Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: U8otELKA5H5gHRZMsXmCGTwZ41CK3nds0mifJ6+Sn7w=
Subject key identifier: 40:18:49:3C:46:5A:6F:C3:F2:E1:FC:2D:13:2E:2E:76:0E:33:41:88
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 019E2024077BF35FE1A43B3B31E2BEE22D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 18ED
Signing time: Wed 13 May 2026 07:01:32 +0000
Manifest this update: Wed 13 May 2026 07:01:32 +0000
Manifest next update: Thu 14 May 2026 07:01:32 +0000
Files and hashes: 1: 4qJQVO5xGJM4Hwo9a4t-72WANJk.roa (hash: ktLSVwEG6cBJVzhe6kIb459fjppN/37esTFhqreayZU=)
2: DIaQR8xGk_YiX6t4cr3tzmYixRI.roa (hash: P3ZeVKS0G+aV/yqQz7wSRAftClIeEK0UWSeMLvlDPyU=)
3: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: JQ8f8V4p7MC6Eaj7R8g/sVMOpSjG+vs3royu2Izr7YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:07:7b:f3:5f:e1:a4:3b:3b:31:e2:be:e2:2d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: May 13 07:01:32 2026 GMT
Not After : May 14 07:01:32 2026 GMT
Subject: CN=4018493c465a6fc3f2e1fc2d132e2e760e334188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:8e:23:71:73:5b:bd:9b:d9:e5:e9:6a:19:
ec:9e:bc:55:fc:ba:89:9b:2f:3c:b8:0e:f3:9d:a0:
93:c1:06:7f:85:0a:23:65:0e:4e:4a:52:25:4f:3f:
c2:83:49:4e:80:3d:51:62:0d:56:46:70:e4:ef:43:
c9:29:9a:40:0d:f1:46:2e:59:6b:8b:b1:9b:d7:84:
b6:45:61:4e:3a:61:07:a2:84:8f:c4:48:c7:65:3f:
a5:81:57:6c:ec:b8:63:d0:80:2d:44:66:d5:d8:77:
04:b3:63:2e:60:0e:68:fd:ba:a6:fa:ca:6b:5f:be:
96:1b:c0:4c:68:5f:a7:fe:91:8c:a9:ad:4b:8a:83:
6f:cc:3a:39:61:54:1b:71:ee:2c:eb:f2:af:27:9a:
33:13:fd:86:bd:78:15:e9:c9:ef:ce:12:cb:32:87:
0c:58:c3:5f:58:db:44:30:62:25:23:75:7f:57:ba:
4a:25:5c:76:96:c2:e7:5b:71:45:0f:a4:7d:d3:e0:
f0:1f:47:0b:94:93:8c:c7:17:d1:6d:14:12:e1:98:
24:80:7e:af:88:61:35:d1:f3:ca:9e:3d:bd:a3:71:
a5:a9:db:9f:86:27:39:95:6c:1d:d8:eb:38:35:e3:
26:ac:e7:b5:13:ab:a1:97:ea:f2:86:64:d2:f4:c2:
6c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:18:49:3C:46:5A:6F:C3:F2:E1:FC:2D:13:2E:2E:76:0E:33:41:88
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3c:d4:78:94:cc:8f:13:c1:49:69:a9:1b:1a:d8:a6:8a:58:
2f:0e:15:99:79:80:1d:9b:be:ed:ed:16:93:69:36:b2:92:05:
04:47:11:da:33:b1:12:ab:fe:c0:d1:d7:01:06:6f:e3:26:60:
48:c7:ed:bf:75:68:71:ca:c1:02:8d:95:6b:9c:1d:82:23:be:
48:80:35:fe:9e:32:e0:24:cc:93:04:e5:cc:77:c2:77:85:2a:
bf:76:72:6d:d1:3e:f8:12:56:d3:0d:a8:6c:3e:eb:e0:7d:f6:
d4:c4:8a:83:8d:2f:43:ed:8e:64:f6:ae:6f:7d:02:04:ef:8e:
a4:41:9d:3c:6d:0d:dc:d8:99:c0:4f:75:56:09:68:1e:73:fc:
ea:93:d0:2f:67:4a:5d:55:1b:d9:0a:d2:80:67:a9:37:8b:13:
3f:be:22:46:97:45:ca:24:5a:37:6d:cb:7d:4a:be:39:44:54:
c0:63:47:93:d2:6a:6a:f9:13:0c:32:a2:ee:8c:9a:12:08:82:
97:06:f2:eb:88:4d:a2:4d:b4:ae:4e:a8:c4:a5:fd:52:1e:06:
92:0e:3a:f4:37:c4:36:fe:b8:13:2f:2a:28:7a:4f:e4:49:b2:
c1:1b:6f:b5:14:dc:17:59:bb:82:f2:6c:17:91:e2:57:30:88:
a9:76:a1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:54:00 2026 by rpki-client