
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
File: JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json)
Hash identifier: I1xkK6PqTVQ+dM0y8PGd04xgYcVCgJw4WO8PC7AwGlM=
Subject key identifier: 29:70:16:D8:91:A7:5C:D7:71:FB:A2:74:06:FB:15:65:70:52:C1:AB
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Certificate issuer: /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial: 019E1FECB5A6E1013C244E825392B9AADFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
Manifest number: 14C2
Signing time: Wed 13 May 2026 06:01:07 +0000
Manifest this update: Wed 13 May 2026 06:01:07 +0000
Manifest next update: Thu 14 May 2026 06:01:07 +0000
Files and hashes: 1: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: eBwOBlvVDfEnKT2r8ynRsRI89yydlEOMSPMb8YOwXXc=)
2: kJSjLOsWhAHko1FJjBJtE40W7yI.roa (hash: R5x4NpWCvDVLqww0J/ygaTqJQCiT5GP/47DNzH/f1HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:b5:a6:e1:01:3c:24:4e:82:53:92:b9:aa:df:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
Validity
Not Before: May 13 06:01:07 2026 GMT
Not After : May 14 06:01:07 2026 GMT
Subject: CN=297016d891a75cd771fba27406fb15657052c1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:e7:50:36:94:5d:cf:26:b8:47:a6:9f:3a:
9f:c4:1f:c9:a3:57:64:c0:e8:53:f0:14:f3:2c:96:
ff:3a:72:f2:8e:0b:0b:14:fe:8f:30:51:5f:c4:bb:
d5:c6:17:a9:0b:23:e3:f8:a0:df:5f:d0:52:76:4c:
31:c3:a8:81:14:32:a3:c0:f6:8b:ad:e4:f3:11:ee:
4b:56:69:9e:61:1e:45:b3:99:0e:f3:67:c8:62:7a:
3d:d5:46:bc:8a:0f:29:41:e8:53:95:c2:4a:5b:81:
00:eb:64:12:04:25:40:c7:9a:e4:06:56:f6:a1:b4:
cc:f6:59:4b:e6:6e:b0:19:57:7c:75:81:fe:03:a5:
ae:c3:dd:60:40:a2:92:f7:d4:e7:98:af:c9:d5:74:
8f:76:8d:58:22:a2:30:1e:e9:6a:67:39:9f:5d:f6:
3b:6a:c1:99:17:c2:e3:6c:ee:78:db:82:8d:be:64:
4e:2e:d4:45:59:96:a5:af:60:97:a7:ab:9a:ab:02:
d7:f9:77:58:92:c7:d9:89:d1:51:16:11:0d:a7:78:
0c:03:a9:83:18:6f:7f:bc:f1:57:28:7e:92:05:fd:
60:a5:b5:ea:11:7d:e5:6e:39:90:45:90:2f:63:35:
a1:de:60:0f:44:73:99:69:a8:30:89:67:ba:cf:ab:
68:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:70:16:D8:91:A7:5C:D7:71:FB:A2:74:06:FB:15:65:70:52:C1:AB
X509v3 Authority Key Identifier:
keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ff:d4:c2:26:aa:62:12:7a:d3:07:83:33:ca:5d:d7:b4:e8:
87:63:d1:64:dd:86:30:b1:70:4c:ac:e6:63:23:0f:56:5f:6d:
2c:2d:8d:3c:f6:36:28:bb:d4:8a:44:e8:f9:5d:ec:14:b1:6c:
76:ac:95:c8:5c:db:51:85:04:b2:b8:20:45:5b:fb:6b:f1:26:
49:ed:f1:1b:bd:03:28:ed:ba:02:4d:8e:8e:78:03:7f:6f:1b:
48:96:7d:72:1f:e8:c4:6f:a2:3b:e1:25:91:3d:f9:f0:a0:2b:
22:0c:9a:96:03:0c:4b:ed:ec:b2:f4:42:04:09:ac:6b:2b:07:
81:0d:f5:b4:89:46:62:0a:39:f0:43:03:23:d7:88:6b:ca:21:
bd:38:54:ce:e2:b8:19:03:e1:c4:b3:f6:dc:bc:04:49:a8:5e:
da:71:ad:c8:d1:16:37:62:ba:14:df:57:87:f2:01:5d:ed:82:
ce:ea:09:b4:ff:ee:4e:39:ab:a0:9a:c1:bb:c1:eb:d5:bb:ba:
02:c9:9a:0f:8b:7c:e3:a8:5f:08:e0:07:1c:5c:5c:40:66:08:
f0:a2:27:dc:79:c7:23:a9:be:b8:e4:4f:fe:d4:de:2e:34:25:
13:59:6f:af:bd:1e:ec:68:7e:86:41:97:17:6b:71:e4:19:b5:
07:ae:c9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:03 2026 by rpki-client