Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: ijKgIg6CZd+SoE8LSCZ7T4423FR4LcppIPY3MEn8CnI=
Subject key identifier: 07:70:F0:58:C9:00:44:E7:42:C0:0B:D2:EB:E3:BF:7A:BC:38:40:D5
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 019E1DFE8E9DF75CEE4E5473FE1806A66B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 21:01:22 +0000
Manifest this update: Tue 12 May 2026 21:01:22 +0000
Manifest next update: Wed 13 May 2026 21:01:22 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: UZzdg8xj8RxSZ7SkigWzUJTy07OuEtGRC2CqSdpcPX4=)
2: TaLcMniYP68W_xpID_YTmpPHJQw.roa (hash: FpN6wFwhf5u/rLDXXLg50HkAwzUqczd5OywdW3G3qdY=)
3: dfxqd7-EbGdffyLZ8A8olZcFYug.asa (hash: HTZdeFHh36s+CBI2gsv3WBt1hDMpM6ApTTwTmbGKXCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:8e:9d:f7:5c:ee:4e:54:73:fe:18:06:a6:6b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: May 12 21:01:22 2026 GMT
Not After : May 13 21:01:22 2026 GMT
Subject: CN=0770f058c90044e742c00bd2ebe3bf7abc3840d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:a9:f9:0f:2b:33:aa:96:80:c0:b5:ca:f4:
b5:38:4d:6c:19:b3:8a:98:11:a5:b3:d0:31:4c:ae:
de:79:e5:f0:db:50:ff:22:ad:14:a4:da:cd:d0:bb:
d7:8b:5a:fb:bf:72:61:c2:da:b6:ef:29:62:9c:85:
8f:0b:ba:ad:6f:a1:8e:1e:41:f9:e2:85:2a:6d:77:
18:31:31:58:46:c1:45:71:25:5d:61:57:08:b3:8e:
a1:9c:40:42:28:74:cb:53:0e:45:53:90:69:06:5d:
38:e2:1e:e5:3a:ab:62:e0:3c:ec:b5:ce:17:fa:b9:
3a:f1:c1:88:a1:f4:39:59:7e:5c:7c:4c:92:0a:22:
c3:f1:f1:a9:50:c4:70:4e:0b:04:70:c5:62:25:85:
60:69:3b:f4:ce:f9:ed:c0:f7:70:0e:5b:12:be:2b:
07:93:30:30:35:88:7d:05:c1:e1:be:4a:fa:b5:8a:
96:27:31:7e:6c:4c:6c:b5:b0:65:2e:5d:00:f7:50:
e2:49:7b:6d:2a:62:f1:c1:1a:91:ee:6a:0e:d1:33:
cf:a5:74:66:1d:93:9e:d9:db:fd:19:4d:7e:24:2b:
47:d8:dc:13:8c:49:4f:fe:cf:07:99:0f:3e:ec:da:
d1:46:3d:58:09:62:81:59:b5:19:41:26:10:22:13:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:70:F0:58:C9:00:44:E7:42:C0:0B:D2:EB:E3:BF:7A:BC:38:40:D5
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6d:1b:f7:b9:64:ac:b8:5e:a1:b9:5e:e8:ff:e1:d0:9b:cb:
01:98:bc:b2:bd:d2:19:21:2f:83:74:b0:6e:20:b5:8f:80:ca:
5f:b5:b3:ec:b6:5c:a7:27:7a:21:97:7d:f7:14:e8:b5:7a:51:
95:01:1c:f1:85:23:cd:9f:0a:a7:d2:70:27:71:57:70:06:7b:
ee:29:e2:30:20:d1:8d:b1:e9:54:4d:8b:a1:ea:44:ae:c8:30:
a9:31:80:66:f9:dc:07:bb:8c:25:48:b6:84:04:7f:1c:0d:f6:
73:e3:08:2d:ce:79:8a:4c:09:ee:f2:f5:7c:3a:f6:7e:51:ca:
40:61:85:76:13:78:64:de:ba:21:1c:52:c8:66:f0:26:ab:5c:
36:5e:5b:f7:c7:71:54:c6:67:bd:e8:8d:52:82:b0:1f:62:02:
03:43:85:05:ea:a5:6f:df:75:ad:4a:25:60:b1:54:50:34:0a:
25:12:8d:0e:dd:f9:e1:f2:c7:36:25:ea:71:1f:a8:53:e8:18:
27:f5:fe:c4:85:21:73:a5:95:89:13:05:61:99:74:66:05:7c:
48:bf:04:11:cf:6c:33:4e:f7:e4:b4:b1:8f:b8:53:44:03:ff:
6a:4c:03:0d:43:bd:c4:69:a6:e0:75:d3:f8:bf:d0:49:86:fa:
a9:07:3f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:41 2026 by rpki-client