Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: ItC08WId/4Er93DJMQwASr6ZoepNWpaROAw4l8S9mT8=
Subject key identifier: 7B:5E:4C:B3:B7:4C:5E:D7:3D:A1:CE:26:3D:61:20:C8:49:8B:D1:BE
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 01A0F5A04CE18F731068DA2A4F1A6A55FDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 17CB
Signing time: Thu 01 Oct 2026 04:01:58 +0000
Manifest this update: Thu 01 Oct 2026 04:01:58 +0000
Manifest next update: Fri 02 Oct 2026 04:01:58 +0000
Files and hashes: 1: jOlvTqoRsdAulg6Y3XpZsAr0oMk.roa (hash: cs60eVRzgZLIh6eTxfnRAFFGp7Qvb56odPMGxJ4uAvU=)
2: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: 2N6AyoB8U4lNPVp/iNkaXETrZoGCiEfP5KDZwraBWzc=)
3: sAH-vh-27sRa8XMB1zXDPSKTTFE.roa (hash: Vvwat5s3NJzZ4utG1tsbAtKbf8nI+e0SigwDHdU+hO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 04:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:a0:4c:e1:8f:73:10:68:da:2a:4f:1a:6a:55:fd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Oct 1 04:01:58 2026 GMT
Not After : Oct 2 04:01:58 2026 GMT
Subject: CN=7b5e4cb3b74c5ed73da1ce263d6120c8498bd1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:9c:c1:71:90:7e:ee:fb:84:3b:6e:00:4d:
03:a3:cb:34:c7:e0:1d:79:0c:93:cd:0d:1e:d1:ea:
d4:30:7a:e2:3b:d1:1c:bd:7b:a9:4a:5d:af:c3:c4:
a6:f1:6d:a9:ce:4e:6c:54:c8:43:9d:66:84:7c:13:
3a:81:c1:e0:8f:cb:c0:5f:38:24:fa:1a:f3:f2:75:
80:20:ef:1b:19:8f:a6:1a:42:db:80:8a:ec:4d:78:
5d:41:b4:aa:98:75:bb:28:ec:2b:0c:ee:d1:f2:ac:
c9:86:c7:55:58:b2:6a:2c:f6:24:fd:fb:df:b6:d6:
6a:ed:9d:56:23:ed:e2:53:d2:6f:79:7d:ec:e9:67:
04:38:04:1b:fe:76:a9:d2:79:c8:3a:ad:74:b0:d8:
a4:f8:8a:6d:87:98:74:33:de:93:9d:93:6f:70:8d:
4d:e5:7a:d1:12:6f:0d:ec:68:14:ed:a3:bd:11:f5:
54:db:0f:16:19:7f:5b:36:e6:2a:e9:af:17:64:ba:
f8:7e:67:45:89:75:57:c0:44:e5:78:68:d6:7a:33:
5f:e7:df:ee:ce:6d:25:88:c4:ab:20:f6:2c:6a:c2:
80:2b:ca:8f:1e:18:57:99:9f:59:f1:b8:46:c7:c3:
6d:a0:64:d1:9d:95:3f:56:d9:c9:e8:17:22:bf:bd:
42:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5E:4C:B3:B7:4C:5E:D7:3D:A1:CE:26:3D:61:20:C8:49:8B:D1:BE
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ce:52:ae:f7:d8:3f:b8:07:08:30:f4:fd:98:e5:2a:67:d4:
3d:f6:be:94:09:d9:fd:3f:b0:11:45:35:bf:d4:34:f2:33:4f:
09:38:ba:5a:10:27:49:46:c4:89:d1:9b:f9:05:93:b1:bc:99:
fd:04:a4:0a:64:1d:dd:1a:8d:9b:67:26:44:cf:79:b6:b0:69:
11:78:37:0f:a7:f5:f8:26:08:10:51:cd:3e:e6:e3:1c:53:47:
d7:c9:b0:03:36:ec:03:6f:b8:3a:96:25:dd:cf:0c:2e:59:e9:
97:29:29:89:5a:c8:60:9b:5f:4c:76:2b:35:6f:45:2a:06:5a:
3d:8c:f9:30:13:12:27:7e:61:89:23:af:6c:a0:bc:f2:35:83:
a3:d8:3c:4e:8b:c0:57:8e:07:e8:2e:89:cb:b2:a6:64:e9:31:
53:ce:78:ca:11:cc:75:55:70:a4:41:1f:dd:54:ae:5a:2a:9e:
f8:38:fb:5f:6f:ac:90:78:b4:ed:a1:ad:2a:82:9e:4b:db:3e:
6f:13:2b:a4:19:26:5b:5f:ff:29:c7:c9:13:06:88:d0:31:22:
c8:c5:3b:23:d2:32:79:ac:0f:2b:07:91:50:1a:f6:9e:fc:f9:
3d:4a:18:24:10:50:14:b1:f3:78:4f:b7:23:2d:56:2a:45:96:
bd:f2:43:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 11:48:58 2026 by rpki-client