Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: gV2XjjVp7E8EbEhWgGSFUDCQnZcYimGFd83stMVENBw=
Subject key identifier: C4:9A:CB:A3:29:BB:12:DA:28:D7:3E:D1:EB:7B:DF:7E:68:9C:4B:06
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 019E1F4828231CBB664DB55EACD2C9BCFD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 0796
Signing time: Wed 13 May 2026 03:01:23 +0000
Manifest this update: Wed 13 May 2026 03:01:23 +0000
Manifest next update: Thu 14 May 2026 03:01:23 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: LBQqSQEGPA1l6i1D2c8EESup855yDb+jlQ+L0siW5gQ=)
2: ZSAjriqrsKE2YYg2ALkBE1sHfcc.roa (hash: FpdwZa7IuH64lhVGz4Lc/UmsF5GpQU9SPxwgj/w+504=)
3: g28y0lP7mHQY3_zrFQA4uIJDkhk.roa (hash: kLY9/EwIF/rD0/y9uzwAOFmWCsA9t1ocdJGqYiU1zTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:28:23:1c:bb:66:4d:b5:5e:ac:d2:c9:bc:fd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: May 13 03:01:23 2026 GMT
Not After : May 14 03:01:23 2026 GMT
Subject: CN=c49acba329bb12da28d73ed1eb7bdf7e689c4b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:fc:35:c1:4c:3f:95:3f:11:52:9e:cd:08:
38:b5:da:6b:d5:34:8e:e9:fe:ab:a0:6b:84:3b:4c:
77:e2:8f:8d:69:3a:bd:66:1d:57:81:55:98:f6:47:
70:7e:a2:5d:2f:df:7d:6c:a7:66:12:7a:02:fc:6a:
ca:7c:ed:11:50:53:f3:ae:5b:ed:9b:68:57:0d:0b:
4f:cf:3e:11:e0:4c:bf:a9:94:c3:e7:d4:e2:b5:82:
90:fc:84:cc:34:ee:2c:cc:09:c4:82:11:56:a0:ef:
8f:5c:32:eb:82:92:ad:01:45:f5:6a:4f:23:ff:78:
c0:17:4c:a3:cc:25:c2:cc:91:fb:ff:42:78:41:f8:
24:cf:41:c8:fc:15:6a:71:77:32:3e:a5:6a:4e:1f:
7f:a0:75:d1:f4:dd:7d:7f:a4:4a:9d:ee:8e:92:e0:
36:56:09:ea:f3:3d:18:a7:6e:fc:4a:76:1f:f4:ba:
05:fc:93:d5:31:e3:0e:cc:1f:d0:00:2d:54:6f:c7:
f8:c2:6c:90:78:5d:de:d3:ef:0a:ad:ad:ef:e5:a6:
2f:65:e8:f3:af:8d:17:2e:d8:94:b9:0e:97:e0:95:
e7:ba:a6:d6:dd:0a:0b:f9:d5:73:db:04:01:67:2d:
3c:90:c8:6e:83:70:43:40:dc:82:f9:a2:28:f7:60:
65:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9A:CB:A3:29:BB:12:DA:28:D7:3E:D1:EB:7B:DF:7E:68:9C:4B:06
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:63:73:0c:11:2e:8e:cb:ca:ab:9d:bf:06:7a:68:0e:30:8f:
3b:b7:f2:21:4b:71:85:ca:0f:ea:30:3f:7e:c5:a7:e3:7d:47:
f3:fb:bb:1d:bf:bf:8a:f5:3c:eb:8d:0b:52:56:dd:4c:dc:5a:
d9:c4:78:6a:51:34:f5:b2:ee:17:0c:9b:b0:2a:d8:4d:68:24:
f1:9a:2b:8c:67:90:30:c4:d8:2e:1f:d3:af:9e:f9:3e:40:9a:
3f:bb:ca:24:3a:4f:99:51:5e:02:04:75:9e:7e:99:62:99:fa:
72:16:4e:df:83:bb:69:0d:24:fe:81:cd:3e:e2:6b:c8:c4:95:
a8:72:0e:85:78:4d:61:99:ab:07:a0:89:94:ca:f6:e6:d8:33:
2d:1f:e7:0b:e0:2d:8c:78:0a:b0:43:c0:35:e9:e0:23:31:d5:
61:a9:63:44:8f:27:6a:ac:84:97:57:56:2a:7f:5c:ac:ea:10:
55:ba:72:c0:d5:0f:47:d5:ee:d2:7c:99:b7:02:b4:83:68:b0:
cf:94:8e:44:3d:93:08:ee:7d:34:e8:54:29:aa:99:ed:a4:28:
10:74:3b:90:e7:db:aa:fc:85:35:d7:34:82:66:a5:79:ad:d9:
d6:47:48:5f:8a:5c:52:c8:39:9e:10:31:93:32:b9:bd:53:2a:
dd:f2:37:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:25 2026 by rpki-client