Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
File: jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft (raw, json)
Hash identifier: ahHLNEwjsM3T5Yi5KKXkOyI4K0DluJG7t5TUYF2Sv9o=
Subject key identifier: 52:13:C1:F4:83:FC:26:C3:9D:A3:8A:23:81:37:73:BB:30:A6:19:2B
Authority key identifier: 8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
Certificate issuer: /CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Certificate serial: 019F8FB546E5E4F6AAE39A284DDCA945B6EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
Manifest number: 0E44
Signing time: Thu 23 Jul 2026 16:00:49 +0000
Manifest this update: Thu 23 Jul 2026 16:00:49 +0000
Manifest next update: Fri 24 Jul 2026 16:00:49 +0000
Files and hashes: 1: UCCvpf2A0w3TS01Mgi-mxKvg6Y4.roa (hash: wMobn9EgqRdgXS7vAj6osPvNRe/uCjfH5YvFicmgWAM=)
2: jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl (hash: OgQlHEQL6ac+xfGtCpsglvOVPAyVFYGRMkB7YmUQ2Do=)
3: krbPjQ7dV78artLAJHZH9VRMSb4.roa (hash: DfhzBCZr3lEjUY/BpGX15//8G6kbI+qsFYcc/tJsimw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:46:e5:e4:f6:aa:e3:9a:28:4d:dc:a9:45:b6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Validity
Not Before: Jul 23 16:00:49 2026 GMT
Not After : Jul 24 16:00:49 2026 GMT
Subject: CN=5213c1f483fc26c39da38a23813773bb30a6192b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:5d:34:ff:17:9e:6d:9b:33:93:e3:90:58:
7f:b0:e7:3a:49:de:bc:79:44:87:00:be:42:e4:32:
bd:3d:cf:fa:d4:ba:6d:0c:27:1b:19:81:de:6c:0f:
96:61:2a:ea:e1:5f:2e:a6:62:7c:68:07:a7:5d:62:
5e:a4:b3:fc:7e:82:a6:d3:50:f2:14:30:2a:4b:91:
27:ad:75:45:a1:47:5e:b8:ac:98:ca:5a:76:6b:31:
bc:29:34:97:d2:64:3c:fd:0d:f9:7a:4d:23:c1:01:
22:81:29:51:28:41:c9:4e:b4:02:02:48:98:b3:6c:
1f:f2:8c:46:0f:96:d6:f4:96:23:b1:36:0f:5a:37:
9d:ef:71:b7:54:8a:82:18:ce:b2:7e:56:1b:19:68:
85:44:1e:e4:cc:61:e5:91:ef:45:9a:ac:95:fa:b4:
13:93:93:a6:df:d6:05:f9:24:f2:69:0e:28:a4:e3:
04:ac:3d:5f:d2:f5:54:03:cf:65:ef:be:ec:7c:f5:
fb:e8:33:56:05:23:ab:47:b7:8d:9c:d8:8f:c0:85:
9b:e8:9f:06:e8:71:9e:4b:b7:03:7f:b0:5f:8e:e7:
94:6a:b4:e9:67:82:ad:99:51:42:99:72:df:da:ed:
26:7c:fd:da:8b:e8:2c:ad:a5:98:38:5c:69:fd:42:
24:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:13:C1:F4:83:FC:26:C3:9D:A3:8A:23:81:37:73:BB:30:A6:19:2B
X509v3 Authority Key Identifier:
keyid:8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8a:b9:11:8e:52:79:85:2b:2b:d0:f6:34:3b:49:e1:5f:d6:
06:89:54:15:08:9c:05:2a:56:72:fe:16:88:ff:8b:d9:1c:6b:
d7:7e:26:3b:23:51:6f:02:01:69:61:65:8f:6b:b6:71:60:5d:
38:22:c6:20:aa:7c:fa:24:fb:4c:01:4c:57:79:c9:0b:40:d4:
eb:a9:57:a8:04:01:bb:75:4d:a7:c7:12:89:c2:de:a5:65:13:
20:7c:77:68:a3:c9:55:4b:c6:52:4d:25:a4:cf:48:64:4b:6d:
4e:a3:e7:fe:5a:61:50:4e:4a:78:fe:ce:38:0f:47:ce:2b:86:
2e:29:99:d5:fc:d2:d9:13:5c:9d:52:b6:bd:19:9a:f8:c0:74:
ff:38:85:62:99:8e:69:8f:b6:16:a8:1c:cc:39:ef:94:e7:d4:
87:88:fc:61:46:dc:80:d2:52:48:7a:b1:a7:76:80:87:7a:e5:
67:eb:16:3d:fc:79:65:ac:cd:b6:c9:5a:92:e6:f2:91:86:dc:
4d:b4:b2:a9:14:aa:60:c7:1d:a1:fb:de:a6:09:a5:df:e7:5b:
de:a0:e3:fd:2d:c8:01:5e:77:fc:4a:5c:1c:34:92:9f:fd:90:
a4:5e:28:59:f3:13:d6:fc:21:c7:93:65:08:40:c5:13:5f:98:
46:16:68:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:21:34 2026 by rpki-client