Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: 1iNjXUheRdYSRUFB3cRThHyNGu6CmvQTzd35GKYYgRA=
Subject key identifier: E2:D3:98:7E:79:CC:D5:C7:04:39:FA:73:03:BE:D6:14:B4:47:6C:B8
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 019E2136414F9171BAC8765B329834DE7A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 190C
Signing time: Wed 13 May 2026 12:01:04 +0000
Manifest this update: Wed 13 May 2026 12:01:04 +0000
Manifest next update: Thu 14 May 2026 12:01:04 +0000
Files and hashes: 1: 2u4DW90i6pJn6TNxJSQdCJPO9PA.roa (hash: z+7kYSl922ZGHRd4ve+viSStXQUCmw3QVQ5Lgiw6cXk=)
2: 7YQffxRE0rSLQxPURshHecG_JTc.roa (hash: uQCBTYo2a3hrZABdDnP1fnClvfQjBgoT9LYi5KTntlk=)
3: AsS6Pm-pzCccfpBN7h6vWbKNH-0.roa (hash: QSEqtIt5+vLOlNNT3jvuTFm3bvcUsPaUnJycOPB71zs=)
4: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: inrEKqtu0lbToPKbioYYsh04QYKovy46LnHblyV3g9Y=)
5: tgt22Xbh2dYkc5Tjjf4Gx-Xa2eY.roa (hash: XvxWV+DKU6Gtey3JNABlz2pi2cGrZK+aZ7VTSpuGXSw=)
6: vM268rav9B38xfaLn_yfc-f5loY.roa (hash: L3My8FF3Oma4omxz1SHFdJJ/WgvkO4FPZLAe6cqle1I=)
7: wsHpLkBYw1EeftdDR6sp04VigBw.roa (hash: /kY3oNdD/MtjNpfjYxiTgX3Hn7hLZLYXv3Sx0dMMAnA=)
8: zOqpyrA-mf4nkA9uzKu6WERUh9M.roa (hash: YZ3w9TWP7euxVmL2Kl9d48zmDrmJVrnCAiOTTTRIhhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:41:4f:91:71:ba:c8:76:5b:32:98:34:de:7a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: May 13 12:01:04 2026 GMT
Not After : May 14 12:01:04 2026 GMT
Subject: CN=e2d3987e79ccd5c70439fa7303bed614b4476cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:19:c9:50:74:50:f6:d4:75:6d:88:0d:55:b2:
29:ee:0d:e0:1c:75:79:fe:4d:b3:ec:16:cc:5e:ee:
0e:43:ab:c2:29:06:fd:34:84:91:2b:7d:87:fa:cc:
59:4e:05:da:7e:a6:c3:0d:bd:5d:f7:fe:f6:fc:96:
f4:e6:04:58:18:83:52:d1:20:6d:60:99:15:2a:56:
25:f3:e3:4d:f8:29:07:3b:3b:6b:dd:7b:7f:a2:df:
36:df:c2:5c:f2:9a:50:40:9e:86:91:e2:14:fc:79:
4c:1d:26:26:04:45:04:4c:e0:24:bb:43:8c:8f:bd:
fb:9e:b4:11:8d:14:91:61:e5:c6:05:71:0a:5c:7a:
af:ae:e4:ea:3c:42:3d:0a:ed:97:70:aa:31:6e:9a:
40:59:e6:30:aa:b7:2c:0d:7c:e1:a8:ee:f8:11:47:
58:b4:5b:7d:f7:dd:9b:34:25:a8:13:42:66:21:99:
48:72:2b:27:77:5a:79:26:c7:42:8e:90:7b:2b:69:
3e:ca:a9:05:7d:f6:b5:13:3c:28:51:9e:27:00:63:
4f:3a:ec:72:74:fc:db:af:4d:95:f4:e0:26:73:67:
28:dd:54:b9:62:aa:2f:2a:15:6b:d5:6a:6a:bd:11:
b2:2b:b3:ca:fc:76:db:43:0c:6e:77:10:d0:3e:51:
24:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D3:98:7E:79:CC:D5:C7:04:39:FA:73:03:BE:D6:14:B4:47:6C:B8
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0c:1c:78:02:89:0d:68:49:a4:1c:db:f7:c1:5a:9f:5d:d3:
a9:79:9a:10:ec:6d:98:c2:ea:01:e8:3b:77:6b:19:b4:a7:f0:
ce:da:0c:e5:96:98:16:c6:02:0a:1a:6c:a0:40:72:8a:8f:5b:
1e:f8:d1:a2:4a:92:d3:55:83:42:b6:f9:d6:dc:96:3c:82:74:
4a:27:da:ce:62:51:8a:05:70:dd:d4:5d:3f:82:91:3c:bd:a1:
68:fa:84:70:64:08:9e:0a:1e:c5:15:cb:ff:b7:3b:0b:e2:46:
84:cb:ab:aa:d5:39:7a:61:8c:fd:01:6a:5f:0c:32:f9:59:f0:
a2:a9:ad:7b:c3:7c:9a:86:85:6d:51:52:ce:25:02:81:80:9e:
86:90:2f:77:6e:87:18:16:e8:d4:d6:a3:6d:65:ac:56:ec:ec:
fb:bb:fe:d3:50:f2:49:17:40:b2:ce:bd:f5:3e:1a:97:3f:2d:
61:a4:e7:8f:78:c3:e1:0b:dd:be:df:00:34:61:48:b8:65:df:
de:5f:43:f3:8d:f3:9a:75:cb:bc:9b:e3:76:2e:fb:3c:05:37:
5f:9e:6a:c2:00:f2:1e:be:c8:ee:45:b9:c4:04:be:20:36:cd:
95:c3:bd:c8:49:02:7e:fe:b1:d5:bb:66:24:a3:9b:c0:be:a8:
50:e2:4c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:22:34 2026 by rpki-client