Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
File: jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json)
Hash identifier: IAxofPMehMzt8QmZ3VAWOpnfTFrAWe0KN8MwRt4OKzA=
Subject key identifier: 40:7C:AA:C5:0A:37:54:0E:B2:C4:B7:E9:15:BE:33:AB:BC:65:1A:0E
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial: 01A1043756EF6224FDA663730B6F74E687D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
Manifest number: 1453
Signing time: Sun 04 Oct 2026 00:01:37 +0000
Manifest this update: Sun 04 Oct 2026 00:01:37 +0000
Manifest next update: Mon 05 Oct 2026 00:01:37 +0000
Files and hashes: 1: 4xXEgGHm6FNEvzXSZMYA4CB15Xo.roa (hash: kLRMqyoKtLNzDHMHuXXnJpKSX1vsJYZPpStvOsdpbkA=)
2: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: ouVvGQXftF4UGWen8mGaWCtO5QGtXcw2M2C/mDOM5yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:37:56:ef:62:24:fd:a6:63:73:0b:6f:74:e6:87:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Validity
Not Before: Oct 4 00:01:37 2026 GMT
Not After : Oct 5 00:01:37 2026 GMT
Subject: CN=407caac50a37540eb2c4b7e915be33abbc651a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:da:f4:d9:4f:a6:07:5f:ad:9e:aa:8c:1c:
45:89:33:76:96:ba:d9:86:d4:72:4a:5e:a8:f4:2b:
58:e1:99:bf:95:ea:76:16:8a:56:54:05:f0:3a:47:
99:05:72:79:42:8e:bb:6e:cf:ba:b6:57:73:31:bd:
97:b5:c9:bd:e7:b5:b6:7c:fb:c7:78:30:5e:6e:60:
32:ca:85:f4:47:9f:bf:2f:1b:2c:56:d9:15:1f:f5:
2b:50:ba:de:d2:a6:a7:a6:16:76:34:3e:c2:af:2e:
c3:02:08:ee:d6:ca:b8:cf:77:0e:cc:e2:85:5d:34:
ea:2b:2d:e3:c3:42:39:bb:9c:d3:e2:75:d3:b3:fe:
73:3d:a7:b3:c6:9c:1d:a9:20:1e:11:99:01:48:32:
c8:d2:2a:47:b0:12:34:30:34:a5:d0:7f:d3:94:68:
4a:8a:5e:81:6f:f5:0e:a9:8e:71:58:ef:f2:e5:a8:
36:13:38:49:45:a9:2f:8f:b4:63:c3:fb:c5:93:ca:
55:1e:bd:a7:00:ea:ed:6e:03:e9:b9:50:7f:30:85:
5c:f9:79:ca:c6:4f:a4:60:02:e7:3c:2e:3e:be:89:
7f:f0:ba:b5:b4:30:28:59:15:43:75:c6:37:bc:fe:
87:42:ab:da:d2:3d:9e:63:29:e6:23:13:f1:30:fa:
6b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7C:AA:C5:0A:37:54:0E:B2:C4:B7:E9:15:BE:33:AB:BC:65:1A:0E
X509v3 Authority Key Identifier:
keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1c:10:48:11:66:03:50:54:82:c0:11:cf:d6:17:4b:0d:9f:
79:05:63:69:b3:ac:e3:ff:a6:16:f0:de:17:21:97:bd:66:21:
ec:4c:e8:ab:d2:81:80:b2:44:83:9c:e8:2d:ba:0a:c6:49:fb:
50:4d:d6:3e:c1:51:a6:00:14:5b:71:55:f6:df:fb:f7:2a:53:
b5:e1:bd:30:d0:d3:43:31:6f:8a:b0:83:dc:1f:c7:5d:9e:bd:
0f:a0:41:9a:38:2d:3a:7c:fb:6f:35:a4:3e:32:23:79:56:b6:
fc:28:e0:f2:77:af:b2:ec:9c:aa:66:0c:c3:6f:0e:36:4d:28:
4e:fe:c8:0f:3b:52:b2:f2:d4:c5:0e:44:61:c4:f4:47:3f:18:
e7:8d:90:f7:9b:50:5b:e1:17:ac:72:a8:cc:bd:9a:cb:b2:94:
35:7d:db:d9:af:06:a3:d5:12:98:99:ec:77:ef:3c:49:f9:e4:
7c:ba:dc:14:af:6a:10:c3:e8:fe:d1:74:95:5f:60:fb:56:5a:
67:74:ef:22:da:4c:ed:c9:44:cf:65:cf:7a:eb:51:e4:9e:ee:
24:98:9b:2a:39:4e:7b:f9:4d:d2:da:39:80:5d:d8:c8:af:af:
74:2a:62:2f:c6:e0:97:bd:d9:08:13:a1:52:c4:71:d0:8f:74:
89:03:47:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:34:50 2026 by rpki-client