Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier: eLk8HY8v9G9sR7gbTOO7XGW3GmGgV2RI+OQTkez1hJg=
Subject key identifier: 92:02:5D:40:79:AD:FC:05:86:F9:DE:AF:8F:F3:7E:3D:7D:67:6B:53
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial: 019E1E3585E9586C98D5497920C3408FFB64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number: 1897
Signing time: Tue 12 May 2026 22:01:24 +0000
Manifest this update: Tue 12 May 2026 22:01:24 +0000
Manifest next update: Wed 13 May 2026 22:01:24 +0000
Files and hashes: 1: F542RKRQvPrXJffMgDoWUXOCGjM.roa (hash: i0Pd1YsF/0CZkMewWg+RkQERNB+Z6enGZOfMb6J8Sd0=)
2: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: g9tLuzTe2JkIpaPwovY1knPcYNUKQ8m7F0Y8WD+NxZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:85:e9:58:6c:98:d5:49:79:20:c3:40:8f:fb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Validity
Not Before: May 12 22:01:24 2026 GMT
Not After : May 13 22:01:24 2026 GMT
Subject: CN=92025d4079adfc0586f9deaf8ff37e3d7d676b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:26:a2:30:b1:55:ac:f6:b5:cd:c7:97:8e:
cd:06:73:d7:7a:03:5a:e4:a1:83:01:3b:a4:3e:3b:
b3:91:3b:0b:9b:4a:0b:a9:83:0c:07:7c:59:00:53:
92:1e:9c:76:dd:d6:63:a5:a2:86:b4:9a:2f:4d:bb:
1a:bc:77:81:1a:84:47:a6:24:d2:59:4e:4f:a7:b2:
73:6c:1a:90:6a:d2:e1:ba:c7:59:25:69:a6:61:d8:
79:a0:56:c8:a7:e7:73:d6:13:c6:fc:e0:c7:2c:36:
cf:0d:97:d6:01:8a:b2:0e:b4:42:b2:bd:b2:7b:52:
38:27:ee:20:68:51:34:24:b7:ae:a7:75:fe:20:55:
e0:5c:09:47:f8:e4:3b:c0:1f:f2:02:c7:28:a4:23:
b8:a5:a6:23:56:05:d7:25:5c:97:11:41:da:5f:9a:
f3:a2:da:e0:b6:df:b4:5d:38:21:a7:26:52:06:7e:
43:6e:5a:39:42:45:a4:dd:20:6a:62:3e:4f:a9:94:
89:3f:f3:e1:83:9c:dc:dd:9c:e1:2b:8a:92:c6:21:
7d:a6:61:5d:dd:61:04:b0:7a:e1:bf:dd:c6:6c:2c:
f7:6b:2f:36:28:dd:12:d0:56:f4:e7:12:73:bc:5f:
5b:c0:92:62:be:1b:85:df:f5:d1:21:e2:2a:df:b1:
03:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:02:5D:40:79:AD:FC:05:86:F9:DE:AF:8F:F3:7E:3D:7D:67:6B:53
X509v3 Authority Key Identifier:
keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9e:1c:1b:d3:35:c6:55:31:b1:d4:34:0b:85:81:21:42:2e:
fb:13:58:19:93:5d:0e:05:9e:2f:87:6a:6b:a6:f3:fd:34:11:
9f:b0:f0:89:9b:e2:38:64:61:e0:5d:cf:0f:55:31:49:8b:04:
87:39:29:4b:ac:c9:3a:67:d3:b1:ea:0e:97:3a:ee:41:92:68:
12:cb:3b:c7:2d:b0:63:15:aa:5e:d6:4c:2c:8d:51:fe:36:11:
a4:c2:bf:46:24:8b:a5:bc:6e:c5:3c:8d:65:0d:29:4a:ee:fe:
68:9f:5b:44:14:d5:b7:5f:a8:ad:5a:c7:ac:1f:2d:5c:00:71:
57:61:73:4b:c5:93:aa:e8:67:ee:e8:42:95:c5:b1:94:2a:6e:
49:3b:60:6c:39:76:a7:1a:f5:db:97:c4:c4:d0:c5:cb:f0:5e:
c1:1b:77:fc:78:e7:4b:81:5c:76:4a:1e:f5:53:fc:ac:15:e7:
e3:d8:f6:eb:a1:c7:33:b5:8c:73:e2:c7:1b:b6:f6:14:8e:3d:
e2:40:4f:6d:1b:00:f8:45:cd:c6:94:a9:13:bd:b2:be:ae:80:
9e:2d:71:4a:66:e7:58:9c:0b:3d:a5:6e:d7:2f:44:37:e4:79:
55:0e:4b:92:99:67:7c:bc:e3:07:93:15:1b:39:82:be:56:c9:
15:d4:4b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:16 2026 by rpki-client