
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
File: jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft (raw, json)
Hash identifier: zNOXAyzMA/wGfi+2hNJLUF/ONMcQWhFzBDTNopfGXHM=
Subject key identifier: 5A:DD:8E:10:61:89:28:9C:9C:FE:6E:95:70:73:D4:21:6D:83:DA:A4
Authority key identifier: 8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
Certificate issuer: /CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Certificate serial: 019E1EDA69B7108AFE5F2A16187EA73D7A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
Manifest number: 0D85
Signing time: Wed 13 May 2026 01:01:30 +0000
Manifest this update: Wed 13 May 2026 01:01:30 +0000
Manifest next update: Thu 14 May 2026 01:01:30 +0000
Files and hashes: 1: UCCvpf2A0w3TS01Mgi-mxKvg6Y4.roa (hash: wMobn9EgqRdgXS7vAj6osPvNRe/uCjfH5YvFicmgWAM=)
2: jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl (hash: advhslbyUFR4e+0C5MRQGIubGQry9Gst0MR+7DyCFEk=)
3: krbPjQ7dV78artLAJHZH9VRMSb4.roa (hash: DfhzBCZr3lEjUY/BpGX15//8G6kbI+qsFYcc/tJsimw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:69:b7:10:8a:fe:5f:2a:16:18:7e:a7:3d:7a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Validity
Not Before: May 13 01:01:30 2026 GMT
Not After : May 14 01:01:30 2026 GMT
Subject: CN=5add8e106189289c9cfe6e957073d4216d83daa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:11:cb:1e:0a:21:01:e0:bf:73:b5:b0:76:
e9:5c:81:44:ba:32:5d:29:97:f8:47:fe:7e:64:56:
46:ab:c4:b8:ae:20:79:19:b3:51:e4:4f:a9:5b:d8:
4f:bd:82:59:a9:36:94:f6:96:d9:49:8b:d3:a6:9d:
38:b8:cc:15:04:01:69:d3:98:bf:34:43:f1:d9:94:
fd:01:9d:33:f6:b2:48:ff:46:3d:6e:70:e1:d8:46:
8d:a3:d1:31:b3:3b:60:96:a3:bb:fc:7d:3b:83:5d:
bd:82:af:b6:08:33:98:a5:51:d3:b0:05:27:cd:f8:
2e:92:8d:bf:bd:f3:3c:48:a0:31:91:9f:04:25:1d:
6a:1e:8d:e5:34:96:28:be:ed:0f:12:4b:64:bd:7a:
7a:fc:b7:63:d3:96:61:a5:37:1a:0e:04:80:2c:0b:
1c:f8:76:27:bb:f5:74:7b:55:c2:c7:40:04:15:6f:
2e:3c:47:75:7f:5f:1d:70:c7:89:b7:79:1d:47:5d:
e6:2d:94:76:78:02:da:04:0c:97:c9:8b:b3:97:94:
a8:ae:01:3f:4a:8e:e5:5f:b5:7f:d3:3e:3a:64:18:
2f:89:a4:22:d6:8c:f2:c4:f6:5c:b4:b9:bc:eb:cf:
10:5b:90:9d:ea:58:9f:08:a8:6c:e2:f3:8c:69:ca:
96:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DD:8E:10:61:89:28:9C:9C:FE:6E:95:70:73:D4:21:6D:83:DA:A4
X509v3 Authority Key Identifier:
keyid:8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5e:a4:2b:c6:69:be:2e:d7:90:b3:87:e9:0a:3a:d1:8e:6c:
47:16:58:9a:94:c3:fe:2f:00:3d:03:f2:9d:95:d8:87:11:fe:
07:25:b2:85:65:dc:96:fa:08:9c:48:85:fd:7d:86:61:80:67:
92:f7:7e:f0:40:2a:af:54:e0:dc:c4:41:ab:e0:44:60:7f:01:
5c:2b:4b:59:88:08:25:a7:b2:c1:da:a6:55:53:38:89:9a:31:
49:c0:dc:0b:1e:e0:8d:8b:ba:16:ec:2c:c2:e0:95:e5:bc:92:
13:7a:39:6c:04:8c:95:dd:34:da:22:93:2a:fd:74:ed:a0:1d:
ba:9a:b7:5f:5c:4c:54:68:56:1a:4f:42:d8:50:7c:24:30:13:
c4:4b:db:01:90:3d:9a:8d:8e:a6:6e:37:77:dc:7c:89:6f:6c:
e6:fb:3a:e0:0c:9b:a2:47:ee:98:e5:d8:94:f2:0e:66:7a:f6:
35:a4:fd:10:0f:89:02:71:30:e9:e5:d2:85:8a:a0:09:20:b9:
20:24:e9:44:c2:cd:3c:fd:88:68:8d:19:27:aa:aa:46:40:ba:
a7:04:a3:1f:94:39:07:7f:b5:15:a8:17:0a:2f:7a:eb:10:4a:
b0:f7:48:3e:89:92:f2:62:a3:47:10:7d:d3:94:1f:cc:40:82:
50:70:a3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:55:15 2026 by rpki-client