Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json)
Hash identifier: +lUoOLVy69XSTPXEqjOZwKIU1gYvwdJ+Pxf1bkzdyLk=
Subject key identifier: 66:14:F7:56:09:3A:FD:E7:55:B2:99:58:D6:70:6D:30:AA:3B:43:3D
Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7
Certificate serial: 019E1FED1C8868D37F63D85751B5A3F1030C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
Manifest number: 189A
Signing time: Wed 13 May 2026 06:01:33 +0000
Manifest this update: Wed 13 May 2026 06:01:33 +0000
Manifest next update: Thu 14 May 2026 06:01:33 +0000
Files and hashes: 1: jn9K_pC0GX4USuWZkNDQAr2-7bI.roa (hash: aZdHO+TkGWUBAKzieBcFCMZv2bHsKGiPJwYHudRBqcI=)
2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: g6AQjM7ES2uKoBi3yhsHJtHGcyIA6R54OKWw11yCNFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ed:1c:88:68:d3:7f:63:d8:57:51:b5:a3:f1:03:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7
Validity
Not Before: May 13 06:01:33 2026 GMT
Not After : May 14 06:01:33 2026 GMT
Subject: CN=6614f756093afde755b29958d6706d30aa3b433d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:0c:5a:86:d8:67:2d:85:cd:8d:6d:2a:7e:
a8:ed:40:c2:d7:88:37:52:b2:f2:d9:44:ca:fa:85:
2e:21:c1:e3:fa:91:15:f8:f8:22:c7:a5:b0:c3:02:
4b:02:9f:7c:ff:5a:f7:d6:f9:28:b3:40:f6:3c:6f:
20:48:5c:c9:56:5b:74:b9:dd:31:47:a3:d0:6a:95:
83:f4:ea:75:4b:6c:95:ba:96:fa:eb:b2:1b:ec:1e:
fb:1a:53:28:58:0a:07:6c:3e:45:a4:df:74:db:71:
fe:4d:25:47:50:7a:5f:04:4b:51:63:28:91:77:4d:
a3:c5:08:5c:50:83:c2:7c:4d:65:23:e4:85:d3:46:
4b:16:25:b5:f1:a6:78:39:46:c3:f7:f3:66:e2:c6:
b2:37:b4:9f:3c:ed:54:d3:38:c2:5c:61:df:a1:47:
6b:59:49:b6:68:7e:5b:94:2b:6e:32:3b:05:d8:a7:
58:e9:b1:7e:9e:b8:0f:22:6d:b1:27:7a:9f:38:1b:
79:eb:00:c6:3c:0a:85:2b:66:b8:48:d6:6b:70:19:
4d:8e:b4:8c:2f:49:25:10:21:ef:b9:2d:20:91:4d:
54:db:2e:ef:04:69:47:3f:e7:27:c6:74:ab:89:71:
3b:f7:a1:7b:4e:47:95:da:e8:7f:0e:1d:e3:be:b3:
f1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:14:F7:56:09:3A:FD:E7:55:B2:99:58:D6:70:6D:30:AA:3B:43:3D
X509v3 Authority Key Identifier:
keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:09:90:3f:68:a6:64:74:82:63:46:04:7d:84:5c:19:58:2d:
c4:40:19:4b:64:38:0d:17:05:e8:3c:97:15:6f:d9:29:0c:d8:
39:9b:b0:4c:04:91:a3:59:ff:da:1f:03:d0:ad:37:07:25:36:
72:97:7b:e9:94:86:1b:c4:87:aa:52:64:c2:41:07:87:19:8a:
d4:30:56:2c:fd:4f:a3:91:50:07:e6:f8:14:3f:50:2a:3c:ef:
c9:b1:5a:cb:0b:9a:d8:c8:d8:f2:0b:0c:63:34:83:a2:9f:f1:
56:30:86:56:86:ff:b7:65:e9:7c:9d:62:35:2e:03:15:51:3b:
60:6b:89:bf:87:90:1c:41:02:51:67:66:9f:f2:4a:3e:ea:bb:
4b:e7:3f:29:29:2e:97:16:f2:cb:78:3f:75:4d:9b:15:cc:74:
99:c8:6b:55:2d:1b:53:e2:b4:65:bd:42:17:07:0a:bd:2c:d7:
3d:c8:36:32:7b:44:5f:58:b9:55:60:ac:4b:c9:80:05:ff:e4:
38:e4:e2:ad:1a:56:25:dc:a3:48:2b:d3:50:b9:74:34:2a:26:
74:da:9a:b0:43:55:07:4d:e7:b9:db:c9:18:ad:4e:c8:43:30:
f9:7c:96:79:60:eb:d6:05:8b:f8:af:ab:c5:b9:0e:8b:44:d2:
11:7d:69:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:35 2026 by rpki-client