Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.mft
File: jxBcT_tdVLwidfIN4wBzTiTupKY.mft (raw, json)
Hash identifier: 6Ye64Zy2MgwZLE+wJkiKASgwqrqBr0Lv2357hC1BWJo=
Subject key identifier: 9D:88:FC:A7:A4:77:F5:DF:2E:0B:CB:C2:9E:D2:FE:68:AE:F0:B8:49
Authority key identifier: 8F:10:5C:4F:FB:5D:54:BC:22:75:F2:0D:E3:00:73:4E:24:EE:A4:A6
Certificate issuer: /CN=8f105c4ffb5d54bc2275f20de300734e24eea4a6
Certificate serial: 019E1D5935DE28C8F5CC75D6DF8E04E482B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxBcT_tdVLwidfIN4wBzTiTupKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.mft
Manifest number: 28
Signing time: Tue 12 May 2026 18:00:46 +0000
Manifest this update: Tue 12 May 2026 18:00:46 +0000
Manifest next update: Wed 13 May 2026 18:00:46 +0000
Files and hashes: 1: CaHSmdkysiaumo43vhf9KnbJsHs.asa (hash: 08F9c2p2ZWXv2pzjeA1I++KB7kXuVe5VH24pFsI3lJY=)
2: jxBcT_tdVLwidfIN4wBzTiTupKY.crl (hash: R3IoDIkk145O6fWmnzcXqCkwQ8leVsQFGcJATlwVyCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxBcT_tdVLwidfIN4wBzTiTupKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:35:de:28:c8:f5:cc:75:d6:df:8e:04:e4:82:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f105c4ffb5d54bc2275f20de300734e24eea4a6
Validity
Not Before: May 12 18:00:46 2026 GMT
Not After : May 13 18:00:46 2026 GMT
Subject: CN=9d88fca7a477f5df2e0bcbc29ed2fe68aef0b849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:7e:52:f2:2c:08:a8:82:85:8b:9d:db:86:
a4:05:03:f3:03:91:23:53:92:8d:9d:58:5e:86:53:
8f:5d:0b:9e:38:e1:8e:52:34:57:e2:fd:3b:94:a5:
00:cf:5d:83:1a:9c:72:d1:87:e8:09:b0:09:dc:1a:
05:c5:66:4a:29:40:ab:7d:11:d1:d6:66:6d:0f:3b:
6c:e9:fd:15:60:f8:df:33:57:ce:c1:76:b6:78:5f:
a3:10:5c:ff:f5:d3:93:61:ef:74:71:4c:f6:51:16:
a9:c4:92:7b:02:25:30:41:38:97:65:18:e3:b9:88:
33:29:e8:bf:c3:8f:55:7e:83:da:d4:67:3c:6e:c0:
a2:ce:d2:af:b5:4d:5b:63:ff:3d:6a:89:58:a7:98:
2b:39:6a:03:52:42:20:14:a2:8d:e6:1b:9e:c8:e9:
0c:03:24:8d:6f:64:07:72:c9:92:71:f3:a8:6b:7b:
8b:2e:bf:fd:d7:b4:e2:df:32:76:8b:cb:aa:43:55:
55:a4:83:da:be:38:05:af:b3:85:31:db:85:37:f9:
b9:16:87:0c:d2:25:54:ae:5a:79:dc:39:29:08:32:
f1:22:d1:ca:ed:3a:d5:c9:1e:45:1e:ba:41:69:0f:
35:e1:c1:13:7c:e3:f1:5a:04:f2:7e:cd:1c:18:ec:
15:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:88:FC:A7:A4:77:F5:DF:2E:0B:CB:C2:9E:D2:FE:68:AE:F0:B8:49
X509v3 Authority Key Identifier:
keyid:8F:10:5C:4F:FB:5D:54:BC:22:75:F2:0D:E3:00:73:4E:24:EE:A4:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxBcT_tdVLwidfIN4wBzTiTupKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8c:c0:6d:94:d6:42:02:4b:17:25:f2:ad:31:1a:47:fa:27:
00:9a:cf:12:33:16:b5:0c:2b:73:22:de:e6:64:fa:5e:df:b1:
f2:bc:36:55:ef:83:3e:72:10:0a:c4:fc:09:91:3f:77:95:17:
36:52:1d:84:cb:63:ea:a2:4f:47:bb:dc:6e:e3:85:40:7d:7c:
d8:80:c5:ab:3c:c2:a6:8e:dc:73:d6:c1:75:58:28:15:7f:d8:
01:e7:18:f4:06:19:f0:df:ba:6c:b4:d6:57:a7:6b:9e:88:32:
d5:2f:ea:05:46:ee:3e:e0:e5:f3:ce:65:c0:bf:8c:5a:59:06:
e9:92:0e:1b:e6:ce:74:f6:a7:ef:43:98:c7:58:71:9d:c1:6e:
db:4e:b8:9c:7f:8f:66:02:c6:30:c5:c8:7c:55:ec:18:ed:ff:
ac:f1:9e:b1:bc:38:ec:c5:ff:e2:07:e5:b8:0a:2e:1d:82:e0:
23:4e:e7:27:cd:cf:88:92:38:45:6a:1a:9b:d4:11:9b:e0:94:
23:f5:7e:49:c1:a5:9a:b9:b3:f0:be:06:a7:fa:34:c9:31:b1:
95:40:63:ac:19:2d:1d:35:a1:5b:d2:51:b6:c0:88:af:c3:c2:
db:0e:76:80:60:e6:33:d1:b4:4a:b7:36:36:7b:3f:68:7f:b3:
36:00:c8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:18 2026 by rpki-client