Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
File: 1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft (raw, json)
Hash identifier: O20BedeAeB4f90RiBTdzwcklnZ+NLpJ8ukBSiBaXq5k=
Subject key identifier: A5:9F:6C:1F:75:4C:25:52:C4:29:77:94:D4:AA:B8:57:3C:DD:7D:21
Authority key identifier: F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2
Certificate issuer: /CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2
Certificate serial: 019E1C7DE35E53BD2E85EB153A91B565C3BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
Manifest number: 020C
Signing time: Tue 12 May 2026 14:01:12 +0000
Manifest this update: Tue 12 May 2026 14:01:12 +0000
Manifest next update: Wed 13 May 2026 14:01:12 +0000
Files and hashes: 1: 1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl (hash: xnM4gcn8mQB++UY96GnIbTuZqldKsmZNgnaretz8yKM=)
2: QzF6zdAmWlqa8MJWx9j94DfMPOM.roa (hash: GR81IrpEx4ZIKShy/solAKxjvbcjUDvmJG95WKquc+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:e3:5e:53:bd:2e:85:eb:15:3a:91:b5:65:c3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2
Validity
Not Before: May 12 14:01:12 2026 GMT
Not After : May 13 14:01:12 2026 GMT
Subject: CN=a59f6c1f754c2552c4297794d4aab8573cdd7d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:a3:ba:27:a0:75:4c:6a:f7:63:59:e5:c5:
15:58:8c:c4:f2:5f:bc:76:7e:fa:1b:55:42:6c:57:
d0:9f:b9:6d:f8:32:d9:91:e1:86:31:0a:8b:48:bc:
49:14:e2:87:be:c5:34:c9:e4:07:d1:76:81:fc:d6:
9d:01:3d:45:20:32:ff:20:73:ae:46:28:5f:0b:83:
12:79:88:e7:6e:b0:23:e8:9c:84:4f:79:5d:9a:3e:
d4:97:ce:20:b8:23:7c:74:ce:f8:0f:f9:a8:74:a6:
33:1f:62:7a:62:cc:31:90:fa:52:a4:b7:2c:89:ad:
11:07:21:37:85:99:06:da:dc:71:0c:05:2f:65:81:
e0:e7:85:75:8c:33:ed:4a:be:46:47:6e:d7:41:65:
93:9d:0c:ea:32:07:74:b8:7c:1b:2e:9d:4a:e7:83:
ce:03:b7:84:ec:96:1a:c6:24:25:c7:69:32:4b:c3:
e2:16:67:35:97:69:b0:d2:86:ff:db:36:d5:0e:4f:
51:ee:f0:58:8b:90:d5:86:b8:c1:0b:13:44:2d:ed:
dc:1c:1c:b1:1a:51:16:f3:e3:5c:3d:80:c5:2d:66:
d4:8a:2b:94:43:7a:b0:30:9d:34:cd:bb:29:a4:89:
02:ba:7a:06:37:e7:44:71:0c:e6:17:58:64:cc:31:
bd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9F:6C:1F:75:4C:25:52:C4:29:77:94:D4:AA:B8:57:3C:DD:7D:21
X509v3 Authority Key Identifier:
keyid:F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1a:ba:58:2c:0c:95:70:79:07:0f:9a:f5:b4:a2:05:f9:d4:
93:72:b5:41:e0:73:7c:c2:92:0e:38:d6:a0:35:e4:c4:cf:99:
be:e1:58:4f:b5:4c:9d:77:52:65:aa:86:be:ab:ea:95:03:23:
22:d9:79:79:4e:69:77:42:c3:d1:05:72:a1:1f:93:b1:b0:ff:
22:e9:d4:23:b1:ec:c6:ca:ce:a7:4e:9c:72:54:5f:59:b8:15:
f2:34:58:97:b4:dd:8f:d2:d4:d6:06:fe:a8:5b:96:0e:29:3b:
21:29:6e:38:d7:f5:1e:e0:44:e8:22:61:2c:3e:62:19:e3:04:
d5:89:5e:ab:74:4c:eb:80:e6:33:90:13:91:dc:7e:21:b3:51:
cf:e3:c2:90:1e:d9:ed:98:30:d3:66:cf:db:4d:05:e7:c4:83:
fd:ad:5a:20:4d:69:97:3c:14:51:3a:81:e5:09:a0:46:68:6b:
56:e0:b4:f8:e6:ac:1e:6f:49:e7:74:66:18:2b:6c:34:cc:c8:
2d:d0:28:97:7d:5f:5f:39:5d:8e:41:82:a1:65:27:f0:75:d0:
ac:d0:36:9c:b7:71:e1:20:6f:1d:c4:bb:a1:0e:7f:fc:42:56:
67:e0:44:35:46:fd:bb:97:1f:bc:72:46:86:4d:d2:3a:fa:88:
50:18:4d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:48 2026 by rpki-client