Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
File: Jd40sXxTewli5M272bxnKcix2Qo.mft (raw, json)
Hash identifier: xcvZqhFW7O24WCiXuYYOiE/rTbADG3I5quUSbiCZgCU=
Subject key identifier: 74:A9:EE:3F:AF:92:5C:CF:DB:59:6D:B1:49:94:FB:E9:C2:F9:DA:D7
Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
Certificate issuer: /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Certificate serial: 019E2023FDABA67CA0B0C43B81AF7908BC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
Manifest number: 02EC
Signing time: Wed 13 May 2026 07:01:29 +0000
Manifest this update: Wed 13 May 2026 07:01:29 +0000
Manifest next update: Thu 14 May 2026 07:01:29 +0000
Files and hashes: 1: Jd40sXxTewli5M272bxnKcix2Qo.crl (hash: SHgalH9dzfgOuSF2fhQHwLqPBuxsi0rI1wKi3UMWzQ4=)
2: LPtgrCTtvqxu3cjuNnJKHmVe1hU.roa (hash: BGV23TnfOPa93rWNrPOH2klHvaD0qSg8RA6zxqAnbzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:fd:ab:a6:7c:a0:b0:c4:3b:81:af:79:08:bc:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Validity
Not Before: May 13 07:01:29 2026 GMT
Not After : May 14 07:01:29 2026 GMT
Subject: CN=74a9ee3faf925ccfdb596db14994fbe9c2f9dad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:07:09:d1:ff:1d:fa:3a:b5:aa:5e:60:bd:d4:
97:33:36:c6:7c:af:40:7b:9b:e7:b5:59:ae:2d:05:
40:f4:be:04:9a:e2:a9:51:6b:64:81:8e:3f:11:77:
9a:96:51:aa:79:54:46:12:25:01:82:ab:0c:68:b9:
66:31:c8:85:f7:3f:fe:14:42:83:da:56:4d:63:c5:
25:6c:f3:46:73:a0:5c:ea:57:c5:87:45:03:b7:37:
ff:b7:cf:cc:ce:c8:69:85:9f:89:ce:e8:72:c7:6e:
63:bf:dc:fd:eb:05:80:18:d6:90:ee:d6:6d:31:a8:
1f:1f:fa:c9:05:e9:e8:a2:a1:93:81:45:1f:12:36:
e6:d8:df:79:fc:1e:18:8c:f6:de:f1:cc:23:43:ff:
33:ff:4d:a1:fd:18:28:b1:0a:52:ad:5f:9c:7f:61:
8c:76:09:46:f4:4a:0b:e8:53:30:d8:2d:9b:ae:36:
9c:6b:fa:0c:c1:a8:6b:5e:18:e9:1a:e3:30:f2:9b:
6e:e4:cf:ac:e3:1b:03:d5:d1:ef:c1:39:b9:f2:14:
ca:5d:f7:40:2d:e8:36:0a:d4:9b:5a:78:2b:36:18:
c9:41:54:62:c7:42:a9:7f:fe:68:41:37:85:98:98:
d4:ea:6c:ba:70:c5:75:36:d9:ae:d2:0a:3c:6e:ef:
02:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A9:EE:3F:AF:92:5C:CF:DB:59:6D:B1:49:94:FB:E9:C2:F9:DA:D7
X509v3 Authority Key Identifier:
keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:71:c2:26:7f:48:46:7d:70:0a:b7:a0:92:d7:9a:e7:f2:7c:
10:c4:40:a4:ad:78:ad:3b:69:da:e3:41:cd:05:43:46:12:5b:
3d:7d:04:78:7d:2c:40:2e:95:76:99:0a:28:a5:03:da:23:46:
81:34:da:dc:87:d4:bc:fe:0a:bb:87:1f:c6:01:7d:56:5c:34:
90:f7:a6:71:6d:0a:5b:0d:17:c3:39:81:92:27:2f:87:1c:62:
3c:ad:ad:e8:d8:cc:9e:fb:d7:02:99:0c:51:66:86:b5:5b:23:
4b:7b:8b:35:99:0d:1d:41:fa:39:ef:0c:f5:ae:b2:e4:27:93:
c0:28:39:aa:62:6b:7f:67:e1:bb:f8:29:fe:6f:df:37:77:9d:
ca:68:5b:be:67:ae:3e:47:b3:21:17:da:2d:fd:03:0f:db:9b:
56:a6:e0:dd:32:56:93:5f:17:a3:04:12:24:2c:91:8b:d0:0c:
17:21:f3:95:d2:85:94:00:a2:32:93:4e:f8:6d:a9:3d:19:93:
51:5f:3f:28:be:ea:ef:8f:f1:4d:43:2a:98:fa:83:96:5e:c1:
41:ed:5d:39:0c:82:02:a5:6f:e4:cb:c5:72:8c:54:7a:e7:ae:
e7:85:c3:12:b4:32:2e:2c:71:c3:93:a9:bc:8d:4d:f2:42:7c:
c5:da:24:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:25:50 2026 by rpki-client