Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: wpBdrTwmSmEUiHHqbM9dItfi3iO03CbG4BhWg2Bp2A4=
Subject key identifier: A7:46:22:A9:78:37:F3:7B:DA:FC:CE:8E:8E:A8:D0:98:50:52:27:CE
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 01A0D3EFA7ADDEECBEF4302B7808EC5203BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 15:01:33 +0000
Manifest this update: Thu 24 Sep 2026 15:01:33 +0000
Manifest next update: Fri 25 Sep 2026 15:01:33 +0000
Files and hashes: 1: 06CiJdO9HY0Au03AcAurjfb-Gbo.roa (hash: G2id8BLM47E0KAXCQ9t2IpyzxImdIOcWfQNsmcd/Suw=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: pLaYwvj1d26Gh2yOzzVs76u04xZ5WIsoi/qvxE5SBGs=)
3: K2TwYBRgnBctdKuDbIfCz7Wzozo.roa (hash: ELimPcvkoPpYP48krh/bT87ryT9UcmZsjC29243OEEg=)
4: Mva-wY41yQt9Nk6duc_ocpuKYFQ.roa (hash: IlOPnKgUf7QQ4gsxLLInS5A3X12Bcn5JqM322MVFryE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:a7:ad:de:ec:be:f4:30:2b:78:08:ec:52:03:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Sep 24 15:01:33 2026 GMT
Not After : Sep 25 15:01:33 2026 GMT
Subject: CN=a74622a97837f37bdafcce8e8ea8d098505227ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f0:78:8d:7a:d8:56:f1:40:63:36:d6:3d:0d:
91:f8:37:b5:94:46:fc:13:62:96:4a:2c:b2:fd:b5:
19:1d:c4:4b:15:4c:65:33:95:84:f1:d3:f4:61:2b:
fc:e9:0f:4e:a3:91:5c:32:0c:6c:52:a7:f1:f2:59:
c9:0b:7d:99:ac:bd:5c:af:b8:db:48:23:12:69:eb:
0b:a6:fc:d9:95:2a:d9:07:72:b8:d0:82:8f:d2:ad:
b1:81:cc:74:ae:60:40:0d:1a:f7:e0:cd:f1:be:6d:
ef:4b:46:0b:10:01:63:09:b3:7b:80:9b:75:bf:1b:
83:94:eb:c0:40:ed:e5:fd:d9:4e:5d:b9:f6:52:cd:
ce:6d:0f:45:93:f3:56:ff:4c:ec:8d:dd:52:74:99:
ab:ad:72:45:23:2e:20:da:04:c4:d7:ce:ea:d1:bb:
8c:26:4a:39:94:34:6c:6e:29:69:c3:a3:b0:49:d4:
4f:8e:eb:53:1e:44:e4:0c:78:76:81:ba:51:8d:bd:
51:28:5e:6f:0b:7e:d4:a5:8d:3f:50:55:3f:0d:55:
bf:a3:33:a4:65:03:3a:4d:47:fe:3e:d1:3f:d0:43:
90:d3:96:0f:7c:aa:a5:2b:b3:a9:8b:ea:27:57:89:
68:a8:d6:f8:1d:86:8c:39:16:95:9e:52:3a:8f:e6:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:46:22:A9:78:37:F3:7B:DA:FC:CE:8E:8E:A8:D0:98:50:52:27:CE
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9e:6b:f6:b8:95:c2:5d:90:3b:c3:cb:7e:92:4b:11:ca:94:
85:c9:28:bf:68:25:52:5f:87:7d:f7:eb:59:7b:2d:d6:e2:65:
c8:d8:6e:48:53:a1:da:e6:af:5f:66:78:da:63:9d:79:cb:d9:
9a:b1:39:2b:21:8f:0c:d7:f5:ba:67:7e:37:79:01:98:a0:b6:
12:d8:c5:4c:44:13:10:e2:7a:90:ce:97:87:ec:cc:83:5f:4c:
e1:cc:70:15:6b:c5:e2:91:bc:5a:39:11:b7:7b:5e:67:c5:d1:
6b:69:82:ef:c0:fe:55:5e:7e:01:e2:f4:5f:84:e8:2a:2f:1e:
f4:0f:68:f3:a6:b0:4c:a3:42:54:91:21:62:f2:aa:5c:0d:fc:
09:ec:fb:e0:50:ea:42:94:62:91:05:69:d1:8a:49:67:2c:2a:
37:a4:64:f1:4c:68:47:a9:35:50:fd:52:e3:5f:ee:2f:d0:2a:
eb:d1:4e:62:c1:38:23:57:77:67:e1:06:66:3b:30:f4:1c:c1:
c3:a7:ab:f2:da:8b:77:10:e3:f2:58:06:35:cb:db:1e:c6:a3:
c2:8a:5c:89:96:17:1e:6f:5b:52:a2:05:c4:a9:78:c4:25:d6:
16:31:c1:dd:f8:6f:68:8d:a8:94:b1:63:de:c8:10:34:f3:3e:
33:0f:13:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:43:19 2026 by rpki-client