Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
File: JXW4SPkMg0xwaxGDCm_-kktS4vs.mft (raw, json)
Hash identifier: PO0mEaKytrGU+AZr3rw7OAEDg+ASCx/p/85JJ2bz0M8=
Subject key identifier: E2:E7:7E:DF:A7:84:A3:91:03:C4:59:7D:86:06:1D:FB:2F:5C:25:8A
Authority key identifier: 25:75:B8:48:F9:0C:83:4C:70:6B:11:83:0A:6F:FE:92:4B:52:E2:FB
Certificate issuer: /CN=2575b848f90c834c706b11830a6ffe924b52e2fb
Certificate serial: 019E1DC731275D9AE4C47B803526708940B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXW4SPkMg0xwaxGDCm_-kktS4vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
Manifest number: 52
Signing time: Tue 12 May 2026 20:00:53 +0000
Manifest this update: Tue 12 May 2026 20:00:53 +0000
Manifest next update: Wed 13 May 2026 20:00:53 +0000
Files and hashes: 1: JXW4SPkMg0xwaxGDCm_-kktS4vs.crl (hash: 1C5P1J+rwXdXBZJEYJ3dUPdIGTgFN6C8xP27SF6zDQQ=)
2: YmfhrzOCM66sJPg1PKrP9NnCVoY.asa (hash: 8/+ep3l2wKMWyTuGh0aBwWhRGg0m48hSZsKNp7TkDnE=)
3: mui-sKtnNSWRSnaMqkLa51rt19o.roa (hash: BS+qRZKXjkKi+axAKoghb2DmzEDHB1JdOOcYm5gKVHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXW4SPkMg0xwaxGDCm_-kktS4vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:31:27:5d:9a:e4:c4:7b:80:35:26:70:89:40:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2575b848f90c834c706b11830a6ffe924b52e2fb
Validity
Not Before: May 12 20:00:53 2026 GMT
Not After : May 13 20:00:53 2026 GMT
Subject: CN=e2e77edfa784a39103c4597d86061dfb2f5c258a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b5:85:dc:bd:cc:19:fe:af:43:9e:3c:2d:54:
fc:f3:89:7f:5c:dd:95:2f:86:36:5c:59:a9:6c:a7:
32:6e:4a:f0:c4:a5:12:b5:3a:31:f5:21:05:92:4b:
33:6c:6a:fc:1a:d8:b4:28:10:80:4e:7c:ce:f0:f3:
45:ef:4d:1c:7a:25:b0:7f:5b:2f:42:c6:53:4c:c1:
ac:4a:55:a3:7f:3c:ae:cb:0c:db:6a:01:0c:d1:7a:
73:78:15:40:12:06:e5:91:67:f1:64:5a:30:41:1b:
61:ef:a6:82:cb:32:e0:81:33:3c:a2:b9:68:53:f4:
f9:67:8d:48:93:14:5c:2c:47:5f:a1:56:a8:62:55:
23:84:ea:11:83:1c:c4:59:d0:71:5f:79:34:59:2b:
25:13:2e:20:cb:24:5f:71:f1:fb:f2:43:28:a6:24:
ce:dd:a5:b6:eb:dc:4c:66:5d:1c:7a:e7:f7:a8:5d:
02:5e:74:11:63:74:d5:2d:13:2c:04:1b:42:01:19:
4e:0a:96:ef:96:bc:71:1c:25:c9:ad:be:9e:c8:cb:
44:d5:7a:d5:22:d4:aa:81:e2:33:0c:05:67:60:28:
ef:82:3c:b5:b7:66:17:4f:57:cd:3c:08:d1:c9:c2:
24:04:d4:da:7b:7d:fe:7a:aa:f8:18:76:74:fc:b3:
d2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E7:7E:DF:A7:84:A3:91:03:C4:59:7D:86:06:1D:FB:2F:5C:25:8A
X509v3 Authority Key Identifier:
keyid:25:75:B8:48:F9:0C:83:4C:70:6B:11:83:0A:6F:FE:92:4B:52:E2:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXW4SPkMg0xwaxGDCm_-kktS4vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8d:20:9e:a4:15:fe:32:40:5f:fe:93:7c:6b:54:d9:d0:ff:
70:63:24:7c:81:29:69:65:a9:78:63:6a:d7:23:59:49:10:d8:
78:d6:13:db:01:54:05:de:a5:9a:9a:bc:f6:64:20:06:7c:51:
7c:08:3a:93:a0:5e:d4:c3:32:0c:e7:91:75:59:d4:a1:c4:d4:
4d:75:fa:2d:3b:48:c4:41:d4:3d:f4:b6:db:30:16:b3:74:fc:
7b:cf:83:e5:55:70:06:8f:9e:3e:b8:43:c6:4f:ee:f5:1f:2c:
d1:b1:83:09:a8:53:07:38:bf:b6:37:bb:d7:e9:56:a9:92:6a:
30:28:51:b0:2e:a4:a8:e6:fb:1c:97:de:ee:68:89:79:f4:bd:
da:73:90:c3:62:e6:9d:a9:5e:49:38:3c:6d:05:6a:e7:92:45:
94:ad:a5:9e:19:b8:c8:9b:c7:c8:48:43:91:cc:00:d2:94:9f:
8b:6a:eb:20:8c:13:13:b4:17:35:21:f7:b3:8e:36:a7:83:76:
91:72:0c:39:ad:33:d8:39:17:d3:ba:0f:a7:12:d2:ec:9e:22:
00:07:d9:7d:26:38:52:97:74:4f:fb:1e:16:dd:0a:cb:b3:98:
be:f6:64:55:54:ce:1d:f2:e0:8d:96:9c:7b:c2:cf:1a:14:d2:
9b:8b:a0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:34 2026 by rpki-client