Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: ait6FYFCM41/EWCCuPUnYg2RlXlDhUTUHyWZYvKNWew=
Subject key identifier: 8C:FD:51:F7:8E:F9:17:C3:F7:3B:3D:E2:E0:9D:A2:C9:12:21:82:74
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 019E1D90614A93ABCB502E140681DDAB0E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 1652
Signing time: Tue 12 May 2026 19:01:01 +0000
Manifest this update: Tue 12 May 2026 19:01:01 +0000
Manifest next update: Wed 13 May 2026 19:01:01 +0000
Files and hashes: 1: jOlvTqoRsdAulg6Y3XpZsAr0oMk.roa (hash: cs60eVRzgZLIh6eTxfnRAFFGp7Qvb56odPMGxJ4uAvU=)
2: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: RyJVHZlqxgFi6Fws8b0b2iAy6xkhXShvhZdK0yZqDVY=)
3: sAH-vh-27sRa8XMB1zXDPSKTTFE.roa (hash: Vvwat5s3NJzZ4utG1tsbAtKbf8nI+e0SigwDHdU+hO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:61:4a:93:ab:cb:50:2e:14:06:81:dd:ab:0e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: May 12 19:01:01 2026 GMT
Not After : May 13 19:01:01 2026 GMT
Subject: CN=8cfd51f78ef917c3f73b3de2e09da2c912218274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:09:8a:21:4a:05:a6:09:8c:70:18:18:4b:
2b:20:35:7b:b6:cb:3d:05:4a:30:ff:34:bf:27:52:
df:67:37:39:44:78:f2:b1:e1:85:3a:20:c3:52:8f:
08:b7:16:25:62:7e:38:98:cd:90:95:c9:df:4c:80:
fd:c8:15:3f:98:29:cf:81:b3:62:48:67:1b:04:9d:
16:df:dc:af:fd:98:5c:d9:dd:58:0e:a2:e4:1b:0b:
e2:92:d6:2f:01:fd:03:d0:d2:17:87:e8:7a:93:00:
f8:ec:84:36:2f:23:a4:86:d6:b7:1b:cd:3a:01:e8:
33:a1:31:1a:d0:6e:6f:6f:8a:c6:ce:09:be:29:43:
da:34:12:bc:e6:a1:96:11:b5:98:6f:13:f6:99:da:
12:ab:19:76:2c:b9:22:7e:2c:64:92:2a:ec:6c:57:
53:3b:ef:20:93:02:63:cf:9e:5e:2a:20:e3:cc:18:
05:b2:6d:0b:e1:95:6a:47:78:ee:63:6e:1f:cd:ad:
0c:ea:4b:30:5e:40:2e:67:87:e1:75:d8:5b:ef:c8:
f5:bb:b1:a4:54:a6:01:54:f6:4f:8c:3b:21:49:7f:
74:a0:f9:0f:59:a0:ac:23:3b:89:c4:c6:5c:3b:1e:
92:94:b4:e7:ea:f8:d3:d8:c7:7b:a6:17:50:8b:1e:
3b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FD:51:F7:8E:F9:17:C3:F7:3B:3D:E2:E0:9D:A2:C9:12:21:82:74
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5a:c9:f6:53:af:47:90:97:1b:fb:18:a7:9e:e4:28:33:e1:
91:c3:9f:98:1f:a2:fb:1e:c8:44:ec:0d:81:58:a1:3e:46:61:
c4:ac:f6:2f:17:b9:6f:e3:5a:71:b6:4d:5f:62:ef:c2:59:84:
f6:05:39:49:d3:34:c3:1b:41:b7:3c:a8:67:1b:df:3b:04:2d:
6d:2a:da:b0:01:8b:ba:7a:22:92:7f:20:a3:ec:e2:d6:94:ce:
8a:0f:ed:90:ab:4a:4b:b2:d7:e5:d6:08:8d:b5:33:70:f1:cc:
f3:a7:f7:0c:f8:f3:04:1d:b5:d9:04:68:25:b1:cf:e0:07:f1:
a5:81:8e:fd:d3:bc:2e:55:d6:f6:7c:31:c2:4f:e0:68:bf:00:
89:6c:06:ab:3d:d9:b4:69:92:cc:6a:97:07:fb:c8:b0:b4:3f:
e4:fc:6f:f7:ba:99:af:08:4a:18:8f:0b:9c:f3:6c:b8:f8:69:
9c:52:67:a0:b2:d0:66:c7:7b:b1:57:35:1c:cc:d6:d7:3b:f9:
93:58:89:9f:3c:5f:78:41:7c:77:da:d1:c4:79:25:9d:b2:4f:
9f:c7:de:00:5e:3c:ba:fe:19:3c:ee:c9:cf:1b:1a:47:f6:b4:
7d:99:93:d5:51:7e:9f:57:41:d7:42:ce:67:d9:ec:f3:2f:b4:
1b:f0:cc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:27:53 2026 by rpki-client