Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
File: jkFZeSO5geHA1Pyi_9CozcNme30.mft (raw, json)
Hash identifier: UZTOKr3aNnz70gYYLVAZKGfmJ1c7blqoGiyTE8wyYM4=
Subject key identifier: 2A:9A:C3:F2:10:C4:94:E2:01:B5:A9:D7:06:37:E0:8A:FE:7E:C6:99
Authority key identifier: 8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D
Certificate issuer: /CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
Certificate serial: 019E1F7E8B0DE91EF4DB8419E1EED7DC05A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
Manifest number: 029C
Signing time: Wed 13 May 2026 04:00:47 +0000
Manifest this update: Wed 13 May 2026 04:00:47 +0000
Manifest next update: Thu 14 May 2026 04:00:47 +0000
Files and hashes: 1: 2QK16_GzCxStUDI0mu8WHffdpn8.roa (hash: GKlCvD0CmH/A+xQlfrKSRNG2sqH4ve1r+aoC47JjAIU=)
2: jkFZeSO5geHA1Pyi_9CozcNme30.crl (hash: bPu1dSu4Qmjo1d7XDr2mTZtlM4cm0B89zmOEqIaHNeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:8b:0d:e9:1e:f4:db:84:19:e1:ee:d7:dc:05:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
Validity
Not Before: May 13 04:00:47 2026 GMT
Not After : May 14 04:00:47 2026 GMT
Subject: CN=2a9ac3f210c494e201b5a9d70637e08afe7ec699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:80:5f:54:1e:30:27:5d:a7:90:65:29:50:
ac:1e:4b:4b:93:bb:5a:28:fa:48:47:23:40:e4:f3:
60:f2:92:25:51:78:d1:f5:19:da:32:fe:e7:cb:db:
a9:1d:a0:8d:c2:53:40:62:fc:84:d3:27:b7:57:e9:
b9:89:ae:f6:4e:31:51:99:2a:1e:2b:9c:89:a0:e5:
c1:1f:87:62:72:bc:7f:f4:43:f0:c7:18:77:34:c7:
c4:01:4a:d4:ac:e4:43:94:c2:c5:d3:c1:ca:16:cb:
bc:5f:a1:28:68:17:f7:be:88:de:c0:56:66:b1:cf:
63:e7:e7:be:ac:02:0d:dc:4f:30:15:a4:9e:ea:97:
22:8b:0b:0c:79:9c:ed:f8:9d:4c:c9:51:27:65:2a:
95:03:e8:ea:58:e3:7e:16:e7:5f:84:6e:b6:ca:3e:
67:aa:17:36:75:d4:79:c7:d6:7e:83:1e:c2:ec:53:
49:f9:9b:1e:57:08:e6:c7:12:bf:59:dc:43:71:ef:
6c:48:dc:e1:da:b0:00:15:88:c4:2c:7d:7d:c0:2b:
56:d9:23:1e:e8:9e:c9:14:17:0e:db:96:18:d1:7c:
d9:70:9b:61:5e:48:24:9b:8d:66:7f:38:92:08:89:
0d:35:51:d7:e8:ab:25:ee:a9:7f:22:f7:bd:e3:6a:
b6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9A:C3:F2:10:C4:94:E2:01:B5:A9:D7:06:37:E0:8A:FE:7E:C6:99
X509v3 Authority Key Identifier:
keyid:8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a9:f8:cc:85:ad:e9:87:cf:34:02:b5:f2:45:93:3e:1c:0c:
30:43:39:c2:b3:ef:64:a6:95:cb:fb:d3:34:b9:fb:c1:0a:1e:
b9:ab:8e:f9:d9:79:80:b5:76:b3:c7:e1:2b:65:c6:71:26:77:
d4:b4:d2:55:4f:de:c9:a0:97:63:39:23:db:ae:44:7e:79:67:
bc:e4:d6:56:46:fd:33:e6:2b:33:ec:57:bc:b0:0d:6d:52:44:
47:e2:3d:bd:b1:54:d7:54:e4:63:f3:1d:0d:de:7d:59:b7:fd:
f6:a8:19:d4:b1:89:af:bd:45:0c:11:5b:81:a5:6f:cb:aa:a0:
41:19:e8:97:96:3c:d7:19:13:57:1b:9d:76:77:14:83:ed:e3:
0d:e1:55:cd:fa:4c:0d:c7:66:61:1f:a4:ee:86:85:71:ed:d1:
60:9c:48:f7:e5:3a:ae:31:74:ff:9b:31:3e:74:dc:07:3e:58:
6f:d7:44:12:8d:10:a7:d6:5c:79:73:20:79:d4:a4:35:52:c4:
bc:b3:db:1d:ca:ad:97:c6:35:f6:84:6d:8a:af:39:78:e1:5a:
00:08:83:f1:d8:20:3e:c6:32:a4:1b:12:d1:e4:bc:a8:df:ab:
a5:af:53:5f:b7:d8:60:0b:58:c5:5b:fc:3f:9e:c6:92:9f:c0:
e9:bf:10:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:37 2026 by rpki-client