Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File: jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier: HT3Bn1LNKdJDj9p2r+mSdz33gxyfYx9A0JvQrOjfb6I=
Subject key identifier: 8E:82:3E:20:93:18:7E:F6:A2:BE:7E:8B:2D:AE:86:E8:B9:C1:63:D1
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 019E1D90C2E06946C17F1084121968F7C056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number: 1910
Signing time: Tue 12 May 2026 19:01:26 +0000
Manifest this update: Tue 12 May 2026 19:01:26 +0000
Manifest next update: Wed 13 May 2026 19:01:26 +0000
Files and hashes: 1: NloTUsOLqpfTu8IkwsLGe53OKiM.roa (hash: Txhri0SKfqPnlod2zhIYj6wgCSRlDYus6zsHb7gohlo=)
2: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: DH/XKX8KuqDCt+IsrplxOIGScApqGlQM9+cefFqAeMI=)
3: nbm3hVn9hJgrdxApoYW6_LkAHBw.roa (hash: /jIkd8Myn46sgXnoD9e4Sybc8r78RdvI4H7sLK3ci9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:c2:e0:69:46:c1:7f:10:84:12:19:68:f7:c0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: May 12 19:01:26 2026 GMT
Not After : May 13 19:01:26 2026 GMT
Subject: CN=8e823e2093187ef6a2be7e8b2dae86e8b9c163d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:3c:76:60:6d:7c:10:84:89:c8:50:54:9a:
12:cc:21:78:af:28:71:05:40:a5:d0:e0:3a:98:25:
71:f8:a9:b0:e5:98:ce:3f:e3:5f:ac:bb:f5:fb:7f:
cf:ef:60:af:1d:46:1b:11:7d:b7:c3:b7:7e:71:57:
62:f8:bd:22:c5:4f:4f:e1:14:7a:7d:75:36:d1:0d:
77:0e:8a:3b:fa:24:55:1a:49:33:b9:4f:4e:57:17:
f4:6e:58:2c:a5:62:0f:2c:ac:00:f0:c0:4b:23:fe:
d0:f9:a0:0c:a4:fa:ff:9a:65:52:71:1a:3a:ab:55:
27:f4:5d:7d:ad:f0:c9:61:ab:d8:f0:f6:39:de:e2:
0c:8c:29:e0:c1:55:90:bf:83:09:0e:e7:f1:75:22:
65:37:ad:c6:d8:b8:01:d4:6e:94:6f:ac:f5:1d:64:
2a:ca:7d:e4:f0:07:d6:4f:78:e4:db:a0:a2:b5:98:
d5:b1:37:33:f8:6f:c6:26:b6:72:06:46:cd:de:3c:
3c:8a:b1:26:84:52:4a:9f:d5:df:40:8e:4e:91:2a:
f3:95:ca:ba:55:39:b3:18:c8:d7:c1:66:03:66:3c:
14:db:16:29:f3:bf:e4:b5:58:f5:56:3c:9b:a1:6e:
95:52:8b:38:1e:51:53:3d:5e:ec:e3:66:79:0a:25:
cd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:82:3E:20:93:18:7E:F6:A2:BE:7E:8B:2D:AE:86:E8:B9:C1:63:D1
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f8:46:ac:44:5f:ad:69:bf:61:bb:40:28:59:ae:86:e2:c2:
9a:93:1b:bc:81:55:db:73:8c:29:25:70:2a:db:ed:5c:cf:82:
56:90:6c:6c:79:51:8d:26:c1:d4:d1:78:94:f1:9d:df:ed:6f:
00:8a:a1:f7:e8:2a:58:be:84:c7:98:91:ca:f5:db:a9:3a:b6:
c6:3a:41:63:5a:c1:5b:88:57:8d:b4:99:7f:5e:e8:ba:0f:29:
67:6f:ad:28:55:18:d8:12:2c:81:2d:57:77:e8:9c:c4:33:ac:
58:eb:e1:90:96:13:65:4e:c8:64:4b:c5:5a:ef:30:13:75:bc:
90:d6:02:10:d2:d7:27:c8:58:91:c9:cc:e1:67:e0:15:2c:2e:
9d:5c:9b:8f:39:3e:58:d2:0c:e8:31:e7:0c:47:fd:aa:da:95:
12:34:d3:f4:d8:20:c9:d7:48:3d:c6:00:c9:07:69:a3:a5:93:
ed:99:83:9a:8d:4e:43:80:fb:d6:1e:05:d0:9e:ba:9c:02:ce:
4a:43:3a:62:fa:17:a0:9b:fa:aa:a6:05:bb:a7:e3:37:fa:bb:
42:22:dd:21:4f:b2:45:ed:df:26:5f:08:ce:ba:5e:b0:34:5d:
e9:42:bf:a0:1a:76:dd:13:d2:b0:82:1f:f6:6d:fe:d8:d4:17:
b2:a9:16:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkMLgaUbBfxCEEhlo98BWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYTAzZTBkMDIwZWZjOTQ0YzFlZWJkYWVlNTQyN2QzNjVi
NzAwNzYwHhcNMjYwNTEyMTkwMTI2WhcNMjYwNTEzMTkwMTI2WjAzMTEwLwYDVQQD
Eyg4ZTgyM2UyMDkzMTg3ZWY2YTJiZTdlOGIyZGFlODZlOGI5YzE2M2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwY8dmBtfBCEichQVJoSzCF4ryhx
BUCl0OA6mCVx+Kmw5ZjOP+NfrLv1+3/P72CvHUYbEX23w7d+cVdi+L0ixU9P4RR6
fXU20Q13Doo7+iRVGkkzuU9OVxf0blgspWIPLKwA8MBLI/7Q+aAMpPr/mmVScRo6
q1Un9F19rfDJYavY8PY53uIMjCngwVWQv4MJDufxdSJlN63G2LgB1G6Ub6z1HWQq
yn3k8AfWT3jk26CitZjVsTcz+G/GJrZyBkbN3jw8irEmhFJKn9XfQI5OkSrzlcq6
VTmzGMjXwWYDZjwU2xYp87/ktVj1VjyboW6VUos4HlFTPV7s42Z5CiXNyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6CPiCTGH72or5+iy2uhui5wWPRMB8GA1UdIwQY
MBaAFI2gPg0CDvyUTB7r2u5UJ9NltwB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamFBLURRSU9fSlJNSHV2YTdsUW4wMlczQUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81NjIxMTItYWQ0NC00ZDcxLTljYjkt
ZmI3ZDdkY2EzNGE3LzEvamFBLURRSU9fSlJNSHV2YTdsUW4wMlczQUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS81NjIxMTItYWQ0NC00ZDcxLTljYjktZmI3ZDdkY2EzNGE3
LzEvamFBLURRSU9fSlJNSHV2YTdsUW4wMlczQUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfhGrERf
rWm/YbtAKFmuhuLCmpMbvIFV23OMKSVwKtvtXM+CVpBsbHlRjSbB1NF4lPGd3+1v
AIqh9+gqWL6Ex5iRyvXbqTq2xjpBY1rBW4hXjbSZf17oug8pZ2+tKFUY2BIsgS1X
d+icxDOsWOvhkJYTZU7IZEvFWu8wE3W8kNYCENLXJ8hYkcnM4WfgFSwunVybjzk+
WNIM6DHnDEf9qtqVEjTT9NggyddIPcYAyQdpo6WT7ZmDmo1OQ4D71h4F0J66nALO
SkM6YvoXoJv6qqYFu6fjN/q7QiLdIU+yRe3fJl8IzrpesDRd6UK/oBp23RPSsIIf
9m3+2NQXsqkW3w==
-----END CERTIFICATE-----
Generated at Wed May 13 06:27:43 2026 by rpki-client