
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
File: JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft (raw, json)
Hash identifier: FZc32Li+aTJYxu1tQ/P3Cp/uiY/7mJHww6JtOAtuZJM=
Subject key identifier: CB:3A:A7:7E:88:45:35:AD:A5:EA:44:90:14:9B:B0:3B:2E:53:70:84
Authority key identifier: 24:7C:DB:5E:A8:2E:03:33:36:64:0E:9E:EC:8E:A0:98:CA:C8:61:80
Certificate issuer: /CN=247cdb5ea82e033336640e9eec8ea098cac86180
Certificate serial: 019E205A89AC587BFEA00EDD5DDB348D77A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
Manifest number: 6C
Signing time: Wed 13 May 2026 08:01:04 +0000
Manifest this update: Wed 13 May 2026 08:01:04 +0000
Manifest next update: Thu 14 May 2026 08:01:04 +0000
Files and hashes: 1: JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl (hash: PZz9sliyR8I6MpGRr5VA/BHpCE2dSLxMKlP6cCk65iE=)
2: sr5kiWaUNJb3k53oHKiE3zAeNCc.roa (hash: 4lKEnHHPq8ieSuUmi9tpKwDYW28NC9iz/gZMj6c8NHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:89:ac:58:7b:fe:a0:0e:dd:5d:db:34:8d:77:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247cdb5ea82e033336640e9eec8ea098cac86180
Validity
Not Before: May 13 08:01:04 2026 GMT
Not After : May 14 08:01:04 2026 GMT
Subject: CN=cb3aa77e884535ada5ea4490149bb03b2e537084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:77:f8:ee:f1:d5:7b:ef:60:27:0e:77:e5:
5e:07:0e:28:9b:4a:59:d5:aa:f0:cf:e7:b9:68:1f:
d8:5b:19:b4:83:b7:4d:1c:51:4b:ce:11:1c:5d:3a:
06:f0:59:16:93:5d:af:01:6f:c2:34:c8:f3:62:5e:
50:4b:64:c2:ce:65:fc:57:ab:29:41:fa:83:c9:cf:
0f:f5:f5:52:0d:03:9e:93:b6:52:94:21:cf:03:67:
c7:04:8a:3c:cf:10:5d:5d:5f:05:83:d4:71:ee:51:
03:6b:e0:dd:93:6a:32:1b:2d:02:35:bd:36:06:68:
0a:f9:09:dc:a2:04:ff:a3:42:22:ae:81:e8:43:db:
0a:4a:c2:0d:29:73:e8:fe:5a:4b:d1:8d:65:8e:ed:
40:25:6a:bc:13:c7:5f:38:b9:6a:f0:63:13:d0:79:
11:30:bc:6f:a9:cd:5d:ca:f8:20:0c:61:68:76:d0:
4c:dc:c1:44:38:cd:55:86:54:3e:d3:5d:f6:06:4e:
92:fe:5e:c1:4b:ed:b9:f7:2e:2c:b4:28:c4:f7:d7:
fd:dd:59:c3:d9:7e:d1:bf:b4:4c:55:57:42:5e:1a:
86:27:ee:50:1b:55:39:31:52:79:17:5d:d4:07:32:
c4:d9:b6:e0:25:f3:20:5b:97:d7:54:23:94:ee:38:
d4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3A:A7:7E:88:45:35:AD:A5:EA:44:90:14:9B:B0:3B:2E:53:70:84
X509v3 Authority Key Identifier:
keyid:24:7C:DB:5E:A8:2E:03:33:36:64:0E:9E:EC:8E:A0:98:CA:C8:61:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c3:62:d3:63:c0:3a:f3:05:ba:ff:ff:65:82:dd:f6:f4:80:
35:83:32:ea:4b:7e:26:9b:19:e6:e8:84:6d:2b:36:51:6b:df:
33:89:c4:ac:cd:58:e4:31:63:7a:b9:26:53:9e:a7:a2:3e:63:
7e:c1:34:e7:2e:27:7c:d3:9b:d9:28:85:08:5b:f4:65:68:6c:
2c:5b:c1:bb:74:b8:91:2b:7c:53:be:a5:0f:e1:f1:ea:cf:f1:
35:5b:38:1e:c2:45:2d:32:7b:5d:0b:13:62:9d:6c:e5:95:16:
22:69:76:3b:75:c4:44:17:e4:ed:80:05:4f:74:ef:a4:13:cc:
6b:2e:be:60:99:13:9e:a9:62:47:8e:87:5e:54:c6:ae:e5:7a:
9b:72:c5:c9:31:5b:d2:a1:a9:a5:02:17:22:70:20:5d:b2:6b:
92:df:90:51:53:f8:51:d5:b5:55:b8:5f:75:7a:9a:87:6c:a0:
3c:1a:d6:68:b1:65:d8:4a:db:a2:26:32:bf:28:53:db:c2:fb:
95:0e:4c:a0:43:fe:c3:4f:de:81:fd:0f:73:69:d9:6e:55:0f:
13:7d:46:6a:48:ea:24:a9:6b:62:0d:b2:0b:e9:fc:11:d9:95:
08:6a:5c:25:54:7b:5f:3e:0d:82:ea:bd:05:97:4c:ee:9b:a2:
22:53:19:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:41 2026 by rpki-client