Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
File: jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft (raw, json)
Hash identifier: kcMNIwJkweO9I8doGdQSwIpa2zGFzipWVgU3/WHbVO8=
Subject key identifier: 7B:6D:41:0C:EC:EC:12:60:1E:F8:3F:1A:C4:13:11:4D:25:DF:C5:B6
Authority key identifier: 8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
Certificate issuer: /CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Certificate serial: 01A1E027B46607B8B6F227D0BE16CB2EB559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
Manifest number: 0AA3
Signing time: Sun 15 Nov 2026 17:01:00 +0000
Manifest this update: Sun 15 Nov 2026 17:01:00 +0000
Manifest next update: Mon 16 Nov 2026 17:01:00 +0000
Files and hashes: 1: hw6HTYLmpBRO48WkK3KzMTuSQwU.roa (hash: vYOOjZYksNJ667j7SpreJQGXXsK8kLponRnidBeDvsE=)
2: jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl (hash: d62+kiBCaDz4wTyyWfJqABKvffRLsVV8uDt1Fletwoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:27:b4:66:07:b8:b6:f2:27:d0:be:16:cb:2e:b5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Validity
Not Before: Nov 15 17:01:00 2026 GMT
Not After : Nov 16 17:01:00 2026 GMT
Subject: CN=7b6d410cecec12601ef83f1ac413114d25dfc5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:31:40:a2:43:f4:f1:c6:42:4e:29:ad:d6:82:
ba:1a:98:f1:81:dd:df:a6:c6:65:00:dc:4b:c8:82:
fa:61:68:d0:1f:c7:b6:59:17:ab:b0:d6:3d:7a:90:
1a:fd:fc:61:cd:b9:df:b0:21:db:20:f0:34:81:ad:
a6:1e:25:a4:33:15:c4:b2:89:43:b5:38:a8:06:48:
ea:7c:de:1d:ce:e4:92:f0:36:34:d2:1b:43:2c:d5:
1d:10:b2:f6:e1:9a:4d:e1:73:c1:e4:3c:91:7b:ec:
68:88:05:b8:ca:f8:a2:82:c3:e2:31:8a:a8:8f:f8:
d0:0a:e6:27:35:5a:02:cf:cb:c5:8a:ec:c1:e3:2b:
1a:41:c1:12:98:1e:76:25:da:26:32:2a:53:5e:a8:
2e:b0:1a:49:51:7d:c3:44:d2:af:1a:bc:77:47:d4:
36:89:0b:8c:df:42:c0:e0:e4:51:e8:39:49:2c:16:
f5:48:b7:a5:3c:08:b1:41:56:80:92:d2:1e:57:af:
9b:f9:e5:e7:48:71:05:92:d1:36:a6:ae:1a:ac:a6:
66:d9:bb:ae:dc:30:f0:06:57:03:11:c8:f2:19:86:
ac:ac:69:4b:f7:67:32:a0:d7:7a:ad:f0:b3:22:6b:
2d:21:5a:d9:60:87:87:72:3a:36:b8:c6:eb:46:7b:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6D:41:0C:EC:EC:12:60:1E:F8:3F:1A:C4:13:11:4D:25:DF:C5:B6
X509v3 Authority Key Identifier:
keyid:8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c4:0d:68:6f:5a:76:4e:1c:a0:8b:7e:09:22:81:d4:f3:73:
a6:15:8b:47:8e:d9:14:19:39:1e:b4:07:53:88:7d:9d:80:3e:
b9:0f:e3:2f:a9:f1:06:74:0d:3b:65:ab:f8:04:f6:23:7f:1b:
38:dc:88:8d:fc:60:83:58:f9:a5:cf:e1:31:f2:ea:06:c9:11:
6b:d7:5b:4f:08:1c:ce:00:b4:c5:6b:93:ee:a2:4c:0c:14:3c:
dc:54:c7:0a:7b:df:07:c4:22:87:77:51:74:a8:1a:f6:da:de:
2e:c2:7b:29:07:56:ce:65:b9:42:88:45:cd:1c:2a:12:a8:c1:
d4:a5:13:3a:de:04:b9:64:4c:9a:8a:00:d1:60:71:65:f8:3c:
7b:ed:d4:41:95:1c:18:96:0a:e3:3d:8b:e1:fd:66:67:2d:da:
36:d1:09:67:3f:e2:dc:1c:e0:80:5f:22:ff:96:2e:dd:bd:41:
d8:b0:2e:6c:3b:67:1e:94:fc:d9:38:39:86:4a:74:25:82:4e:
e1:f8:06:2d:3c:19:46:6c:54:79:d0:55:eb:c7:6c:0f:ca:b1:
5f:91:c4:86:49:03:d0:f4:96:73:14:1c:03:66:3a:18:2f:00:
df:68:79:d6:d0:20:6a:a2:3d:2f:71:1a:79:89:0a:a4:b7:92:
e8:11:bd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:14:20 2026 by rpki-client