Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
File: jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json)
Hash identifier: VqKGKHlSuKYufOaiOzbX6hbYj+DtbykjzVRxG+iIlKA=
Subject key identifier: D0:02:71:94:B3:1C:B1:A7:5E:01:F5:47:CC:CE:93:71:D7:AF:85:95
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 019E2023827D68516C8DE30F968798C1A4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
Manifest number: 0561
Signing time: Wed 13 May 2026 07:00:58 +0000
Manifest this update: Wed 13 May 2026 07:00:58 +0000
Manifest next update: Thu 14 May 2026 07:00:58 +0000
Files and hashes: 1: 05QIvJOOAUXqj808lKMxTvcjpgI.roa (hash: gKKvCOzRFiKxk9/Kqr5y87Hf373wvPBTO7rH55xDzoM=)
2: M3bGaMmzldtwIJFmKvbRE4l-_SE.roa (hash: 57TSjLTIljKW30xR2fMZ7JjWCTKCXVEEUqD5yH8z/Do=)
3: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: TpFB2QcLhj4o79ORF6owhAvknTrZNd62XIapEqu2reM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:82:7d:68:51:6c:8d:e3:0f:96:87:98:c1:a4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: May 13 07:00:58 2026 GMT
Not After : May 14 07:00:58 2026 GMT
Subject: CN=d0027194b31cb1a75e01f547ccce9371d7af8595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:90:b8:09:aa:8b:08:ca:5b:91:64:6f:3d:f7:
04:85:49:9d:ec:7f:1e:9b:ab:09:b8:55:78:cf:93:
a6:85:ef:8a:2d:25:f1:7a:2e:9a:92:13:d9:24:a6:
c6:78:c8:b1:05:ae:37:40:20:10:e8:41:27:20:b7:
06:d8:e3:72:a6:74:8b:4a:38:cc:ec:86:c2:ac:65:
a7:1a:f5:fa:52:ab:c5:a7:3a:ce:ff:65:1a:fb:ac:
3d:e4:85:74:09:30:ce:34:bc:77:df:d6:be:7a:2c:
6b:23:36:bc:c4:04:19:30:c1:71:05:39:52:ae:6e:
15:64:c0:7e:ef:46:4e:db:c9:16:26:e3:1d:04:35:
cb:44:58:73:8f:2c:14:63:65:84:fa:34:d7:86:79:
dd:b1:22:98:17:d8:bf:91:d2:77:4e:b5:4e:d8:a8:
60:ec:e0:96:cb:74:df:b8:b5:2f:94:64:a1:d7:e4:
6d:2a:c7:09:46:dd:b9:53:c9:25:8d:72:5c:97:cd:
f0:e8:ee:8a:7c:b0:2b:c4:8f:16:3d:98:00:b6:2e:
cf:96:6d:db:64:1f:30:f5:f4:44:e1:e9:7f:e6:f7:
15:be:e7:a0:dd:5c:14:c3:e8:b8:ac:6a:0b:ba:5b:
13:8b:c3:7b:0a:a6:b0:e4:16:d9:71:bb:a8:bb:01:
be:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:02:71:94:B3:1C:B1:A7:5E:01:F5:47:CC:CE:93:71:D7:AF:85:95
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:61:1c:04:b8:bd:20:32:ea:10:50:8d:b0:80:95:99:43:c4:
a1:a7:95:40:6c:b7:c0:57:bf:2e:dc:e7:5b:cd:3f:5e:3f:cb:
34:ed:c0:d2:6e:39:49:75:b7:47:84:b7:83:fc:04:40:ad:a3:
c9:df:63:26:e9:c0:52:77:57:96:09:6e:71:db:54:0c:19:00:
0a:df:b3:da:78:13:45:5b:41:db:72:ca:ce:be:9d:39:88:40:
a1:af:61:e9:eb:a7:f1:7d:d2:e6:21:fc:69:7b:ca:54:c6:dd:
f9:58:de:33:69:4a:fd:1b:c5:f5:de:c7:57:e9:43:04:6e:d0:
96:8c:57:ed:7d:e7:2d:1b:1d:3b:23:81:5d:84:1a:ff:ed:d7:
d6:ce:65:40:99:ed:3c:88:db:19:2f:85:c4:d5:17:e8:c2:52:
df:db:78:b9:b7:09:d0:f6:d3:a1:9f:10:cf:c3:4e:4f:43:bc:
d0:05:eb:58:44:56:ed:5d:bf:0b:b3:18:ab:ac:b5:64:10:b7:
a6:91:a7:1b:d8:80:10:89:85:31:99:9a:b3:3a:71:61:dc:a5:
6b:20:94:b4:7f:8b:11:fe:3e:ec:7c:92:ef:12:78:00:e6:c4:
fe:21:bb:cb:e1:c9:40:42:71:c0:b4:33:f2:02:d9:e0:59:5e:
12:af:38:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:38:58 2026 by rpki-client