Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: XBDAmekeNwWZZYKG+xvkFzQSFH47mv3HGYdE7s/Ocfs=
Subject key identifier: 04:71:EB:7E:AF:09:97:08:D4:C3:24:81:C2:C1:20:66:41:C6:E0:92
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 019E1EA2C505E7DEFCA761A6FBE948E5AA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 14B4
Signing time: Wed 13 May 2026 00:00:44 +0000
Manifest this update: Wed 13 May 2026 00:00:44 +0000
Manifest next update: Thu 14 May 2026 00:00:44 +0000
Files and hashes: 1: 2zatrSnboczgSJyqZMZSlWLUtgU.roa (hash: X83ll2h7XLvQkyBb5b0DZRoRK6wcb/CaXhRs2FxEIUI=)
2: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: s0G1nrgJxlCHgqogeEmp2njoTez5rNs1Ec+TLCf67vo=)
3: RrW3iZFpgHFuK1USxDsMnM1LusA.roa (hash: /DqnuC18dHwT7Z+hUMZE9xD1UgRrxpE5xwXXr5v68Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:c5:05:e7:de:fc:a7:61:a6:fb:e9:48:e5:aa:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: May 13 00:00:44 2026 GMT
Not After : May 14 00:00:44 2026 GMT
Subject: CN=0471eb7eaf099708d4c32481c2c1206641c6e092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:91:8c:a8:ee:9e:e3:bd:96:5e:4f:42:a7:
18:9f:96:f6:d0:54:3c:f8:ab:f3:7e:dc:83:04:05:
bd:99:37:2a:5f:f2:6d:8d:d6:29:91:0c:b7:bf:a4:
07:4b:57:ca:ad:48:e4:16:1d:0d:d1:85:82:95:97:
10:a0:d4:f5:0e:6a:d3:bc:4e:ca:2f:0c:79:fa:43:
1e:0c:4e:d2:3f:8f:66:e8:6a:49:d4:c2:1b:5b:06:
cc:5e:71:57:f8:3a:79:96:38:07:11:ed:77:1f:27:
b4:e7:ff:56:a6:a2:68:0c:29:9d:0b:f2:7f:dc:0b:
bd:84:3b:d4:87:9b:12:c0:97:07:a4:25:aa:97:d6:
18:21:e6:85:18:40:a1:0e:ac:ed:c3:2c:c9:2e:36:
1c:df:1b:14:e0:16:93:0a:ce:cd:ef:b5:93:9b:31:
7f:43:7f:1a:27:d0:7c:bc:fe:9b:ca:07:32:30:d9:
07:70:fe:e1:c9:23:cb:99:98:9f:d9:30:a3:e0:65:
75:34:28:0d:d1:35:41:24:34:4e:4e:ad:cc:ff:bc:
d8:d9:33:b3:49:73:06:1d:f7:7e:77:12:3b:eb:df:
43:40:25:5a:09:d2:0f:c6:8b:21:d1:b7:56:f5:4b:
f6:54:71:28:e8:fc:53:b3:09:2c:03:3f:e9:dc:98:
40:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:71:EB:7E:AF:09:97:08:D4:C3:24:81:C2:C1:20:66:41:C6:E0:92
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:62:04:65:ab:cd:56:fd:b4:d5:77:dd:86:68:55:98:a4:21:
54:0a:e1:81:87:05:e6:0f:95:3c:0a:4f:1b:da:f6:b4:a3:4d:
fa:46:79:d6:ae:e0:0e:2d:9b:0b:d5:5f:cb:30:8b:1b:f6:89:
1b:92:a5:fe:d6:df:af:86:28:0e:3a:87:7a:c7:88:56:a9:cb:
da:e3:84:31:6e:d4:6b:bf:b2:f1:9a:18:56:b0:3b:44:91:ae:
de:b1:24:1f:7b:1a:79:0b:81:2c:c9:83:f1:87:3d:93:80:bf:
4c:e9:fa:38:45:b6:ac:0b:37:88:65:41:13:24:85:4c:90:8e:
b9:2f:2e:f4:63:4c:31:e7:f8:d0:57:e5:a6:14:66:b0:22:08:
6b:ba:9b:53:50:0a:f1:df:9b:78:3d:54:68:3d:f2:96:c2:b8:
b5:6b:b8:d2:ec:51:ea:a4:0b:5f:b3:03:5f:4b:30:da:4f:67:
a4:26:d4:ff:ec:10:5d:3c:8e:5e:42:fe:75:c2:9c:b4:24:96:
d3:c6:b5:aa:0d:fa:fd:05:8b:48:ee:76:fe:91:46:17:96:1e:
9d:33:04:c4:fb:b2:09:5a:0d:93:af:48:b1:be:b7:9f:ab:f1:
62:56:86:b0:85:c3:f9:43:99:5d:c0:29:c2:de:1f:fb:35:30:
81:29:32:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:50 2026 by rpki-client