Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
File: jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json)
Hash identifier: HHOZ1alNu7dsBNvloKDwUOcyFrYj1YDOjrFFlUdyydg=
Subject key identifier: C2:31:59:B8:22:FB:18:0C:64:F5:FF:49:BF:70:DE:B8:B7:9A:BD:82
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 019E1FB609D77EF18D1E7FA5DABD6CA78E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
Manifest number: 17CC
Signing time: Wed 13 May 2026 05:01:24 +0000
Manifest this update: Wed 13 May 2026 05:01:24 +0000
Manifest next update: Thu 14 May 2026 05:01:24 +0000
Files and hashes: 1: 5lor0bwtxK_7lFhqP5JQsE38fgY.roa (hash: Gko1WgTJjCRM1Vd8FnhB+R8Xwpk2DGktIYr+kX9efeQ=)
2: _Q8Mb-3UvfMhIjv_xRaFDoLApBs.roa (hash: IHr0cgRLyfbFPNalDZLOfmKJvgcvrc9t828c9yf4EtU=)
3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: mWqG5CSgcgILJFrd0NG6XTD+J/3Pwuh8xFeBr9Mc/Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b6:09:d7:7e:f1:8d:1e:7f:a5:da:bd:6c:a7:8e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: May 13 05:01:24 2026 GMT
Not After : May 14 05:01:24 2026 GMT
Subject: CN=c23159b822fb180c64f5ff49bf70deb8b79abd82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:a4:35:85:c9:af:93:bb:f0:27:33:50:2e:
15:7e:43:21:4e:0e:60:d7:90:b8:ee:43:53:5c:7e:
03:ed:ce:77:24:46:97:07:15:d6:33:b3:22:ae:dc:
16:02:cf:c0:64:eb:f3:8f:52:6f:e2:35:01:d5:bd:
3a:38:d0:c8:7e:32:f0:60:75:4e:fb:0a:96:02:3f:
dd:41:2f:48:c4:4e:ee:b0:10:53:ef:2c:fe:8e:ab:
9a:12:33:a0:e0:e3:9a:4b:7c:8f:d5:9e:60:a5:15:
d5:5f:8c:9c:b8:17:dd:a8:2a:42:84:e1:f1:77:be:
1b:25:13:21:8d:9a:ef:2c:f6:bc:a5:4b:22:db:9f:
c4:c0:8f:a2:65:5f:7c:7a:c5:01:8d:9d:d4:af:52:
3b:a0:2d:d8:b5:26:2e:9d:23:bf:b1:d2:36:55:13:
ba:e0:33:f4:d0:7c:b9:58:1c:03:ca:69:c9:27:d4:
c0:b6:d1:51:d4:e0:18:4c:32:1c:4e:8e:95:bd:42:
96:d4:e4:19:fa:82:ba:6d:e9:34:c7:4c:31:3a:6a:
06:e2:e3:72:1e:0a:16:8a:50:e3:a7:46:80:48:f4:
67:fb:b1:62:0e:bc:f7:c4:04:60:fa:2a:11:79:70:
f4:3f:f5:30:b2:a8:1e:58:3c:7a:c5:2f:cf:9a:5e:
7c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:31:59:B8:22:FB:18:0C:64:F5:FF:49:BF:70:DE:B8:B7:9A:BD:82
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:56:8b:0d:38:06:2a:33:f1:ef:ae:c6:1d:80:4a:35:86:20:
51:7d:2c:76:91:99:25:5b:14:b5:3a:d3:47:cc:d8:41:15:91:
4a:23:f4:5f:e8:52:20:c5:eb:5e:d7:06:44:48:b7:59:50:ad:
82:10:02:88:7a:53:b1:60:70:4a:fb:16:d2:e2:55:64:b5:76:
f3:ea:00:d9:4f:d4:2f:88:7a:78:c0:27:a2:da:77:7e:95:94:
57:9e:14:2f:e6:0e:76:f0:6b:66:ba:40:c2:06:c3:b5:e4:0b:
c4:92:86:48:6e:6a:b7:82:f5:aa:f9:b3:ec:94:8d:da:47:e2:
64:ce:e0:ca:67:4f:8a:3d:fc:85:bc:0f:67:7d:b2:32:c3:43:
68:07:01:60:42:d9:f6:47:ee:91:9d:af:f6:62:c0:8b:bc:61:
5a:7a:bb:b5:41:0a:5e:92:3a:5e:ab:30:b1:61:6d:f8:cc:6b:
c8:bc:5e:03:4e:76:4d:88:e2:0b:06:e9:dd:ca:4d:fc:d3:2f:
ab:60:47:6b:7c:82:fe:33:16:37:3b:2c:5c:cb:ed:ed:72:9e:
67:17:f7:03:99:b3:01:ab:5b:2a:8c:c1:ee:60:e0:38:69:03:
d6:16:47:01:9a:1b:82:e2:a0:54:51:d3:66:2a:4b:03:d3:62:
83:d3:d0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:43:35 2026 by rpki-client