Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
File: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json)
Hash identifier: 8p12Rv0P+G5w1mKq4R1STxNoTGpCRBPzrtDt60jcxVQ=
Subject key identifier: 5A:47:3C:EB:DD:69:EB:74:8D:57:7E:00:58:A4:76:8A:FD:E1:E1:77
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Certificate issuer: /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial: 019E205A4F1668CEC3C410F38C8B14E6FD93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
Manifest number: 1132
Signing time: Wed 13 May 2026 08:00:49 +0000
Manifest this update: Wed 13 May 2026 08:00:49 +0000
Manifest next update: Thu 14 May 2026 08:00:49 +0000
Files and hashes: 1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: UC2r8rE952yY/I5cRgL/lQSVRNykxa4KcH1ni3K2FbA=)
2: lLxgfqurH_Hgps0nmWFaFien01Q.roa (hash: N0SnJ14VpoDgSTsYIgjlp8sX8VgDL1JD7jVAinD1cAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:4f:16:68:ce:c3:c4:10:f3:8c:8b:14:e6:fd:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Validity
Not Before: May 13 08:00:49 2026 GMT
Not After : May 14 08:00:49 2026 GMT
Subject: CN=5a473cebdd69eb748d577e0058a4768afde1e177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:9b:9b:be:8c:d3:12:63:69:6a:df:50:45:
7a:04:a1:d1:ba:f0:33:59:cf:a3:00:d7:c6:01:d0:
1a:84:69:03:0c:b1:e6:63:3c:92:49:e3:25:79:3f:
d7:50:15:03:db:82:14:c2:98:9d:43:35:0c:b4:39:
d5:7c:e8:27:be:f2:42:88:68:c9:52:3e:2a:1c:85:
76:18:ba:fa:72:32:e4:1e:21:bd:8b:06:31:eb:aa:
bc:4d:34:8f:ea:e9:ed:47:c1:a9:22:f0:2d:6e:41:
57:9b:49:7f:9d:58:2c:0e:f5:19:2c:32:0a:f1:2d:
7b:7e:2b:31:b1:a6:11:a8:7e:14:74:4c:6e:b6:24:
e4:d0:09:f8:28:8e:29:aa:b3:5a:d2:3e:17:c8:2c:
d2:ab:56:ea:d3:78:4b:36:4f:60:0d:b9:ee:7b:1f:
e2:2e:21:03:a9:1c:5f:56:81:00:7e:50:00:74:91:
ee:3e:95:fb:d2:d9:3f:8d:08:a1:49:40:04:41:b1:
01:a2:91:81:cb:69:33:97:54:5d:7a:d0:2d:e0:e8:
0d:b2:8a:33:e8:4d:6b:9b:a8:ec:d8:a0:55:b9:49:
4d:70:cb:78:25:ba:97:2d:5e:f7:75:3a:24:42:80:
01:e7:3f:1e:b2:dc:61:f0:41:58:d2:ec:ba:4d:64:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:47:3C:EB:DD:69:EB:74:8D:57:7E:00:58:A4:76:8A:FD:E1:E1:77
X509v3 Authority Key Identifier:
keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:43:67:4d:ed:b7:4d:8e:b1:f2:f2:4c:a8:80:1e:52:37:aa:
6c:75:11:35:f6:ef:34:ce:64:e5:d4:9a:39:3b:16:88:d9:62:
a1:df:06:91:a7:e8:2a:bc:a7:9b:bf:ce:a1:e1:82:93:6d:41:
21:18:da:33:e3:d0:ca:7f:e8:df:b0:1e:6d:ea:cd:1d:23:3a:
88:06:8b:18:4f:be:64:3e:53:36:53:0d:99:f8:ae:73:dc:3b:
d4:53:be:72:89:f2:43:a9:00:05:f9:b4:7c:a0:a0:3d:9e:ae:
33:66:1c:1f:2c:0f:5c:c6:ed:df:c6:5e:5c:fa:6b:76:b4:0c:
73:64:03:a2:63:26:83:ca:a7:12:be:5e:5e:f7:ad:d1:6c:4b:
54:60:2c:86:96:26:c5:ca:63:65:ca:3d:02:06:d7:26:99:09:
90:ea:69:47:fe:07:ef:ef:48:9e:20:e8:5a:f8:8e:88:62:e2:
8f:13:8b:e9:8c:82:2b:29:27:60:ad:98:e3:5b:3f:6c:2f:36:
86:3e:f5:9e:36:e3:67:70:40:bc:55:0e:cc:f6:14:56:6f:77:
a0:48:c0:ed:e2:9e:09:4a:7a:c1:18:ed:d7:d0:b0:50:ad:90:
88:39:30:c8:2e:c5:95:02:f0:bc:95:57:b8:7f:20:a3:9e:10:
73:de:a7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:26:39 2026 by rpki-client