Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
File: jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft (raw, json)
Hash identifier: QbS2dV+f0I1ofuqyzxZpKBAydOMYwr+95v7ii8+HJFQ=
Subject key identifier: 10:A8:70:8C:C1:4B:F5:23:2C:78:77:57:69:D1:A9:16:A4:C3:14:D1
Authority key identifier: 8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
Certificate issuer: /CN=8cc44984c686f2018c48102a284ab5a80f52a646
Certificate serial: 019E1EA375E00952CB2BCB00E029FFF449CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
Manifest number: 5B
Signing time: Wed 13 May 2026 00:01:29 +0000
Manifest this update: Wed 13 May 2026 00:01:29 +0000
Manifest next update: Thu 14 May 2026 00:01:29 +0000
Files and hashes: 1: ZH79cfZtvswrSRgEB8rNyMLIncU.roa (hash: GdJB3BYjUYCwb6ugCMPQc81N/mokOXiUDJJvBJrnEFI=)
2: ZRs42qGd3cKFMrGetaE_cEFCL58.roa (hash: QY1vvv3yXpUMazK4C60xrRvy7PbaO26yt177jKe+yzU=)
3: jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl (hash: 5NESLmMD8jMH0bFPq1m4XhI2slyQZLKd/MLfNqDUWI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:75:e0:09:52:cb:2b:cb:00:e0:29:ff:f4:49:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc44984c686f2018c48102a284ab5a80f52a646
Validity
Not Before: May 13 00:01:29 2026 GMT
Not After : May 14 00:01:29 2026 GMT
Subject: CN=10a8708cc14bf5232c78775769d1a916a4c314d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dd:08:97:14:8e:e8:e4:99:6c:03:43:2e:0b:
f4:82:37:07:7c:53:c8:15:f9:ce:12:2f:8c:54:04:
fb:62:6f:9c:0e:b6:1f:84:da:e8:8a:9e:d9:bb:36:
2a:7c:7f:33:f9:8c:fb:15:da:61:85:9a:cc:37:0c:
1d:72:60:1b:89:d2:30:d6:8b:81:0d:93:d4:c5:b3:
87:4c:ed:03:4a:05:9b:73:24:3a:b3:0e:e3:c0:5e:
7c:77:66:bf:8d:85:14:5d:21:7b:3b:57:0c:94:98:
c1:63:3c:97:fa:6e:15:44:6b:78:d7:a0:3a:5e:9c:
cc:81:3c:28:ed:7b:8e:3e:a3:5c:fe:6a:20:a9:d5:
0c:f6:1c:e7:c5:10:e5:db:3a:56:5c:f9:b4:c0:db:
3f:c0:89:6b:71:a8:43:0b:f7:8a:cf:11:e8:fb:d6:
b6:ab:6c:85:7b:d0:61:6f:71:4b:6b:7d:c8:19:4c:
f6:50:23:47:1f:77:6e:05:b1:cb:4e:2e:0f:d0:81:
dc:15:5b:42:c8:aa:36:b0:25:51:6f:cf:e2:d7:2d:
3b:e4:36:ab:43:aa:45:48:e0:8b:ca:03:1c:14:32:
44:c7:76:a1:d9:6c:e6:6f:28:90:66:93:8a:bd:0a:
64:56:8d:27:39:29:aa:1a:1b:29:43:97:a8:cc:fe:
f4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A8:70:8C:C1:4B:F5:23:2C:78:77:57:69:D1:A9:16:A4:C3:14:D1
X509v3 Authority Key Identifier:
keyid:8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9f:7a:94:79:35:b4:76:af:9d:2c:0d:5f:6c:5b:2b:50:21:
ca:2f:4d:ea:64:fc:31:de:18:53:2d:5e:cc:4f:c9:1e:5c:b0:
6e:4c:59:8b:87:a1:5b:89:89:44:f0:81:9b:d3:23:59:43:ec:
bf:c1:c9:bf:a0:60:a0:f7:eb:35:1e:f6:d6:f4:11:ac:50:3d:
7c:d0:b7:49:7a:d2:48:26:91:c5:07:0d:57:c2:72:c5:d8:59:
72:be:9d:96:a8:6e:ad:0d:f2:24:77:4b:bc:6a:2f:df:ec:f7:
32:9f:20:02:51:ab:3a:20:d3:2b:1a:d3:6d:30:66:c3:b0:64:
d7:7e:c0:0c:47:90:aa:74:5f:6c:30:91:33:5e:37:03:4c:aa:
55:3c:57:d6:8d:08:9e:15:aa:f8:09:1a:08:66:18:14:a1:e7:
4d:4f:8f:29:7c:d5:fe:40:70:20:c1:b2:84:90:dd:13:c0:cc:
f4:c9:16:1b:91:2e:40:4b:af:ce:7f:2b:22:b9:a8:f8:a1:8e:
c0:9a:62:4f:e1:39:86:cf:7e:23:36:d1:49:0f:50:3a:00:3e:
49:6c:1e:d3:5c:52:9e:f6:4a:b8:2a:70:1c:59:46:55:a5:74:
88:1c:b4:cb:9e:61:7a:15:c5:91:80:83:56:08:e3:cb:20:70:
ed:8e:d5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:49 2026 by rpki-client