:78:
e4:70:1b:9c:6f:9d:03:e6:61:8a:48:a0:97:10:24:9f:b4:d0:
44:e0:54:7e:fc:84:55:34:37:a6:42:6a:97:35:c6:6f:11:ee:
cc:b4:df:f2:c8:af:27:06:cf:cb:29:d1:74:3e:5c:e0:59:05:
f3:ed:f8:43:21:9d:03:f1:ea:3c:ce:62:85:24:60:ef:17:9e:
c2:91:9f:05:1a:7b:67:88:be:89:59:05:27:5e:5b:8f:d7:8c:
83:3c:e4:48:e7:bb:3a:e3:f6:a5:b9:f1:99:57:fb:7d:f4:1b:
f0:1f:00:2b:2a:de:5b:5a:e4:6c:7c:f3:e9:4a:18:01:e1:26:
5c:ba:1d:c9:e9:7e:7a:e0:e1:f5:c3:c9:1d:03:17:53:aa:ef:
6d:0a:52:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:57 2026 by rpki-client