Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: rXYQY6mIRBVmLStHHfXTzM8MO+03TgkmBTEcCn0F6p0=
Subject key identifier: AE:3C:11:A9:3D:AC:4B:0E:61:CA:64:14:D9:D1:1A:8F:FA:6E:A0:B4
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 01A0D2009837160701EDC1378630A01D3FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 06:00:49 +0000
Manifest this update: Thu 24 Sep 2026 06:00:49 +0000
Manifest next update: Fri 25 Sep 2026 06:00:49 +0000
Files and hashes: 1: 06CiJdO9HY0Au03AcAurjfb-Gbo.roa (hash: G2id8BLM47E0KAXCQ9t2IpyzxImdIOcWfQNsmcd/Suw=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: 9t7TyRjPa0gZ+n34g7XLJT11V0U70Wd0ZF74f+pI7UU=)
3: K2TwYBRgnBctdKuDbIfCz7Wzozo.roa (hash: ELimPcvkoPpYP48krh/bT87ryT9UcmZsjC29243OEEg=)
4: Mva-wY41yQt9Nk6duc_ocpuKYFQ.roa (hash: IlOPnKgUf7QQ4gsxLLInS5A3X12Bcn5JqM322MVFryE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:98:37:16:07:01:ed:c1:37:86:30:a0:1d:3f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Sep 24 06:00:49 2026 GMT
Not After : Sep 25 06:00:49 2026 GMT
Subject: CN=ae3c11a93dac4b0e61ca6414d9d11a8ffa6ea0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d8:0c:d8:2b:64:bf:78:00:a0:be:9f:85:f4:
cd:63:d8:1d:d3:a1:e2:f7:a9:85:75:a2:b4:39:13:
18:28:76:1a:c5:86:69:dd:4f:bd:85:b5:8d:b3:bd:
f2:73:bd:56:62:31:79:b5:d5:6a:bb:eb:26:c6:0e:
19:23:f6:c5:27:1c:f6:cb:42:1d:2b:20:02:e9:bd:
56:8d:7c:1f:87:85:3a:6f:0e:96:82:a1:0a:d3:9d:
46:2a:8a:a2:0d:d3:7e:21:19:4c:7b:4f:d1:69:f6:
fe:24:c1:98:91:b8:75:b6:1f:bb:b9:9e:ae:c9:90:
9c:d5:28:70:4e:16:1c:c9:05:31:59:23:17:93:6d:
ac:86:54:30:68:0b:24:6f:8b:68:c7:4c:dc:4b:20:
83:ea:b4:8f:62:87:14:34:74:05:45:dd:47:37:73:
3f:be:7f:fd:91:24:86:5a:a1:b5:e7:a1:f8:6a:51:
4c:eb:04:c1:b2:30:20:aa:c3:f5:57:d6:3f:f4:d7:
1d:45:79:45:16:6f:ed:d1:92:f8:e3:8a:19:62:f4:
f9:06:1d:ad:ef:a3:f8:eb:e2:e2:87:8d:f0:6c:90:
06:cc:98:cf:0e:85:df:5f:27:5e:22:99:25:d3:30:
5a:b1:9c:be:3e:b2:20:79:cd:d7:36:c2:ff:cc:39:
b1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3C:11:A9:3D:AC:4B:0E:61:CA:64:14:D9:D1:1A:8F:FA:6E:A0:B4
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:62:f9:cf:ce:67:29:96:d5:41:57:ba:09:13:00:50:c1:2d:
c0:2b:86:94:02:2a:74:f8:18:39:ff:6b:48:eb:77:3d:0d:91:
9a:2f:a7:05:cb:44:c2:f9:20:4c:a7:7a:ee:57:b9:26:2b:47:
2d:e0:f9:b7:ff:aa:39:c5:13:07:86:20:0d:59:83:56:0c:a4:
68:14:41:d5:5f:f4:85:f8:68:48:5f:b8:9f:35:07:01:a2:01:
c9:d6:69:d6:24:83:53:51:d2:38:73:cf:40:95:44:e1:25:8a:
5f:4f:d5:6f:ab:e1:b4:46:f3:d3:55:a5:0e:df:f3:ef:27:71:
47:7d:84:b8:f7:ea:d8:67:6f:ae:27:6d:72:9d:fe:db:98:4f:
cd:52:82:32:d6:e4:2c:eb:23:bc:34:f7:20:d3:12:22:22:1b:
ae:b3:b9:06:32:1c:f7:86:bc:c8:3b:22:a2:06:70:e6:6d:dc:
f8:3c:0f:a2:ae:6c:a2:1d:b8:aa:52:53:c1:ff:e3:44:69:c1:
eb:c1:7e:46:70:30:e8:1b:51:41:a1:fe:f1:03:bb:20:a1:63:
44:bd:e5:c6:07:8c:fe:d1:64:0c:5f:3e:28:de:b8:17:a4:8a:
06:4f:7d:30:8b:3c:22:65:56:c6:98:ca:dc:11:7b:7c:b3:3c:
2f:a3:25:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:43:27 2026 by rpki-client