Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: A9VCcZgRAd+hvBzvqh319BBJo5i8bZQqDH5wmkUqjdU=
Subject key identifier: CB:61:BE:27:8F:AD:9B:8F:03:D1:41:50:3D:84:57:F0:6D:DB:14:95
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 019D2816738CCC1E7E75462ED08477FE39EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:00:53 +0000
Manifest this update: Thu 26 Mar 2026 03:00:53 +0000
Manifest next update: Fri 27 Mar 2026 03:00:53 +0000
Files and hashes: 1: 06CiJdO9HY0Au03AcAurjfb-Gbo.roa (hash: G2id8BLM47E0KAXCQ9t2IpyzxImdIOcWfQNsmcd/Suw=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: m9zqHYfDOAO3Dr2N1rcpqJLT9gY7S9a2bESjivNEf+M=)
3: K2TwYBRgnBctdKuDbIfCz7Wzozo.roa (hash: ELimPcvkoPpYP48krh/bT87ryT9UcmZsjC29243OEEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:73:8c:cc:1e:7e:75:46:2e:d0:84:77:fe:39:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Mar 26 03:00:53 2026 GMT
Not After : Mar 27 03:00:53 2026 GMT
Subject: CN=cb61be278fad9b8f03d141503d8457f06ddb1495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:2d:a8:53:f5:c8:fc:c8:c9:45:2b:9a:95:
66:76:01:fd:f2:49:d8:4a:b8:d2:44:9d:8d:d7:56:
a6:7a:d1:51:99:dc:57:7f:98:c5:5b:3b:e5:af:d5:
44:a9:0e:a1:fe:95:66:1f:d4:3b:99:85:8f:7e:73:
eb:d8:c2:98:67:1d:a1:1a:9c:cc:4f:ff:a1:d7:e4:
c8:98:4f:b2:30:32:b8:b3:cb:ef:b4:2b:fd:77:09:
f0:32:fd:24:37:98:1e:86:fd:cd:3a:af:ad:7e:98:
1e:46:7e:1a:a8:5f:ac:d8:68:ff:a0:64:52:fd:fe:
be:a6:0a:53:d1:a9:3f:a0:c1:f2:86:61:4e:36:22:
48:75:54:b3:4e:c9:ef:af:47:ee:b4:49:45:da:14:
ee:f9:fe:a3:f8:02:df:bc:ca:b9:80:df:7f:c0:8d:
72:70:5e:36:1e:88:b6:54:3c:35:38:81:ae:bc:9e:
39:c1:92:5d:68:f0:3e:cc:03:6e:24:b8:98:07:79:
fa:01:f5:7f:9b:6c:53:9a:9c:7b:90:2a:d5:21:e2:
09:54:3a:84:f5:74:36:85:47:f6:3f:fd:38:c8:e1:
30:c2:ad:13:7e:64:3e:f7:51:f6:f9:d4:4a:cd:f0:
22:70:b1:54:7a:9f:ae:df:9d:1f:52:41:4d:0c:cf:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:61:BE:27:8F:AD:9B:8F:03:D1:41:50:3D:84:57:F0:6D:DB:14:95
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b4:73:12:97:26:12:8f:ba:ac:89:71:52:52:32:1d:b2:f6:
d4:e2:09:78:26:84:db:98:2a:98:6a:06:92:87:bd:6c:f4:37:
82:6d:35:03:52:14:0a:46:48:87:48:c7:c3:5e:04:c9:e7:7d:
5e:da:de:c9:38:06:6d:8b:27:7d:d0:74:73:8a:2b:61:a4:4a:
f9:4a:8b:86:86:43:8f:43:3c:83:07:46:2e:9e:aa:77:7d:55:
4f:be:27:33:20:03:6f:d5:55:a7:d0:2a:8d:e3:25:b8:2b:19:
a8:a8:2f:05:24:74:f6:1b:3c:52:0b:60:14:0b:34:f8:e1:d8:
5e:ec:a8:59:da:63:b5:8a:74:78:22:a4:62:a6:f4:40:c7:a0:
c3:68:2c:1b:fe:28:26:37:31:b0:f5:90:a4:92:cd:67:aa:1a:
ff:76:a8:b2:e1:9d:c5:9e:28:da:88:89:cf:25:fa:6c:4b:9a:
5d:58:7e:7d:48:1f:8c:21:5a:2e:79:49:26:31:32:67:b1:5f:
81:46:35:27:6b:57:3c:83:ef:24:da:8b:ff:15:d7:89:bf:d6:
ec:09:eb:8f:b5:aa:22:c6:1a:27:b3:2b:2a:ec:ce:7a:32:75:
d5:7f:25:a0:05:fa:f4:67:bb:ea:6a:7f:bd:bb:b9:ea:46:f9:
f9:41:4b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:42 2026 by rpki-client