Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: QOh4ZdJNV62AjlUByD3YbqeRJ5o/Dk1+RkfvlbakZQg=
Subject key identifier: 8D:97:A6:9E:4A:27:6D:F5:B8:5B:91:93:17:F4:C4:22:24:BB:0A:BA
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 019E1F4846C2EEA49F938AC7C417F075FB21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 03:01:30 +0000
Manifest this update: Wed 13 May 2026 03:01:30 +0000
Manifest next update: Thu 14 May 2026 03:01:30 +0000
Files and hashes: 1: 06CiJdO9HY0Au03AcAurjfb-Gbo.roa (hash: G2id8BLM47E0KAXCQ9t2IpyzxImdIOcWfQNsmcd/Suw=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: LKsolkmlhV7b0Loh1OK1A9ymOV0kKCjz3IsHpbHLe90=)
3: K2TwYBRgnBctdKuDbIfCz7Wzozo.roa (hash: ELimPcvkoPpYP48krh/bT87ryT9UcmZsjC29243OEEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:46:c2:ee:a4:9f:93:8a:c7:c4:17:f0:75:fb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: May 13 03:01:30 2026 GMT
Not After : May 14 03:01:30 2026 GMT
Subject: CN=8d97a69e4a276df5b85b919317f4c42224bb0aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:75:59:ec:01:ba:a1:be:2b:19:be:44:c1:
39:41:df:d1:59:98:d5:61:09:6c:04:cd:a2:f8:cb:
54:0d:97:c5:d3:89:fb:84:37:bb:95:be:97:39:15:
31:63:a1:cc:85:88:6c:4f:61:39:44:80:c3:0c:a2:
1c:39:5e:24:4a:58:02:1d:c5:7c:1e:8a:66:a4:a2:
b4:5f:eb:a6:8b:20:d4:2e:a2:b3:81:9e:4d:c7:ea:
b5:dc:87:72:a8:c4:7b:a8:04:a4:cd:c6:a3:1e:96:
07:83:71:91:e3:b2:b1:b0:2e:a4:bc:7a:ea:ce:f0:
c7:82:e8:41:6d:71:57:bf:d8:a4:1f:ba:64:4c:7e:
92:1c:45:55:98:54:07:07:e2:78:f7:e5:5d:50:19:
19:85:dc:a4:44:f2:74:fe:27:b4:aa:ec:9b:04:8b:
46:8c:ba:a5:8b:37:71:ac:24:66:1e:dc:fa:9a:bc:
f2:8b:ba:df:d6:1e:39:92:4c:65:a7:48:af:1c:83:
05:a2:d8:ac:29:8e:e8:a7:93:70:b8:ef:c8:38:08:
2d:d1:ba:92:b4:e5:f4:ee:ff:56:a5:19:b8:cc:12:
f7:f9:49:60:20:d3:a6:af:fb:39:6a:30:44:2a:c1:
53:1a:c1:c6:de:b0:7c:84:8d:87:ff:85:25:ba:3e:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:97:A6:9E:4A:27:6D:F5:B8:5B:91:93:17:F4:C4:22:24:BB:0A:BA
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:90:5f:c6:6e:25:27:91:fc:e1:e0:76:ae:ae:b1:55:54:52:
34:8a:89:82:80:29:05:5b:32:2f:e2:1e:4e:9b:72:88:8d:16:
df:6d:c0:9c:7a:d4:bf:21:62:dc:10:d9:f8:9c:f6:ad:ac:2b:
c5:5f:f8:62:3e:65:7b:70:a9:98:eb:e1:2d:b2:ee:48:a9:6a:
bf:66:b1:07:77:3d:e7:8c:12:30:7a:5e:1f:75:3c:81:8b:5d:
61:5f:70:6e:a7:76:ca:8d:4e:f9:d4:74:4c:4e:3b:82:e5:ee:
48:13:c7:29:bc:eb:23:71:4b:03:e3:66:84:e8:0a:fc:cd:96:
19:1c:e3:19:e8:a4:6f:36:f7:98:a2:70:cf:a6:e9:b0:7e:03:
d7:f3:64:db:58:8e:1c:29:16:47:c9:b9:06:8d:8f:84:b7:4d:
a5:91:2a:85:cb:74:1e:fb:50:66:5c:33:30:7e:ae:ea:1e:bf:
b5:b1:df:18:12:5f:e7:df:7d:fa:b9:63:00:52:e7:36:7b:58:
33:c7:3b:0e:07:38:63:ea:73:68:16:56:8e:63:94:81:51:9e:
fc:fc:a3:25:da:a1:d8:66:08:46:21:9b:83:01:88:39:e4:6d:
55:21:c7:7a:95:1e:98:30:bc:bf:29:8d:50:87:42:4d:ed:e8:
34:b6:36:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:05 2026 by rpki-client