Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
File: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft (raw, json)
Hash identifier: /dK+s1Xrys0OysRg5mwGm3OrAzma0V5TjV1q++78mgg=
Subject key identifier: 5E:A7:23:63:CA:69:03:58:25:65:A4:AB:3E:90:92:86:2A:73:7D:8F
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial: 019E20FFE5C467A73B4C74A3E5C748318400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
Manifest number: 17D5
Signing time: Wed 13 May 2026 11:01:41 +0000
Manifest this update: Wed 13 May 2026 11:01:41 +0000
Manifest next update: Thu 14 May 2026 11:01:41 +0000
Files and hashes: 1: 7HIOB7eoRAyG0ZPEZvvAbpswFrY.roa (hash: Es8A+6R1MLYeRZW+tk5RBf/7aXDiiAHZ+/2nLZtggb4=)
2: MCbnv8KJAY7dWm0UH6ulCMh-Zxc.roa (hash: 0xuvAxTJi/9kYRQK87s4orh7y9pLCa7vkuXPG3p7G24=)
3: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl (hash: JrzVnUdjRwa4FCYYFXWZBFm+RSw19bwvtos7ceAL3kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 11:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:e5:c4:67:a7:3b:4c:74:a3:e5:c7:48:31:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Validity
Not Before: May 13 11:01:41 2026 GMT
Not After : May 14 11:01:41 2026 GMT
Subject: CN=5ea72363ca6903582565a4ab3e9092862a737d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ed:49:d4:6c:f1:e1:8c:29:1f:f5:8e:b2:c3:
2e:ba:d4:0f:2a:87:be:26:f3:22:4b:17:c2:26:86:
2f:3a:71:92:ac:f7:54:de:3c:11:56:4d:c2:5b:8a:
22:4a:d5:4e:ce:1a:a3:85:35:c0:fc:00:6e:16:97:
bb:b5:32:85:07:62:9f:bd:75:28:20:b8:33:1e:9b:
5f:db:53:d6:33:a6:2d:98:8d:08:d8:a5:3b:3e:6b:
61:61:9f:3a:c3:8b:55:9d:76:bd:6c:45:fb:4e:16:
d3:bf:87:bf:10:3b:7d:fb:55:45:09:5b:6a:9f:07:
10:d6:29:c6:ee:b4:05:a0:cf:70:40:e6:ad:c3:b5:
71:d0:a0:22:6b:6e:25:ad:28:ba:36:b2:34:8e:a6:
2a:21:15:f9:28:31:23:8f:b0:1a:7f:2d:50:43:a2:
74:88:26:9b:af:84:b1:6c:c7:ad:ea:47:fa:c0:98:
bd:b4:87:50:8e:ca:36:2b:6c:59:a1:9e:c2:de:ee:
2c:a5:97:ca:50:ef:33:f4:37:e6:80:30:07:92:e5:
cb:92:2e:ad:67:2e:fb:d9:13:1a:cc:21:90:ad:c7:
8f:97:6b:1f:c6:b5:dd:60:3c:ad:9f:5f:f6:26:6c:
18:a5:5f:2f:2e:6c:02:82:86:6a:f5:e1:9c:a6:01:
95:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A7:23:63:CA:69:03:58:25:65:A4:AB:3E:90:92:86:2A:73:7D:8F
X509v3 Authority Key Identifier:
keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:88:4b:19:98:16:12:26:27:c3:91:df:60:a0:ce:f0:d6:5a:
ee:8a:17:0a:f1:b5:55:c4:3d:43:be:2c:b0:8a:9f:92:b0:83:
ea:9e:37:76:34:0d:d9:34:2f:b1:f2:23:68:59:67:e8:49:0c:
6f:c1:ef:44:4b:7a:a0:e3:45:3b:82:b6:b7:63:31:5f:1f:23:
5d:3d:ff:44:f1:3f:88:18:9a:22:34:6d:c8:4f:5e:3b:ed:44:
ff:82:96:e2:ae:77:2c:70:d2:39:53:af:8e:a2:0d:0d:35:87:
bc:fa:8a:fc:ec:9a:31:5c:03:9f:5a:ff:b5:38:98:57:2f:4c:
80:01:d7:79:42:fc:26:e5:a7:cd:0f:09:59:60:61:c6:d9:38:
e5:14:fc:81:44:89:97:44:16:66:b5:a3:bd:ea:bb:bf:a0:cb:
77:5a:a8:53:c8:b8:43:7b:71:1f:cf:dc:18:31:f5:37:b8:5e:
d3:b6:60:8d:1a:ab:50:98:7c:78:c8:d8:d3:da:c6:ea:88:de:
8d:bb:03:28:26:9e:c8:10:75:da:2a:9b:96:a7:17:3b:6b:09:
8f:f2:e3:ab:51:f1:07:80:26:b8:6f:1e:fb:f0:71:06:6d:50:
de:7c:c4:0f:17:c6:d4:78:2b:be:f0:39:c1:1c:9a:0c:78:99:
24:cc:5f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:30:53 2026 by rpki-client