Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
File: jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json)
Hash identifier: CD3XtVLNJCtC0XilwFvOVEWtkQbUdyu/iUGpoBX2Lhs=
Subject key identifier: D6:55:6D:22:6C:EF:F1:44:FF:B1:72:1D:3D:3F:37:D4:02:9C:6B:11
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial: 019E2092187F21D7C25E2F075B0E77EDCE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
Manifest number: 12D4
Signing time: Wed 13 May 2026 09:01:45 +0000
Manifest this update: Wed 13 May 2026 09:01:45 +0000
Manifest next update: Thu 14 May 2026 09:01:45 +0000
Files and hashes: 1: 4xXEgGHm6FNEvzXSZMYA4CB15Xo.roa (hash: kLRMqyoKtLNzDHMHuXXnJpKSX1vsJYZPpStvOsdpbkA=)
2: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: YBAEJhFy8+mMLtyI38gAZNlwdughFEtdfIOtXnBaVDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:18:7f:21:d7:c2:5e:2f:07:5b:0e:77:ed:ce:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Validity
Not Before: May 13 09:01:45 2026 GMT
Not After : May 14 09:01:45 2026 GMT
Subject: CN=d6556d226ceff144ffb1721d3d3f37d4029c6b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:66:d5:25:e4:d1:d4:2e:6a:b0:f2:1f:f9:
4a:c8:26:c9:e2:98:de:20:e7:09:24:10:2f:a6:21:
18:12:8c:3b:4d:be:c6:cf:d0:78:08:43:5b:0c:71:
fd:10:40:a4:bb:b8:54:93:4c:36:d3:5d:02:92:e6:
70:01:48:4f:c5:30:2f:a6:ad:e4:b3:4c:35:f1:d2:
c0:72:07:57:66:8e:00:17:3e:da:c0:db:61:48:37:
fc:1d:47:a7:57:3c:1a:8d:ff:4b:e8:7b:59:f3:f3:
93:b8:b8:7c:b5:6e:ee:e1:b7:33:ef:1b:bb:c9:b3:
43:72:b4:0a:8a:4e:6a:a6:5f:55:b3:22:a3:b3:d7:
15:1b:8e:1a:61:23:51:c3:d5:8e:de:98:65:2a:55:
d3:43:6b:0c:39:a5:4f:04:7e:25:fe:15:65:8e:34:
db:25:a4:18:8e:f7:cd:f4:37:64:67:02:7f:aa:de:
69:14:2a:4d:ab:58:0f:78:24:b8:65:c3:4e:e9:c5:
f6:7e:8c:bd:84:fe:51:48:6d:63:94:15:72:b9:03:
41:27:3e:5c:a0:d6:8b:ab:ba:1c:c9:b9:4d:de:20:
2c:8c:7a:04:ba:9f:a7:1f:9b:13:c7:e1:12:cc:1d:
5b:f3:f8:bf:a8:ac:d9:75:ca:c1:65:29:cc:6d:29:
08:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:55:6D:22:6C:EF:F1:44:FF:B1:72:1D:3D:3F:37:D4:02:9C:6B:11
X509v3 Authority Key Identifier:
keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:da:fd:11:81:b6:41:e9:37:25:d2:6e:25:45:43:46:cc:a2:
67:e2:9a:13:37:3a:6c:aa:d5:07:5c:42:35:2d:2e:82:c1:66:
cd:8a:ef:af:35:8e:5a:2f:0d:8a:68:18:39:91:5e:ed:46:fc:
6c:e2:1e:79:d3:cc:c0:58:19:67:58:04:26:6a:04:bf:5f:a1:
b1:45:f3:68:d5:56:c7:97:07:a1:a0:ad:63:ce:d7:57:0a:14:
0d:0e:f7:e3:53:db:b8:69:24:fc:d6:85:93:db:30:69:7d:1c:
7b:b2:90:fa:8d:2c:4b:9c:89:89:71:4c:2b:47:c4:07:d8:89:
2f:0b:41:24:4f:9e:ad:01:f3:f3:c2:20:e2:af:8e:c7:e4:e7:
40:10:e5:f2:46:dc:ab:94:e2:fd:cc:20:fe:9b:64:f5:4f:74:
16:b9:b2:4a:5c:25:b8:96:11:54:2e:6c:67:ea:52:d1:d5:78:
9e:5b:f7:7f:df:06:85:a2:55:df:3c:d3:48:55:e3:d6:6f:a1:
9c:6f:03:92:cd:96:79:e2:7a:70:df:07:a8:e0:44:d5:4d:19:
01:bc:cf:a1:cf:87:46:c1:70:fa:b2:df:d8:d0:9e:7c:15:c3:
84:37:2e:d8:95:3b:58:50:96:ea:bc:14:94:d6:1f:6d:c7:a2:
6d:8e:c9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:12:08 2026 by rpki-client