Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json)
Hash identifier: Z/+3jhJMFif59Dpwkx8WPPi8tn8DZ6yTjxcpqTGpfxI=
Subject key identifier: 6F:A6:90:33:D1:C1:15:98:F7:D6:57:AC:07:EC:22:9E:58:A6:59:41
Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Certificate serial: 019DCC7466A4734FA1B864F12DB538CB47B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
Manifest number: 13D0
Signing time: Mon 27 Apr 2026 01:01:13 +0000
Manifest this update: Mon 27 Apr 2026 01:01:13 +0000
Manifest next update: Tue 28 Apr 2026 01:01:13 +0000
Files and hashes: 1: L24zb2GPwHD-aPGno9VtNYT_9UA.roa (hash: TV8bwr8KXxyIpZ3hz+LfUH4wszhJw0hokfRXNpqsBSk=)
2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: C+GqIknbLTwtnCQTeOk1dqXj/OjQ1HctXVPe6vvzI8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:66:a4:73:4f:a1:b8:64:f1:2d:b5:38:cb:47:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Validity
Not Before: Apr 27 01:01:13 2026 GMT
Not After : Apr 28 01:01:13 2026 GMT
Subject: CN=6fa69033d1c11598f7d657ac07ec229e58a65941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:4f:4e:c3:f1:fa:2e:4e:67:02:db:f5:d0:
35:45:01:aa:3e:3d:e4:54:d8:87:bd:ca:d1:d7:73:
4c:ce:25:7c:ae:6a:54:02:a2:61:27:80:cc:03:a4:
3f:b1:90:94:14:a1:27:3c:2d:ef:90:23:70:21:ff:
b2:42:f8:02:49:8e:49:d6:cc:64:f9:27:4a:6e:19:
a1:9f:65:92:7e:09:7a:4f:13:40:25:76:fb:b2:c4:
71:ad:85:f0:f5:18:70:14:41:fe:b2:a0:fa:27:12:
ce:99:13:6a:19:aa:15:4d:65:63:1b:44:24:61:a8:
85:b1:35:3e:d2:7d:b9:b3:98:e7:54:b6:86:1b:4d:
7c:c5:b0:21:f7:b7:f1:aa:d4:b0:b4:f8:57:53:b2:
49:3f:d8:35:eb:aa:f9:4f:30:05:86:34:d4:8c:4b:
e8:5c:6f:2c:48:52:29:bf:00:0d:81:55:0c:be:ed:
95:5d:9e:60:3b:fe:b1:03:c2:a2:63:67:5e:6c:ee:
07:44:0f:51:72:e1:fe:d4:64:db:f4:ed:06:45:17:
36:88:f7:43:db:4c:6f:47:31:b4:55:a3:4a:52:4b:
9c:10:b6:a8:7c:c0:91:bc:5a:a6:11:37:90:7c:80:
10:1c:16:e2:39:e0:56:51:eb:7d:09:5c:8f:fc:25:
81:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A6:90:33:D1:C1:15:98:F7:D6:57:AC:07:EC:22:9E:58:A6:59:41
X509v3 Authority Key Identifier:
keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3f:d5:ba:55:ea:1b:ca:3a:2a:b5:a9:1f:09:19:00:b7:ef:
d0:64:fc:3a:36:02:05:ff:fe:c1:83:b2:d0:1c:b1:ac:a7:57:
71:f8:64:86:d0:b2:74:ba:1c:8e:01:f2:14:48:5d:e8:08:70:
6d:21:5e:68:cc:a2:f1:03:9d:fe:62:9e:72:28:6b:5e:a9:88:
e5:a8:35:4a:25:05:da:fd:7b:64:30:5a:cf:69:b2:23:f3:fd:
40:9c:2f:ff:29:92:7c:fd:28:0f:0a:2f:a2:61:ea:35:73:16:
e9:ee:db:41:71:50:e9:e4:e0:7a:02:3d:c9:74:81:20:d8:b0:
0a:ea:17:eb:bb:12:af:a5:bf:53:ed:f2:b8:20:e5:28:da:f2:
16:ae:e4:65:e3:64:dd:93:bb:65:3d:b5:b7:3c:98:f9:57:78:
6a:7b:f0:60:92:ec:bc:ce:ac:d6:bd:05:78:b8:a8:8b:f3:55:
e0:69:85:85:79:29:d3:7f:a0:87:51:63:0a:87:81:72:26:f5:
32:bb:9c:fe:eb:d9:c8:4c:25:ab:6d:ee:4f:1d:67:26:eb:98:
ba:12:b9:a7:c3:2d:8b:fc:ac:62:c4:b3:c8:5e:e9:cb:c7:a6:
02:52:7f:52:db:50:f4:7e:8c:b2:c5:fb:d6:32:2b:f4:dc:53:
fd:47:75:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:42:51 2026 by rpki-client