Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
File: jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft (raw, json)
Hash identifier: glFIG9rteED5+n7hpxkWM8JMzFTZJG9FvVcwlLE3r5E=
Subject key identifier: C9:07:8D:FD:2C:03:2C:E7:B1:C8:4D:77:A1:17:F9:45:CB:02:3A:F0
Authority key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
Certificate issuer: /CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Certificate serial: 019E1EA3DD70C2E363554DEFAF8253D7D098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
Manifest number: 057E
Signing time: Wed 13 May 2026 00:01:55 +0000
Manifest this update: Wed 13 May 2026 00:01:55 +0000
Manifest next update: Thu 14 May 2026 00:01:55 +0000
Files and hashes: 1: 6fbN8X-Zd_3bLagCKNLcI6U0ZQ8.roa (hash: 9tQRoU2KNqyt5jisalOBz3HOC+o/8ZxBiQNdSn21t9k=)
2: jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl (hash: XYKmAz4Fw9tSXszLop1yFyc3so8+UPW8vz0HPigDFos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:dd:70:c2:e3:63:55:4d:ef:af:82:53:d7:d0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Validity
Not Before: May 13 00:01:55 2026 GMT
Not After : May 14 00:01:55 2026 GMT
Subject: CN=c9078dfd2c032ce7b1c84d77a117f945cb023af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f1:54:5a:e4:9f:5d:5c:d2:3e:0c:5d:7c:25:
d8:c4:1a:78:d9:01:7c:79:29:76:ef:7e:aa:0a:be:
39:58:0a:69:ce:d2:a4:7a:67:4d:70:9f:81:e6:71:
00:4f:33:2c:54:7b:1a:ba:ca:a2:e0:f2:83:bd:1d:
a1:e2:d2:1e:34:db:d9:66:84:41:bb:53:03:ce:3b:
34:89:72:1d:7d:92:5b:34:62:cc:f6:75:cf:d2:68:
53:90:98:fd:c2:0b:f6:9c:18:3d:74:51:d5:e4:d5:
15:04:22:ee:11:8e:1f:9f:8f:68:0c:fc:98:68:27:
9d:48:f6:97:c0:98:5f:9c:c1:b7:fe:03:43:72:4b:
41:00:2e:15:18:4b:30:4b:f1:9f:0f:d5:41:72:c0:
2d:36:55:c0:ce:45:f7:bf:de:62:96:86:a0:28:08:
58:1f:42:04:97:83:c7:ee:27:87:52:1c:34:f1:27:
4f:fc:58:8b:e6:72:01:2e:9a:5a:96:e0:82:6c:bc:
53:bd:c9:33:fb:fa:c1:74:6d:09:d9:57:88:48:79:
f5:37:79:a3:02:3b:c9:5e:89:ce:d7:53:94:c1:6f:
d4:75:c6:09:d8:79:b3:bc:f9:09:61:f8:62:16:48:
d7:72:0c:cc:bb:a3:ae:18:56:9d:6d:3b:9b:d4:68:
fa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:07:8D:FD:2C:03:2C:E7:B1:C8:4D:77:A1:17:F9:45:CB:02:3A:F0
X509v3 Authority Key Identifier:
keyid:8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:af:c2:66:e9:a8:68:8e:9c:c0:d8:0d:d8:1e:b1:62:8d:ad:
c6:e1:c8:83:84:7e:54:48:ad:5a:ec:ef:48:0f:df:73:48:b0:
6e:e5:41:88:79:06:99:15:d9:23:7b:55:65:ee:f6:2a:ec:88:
e0:0d:eb:71:69:04:b4:5d:88:5e:56:7c:90:02:c2:07:eb:9a:
5a:ea:94:9f:77:3a:80:7f:2b:22:a3:ae:45:a0:46:f7:d9:9d:
8b:2a:61:5d:50:0c:38:04:ca:bf:90:21:36:d7:c6:1e:5b:9f:
2f:73:78:30:6e:ba:49:4e:26:f9:47:41:5e:0f:39:99:f9:88:
4f:87:e3:47:91:d9:8c:c0:f6:1e:4f:04:66:2d:c5:23:4e:da:
35:c7:9f:f5:59:35:79:8b:38:63:8e:d4:e2:ca:e6:74:75:3f:
40:97:21:49:49:76:77:61:de:a1:62:af:1f:bb:ee:74:e9:09:
c9:44:77:4e:e6:03:87:b1:90:03:1b:11:e3:92:83:5e:19:6d:
91:21:cb:17:f4:97:8d:6e:55:9c:49:8e:5b:9f:57:b2:ce:48:
1d:a1:58:8f:de:d7:ee:ea:40:42:be:3f:2c:87:e0:d2:c5:52:
29:52:cf:a9:16:e1:31:12:4b:34:39:15:84:e8:7c:04:3d:ad:
f6:19:c8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:22 2026 by rpki-client