Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
File: jMyCpb7jqTYzA8M83N0278aPi0Q.mft (raw, json)
Hash identifier: RjfYKvotaoqZv5SOXHl4wodbpCvvdeX+ce9jMaMTqUE=
Subject key identifier: 23:DD:4A:60:D1:F2:24:37:CB:87:22:F2:29:B7:C7:D9:9D:E6:05:60
Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
Certificate issuer: /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Certificate serial: 019E8D5BA1E5F084CA858B0E77532F4021C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
Manifest number: 0535
Signing time: Wed 03 Jun 2026 12:00:53 +0000
Manifest this update: Wed 03 Jun 2026 12:00:53 +0000
Manifest next update: Thu 04 Jun 2026 12:00:53 +0000
Files and hashes: 1: Qu7i1hfHBSzNKAEQCFhBjLBdX88.roa (hash: txu1MfU2gFXJdRpf1GKWelwI6kKmpvlKQLQat4JHcus=)
2: jMyCpb7jqTYzA8M83N0278aPi0Q.crl (hash: guDQd3hW0w9AVXouWNbA/L5u43UE+qdA1LlyMmtdZW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:5b:a1:e5:f0:84:ca:85:8b:0e:77:53:2f:40:21:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Validity
Not Before: Jun 3 12:00:53 2026 GMT
Not After : Jun 4 12:00:53 2026 GMT
Subject: CN=23dd4a60d1f22437cb8722f229b7c7d99de60560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bd:87:1a:95:02:07:c0:09:fa:10:d0:a1:d4:
eb:b7:48:51:4f:b1:b0:4d:b1:45:4f:cf:f5:20:d5:
2f:9d:47:de:c8:98:b8:c6:e5:2b:7b:18:1b:3c:f1:
62:ab:0c:4c:62:b8:71:08:3d:02:fb:55:6e:52:8d:
05:f4:55:23:be:df:41:fb:36:87:8c:fb:39:17:76:
d6:e5:10:47:c4:b8:7e:8b:2e:5d:c6:62:b5:b9:59:
70:dc:21:e0:f2:ec:d1:c8:c1:06:d0:86:c2:28:74:
88:c3:7e:eb:db:66:b5:cd:08:cc:92:63:fc:35:37:
4d:b6:b4:8d:c5:d1:6e:98:70:0d:0a:52:9e:41:4d:
ea:98:fe:73:55:1e:b5:0c:7f:cf:c8:25:32:c9:28:
5e:93:8a:67:54:98:12:90:5e:d7:f1:b6:3e:33:f6:
95:2e:13:d7:58:cc:ef:0a:1c:c5:5a:cf:a0:08:f5:
bc:56:5a:f9:bd:bc:d5:39:38:55:fe:6a:c0:77:22:
19:9e:8e:1b:3b:cd:b4:1f:09:aa:e3:71:28:4e:58:
6a:4c:67:d6:b6:1d:98:27:bf:82:04:2d:23:e1:4f:
fd:1b:32:cc:dc:ed:df:43:0d:6a:72:59:86:1d:fb:
a8:22:05:4e:ea:ad:78:66:86:45:08:b1:9f:9d:c8:
fb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DD:4A:60:D1:F2:24:37:CB:87:22:F2:29:B7:C7:D9:9D:E6:05:60
X509v3 Authority Key Identifier:
keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0f:12:c3:f7:ec:a6:8e:83:e6:c2:cf:66:f3:92:20:18:40:
da:56:7f:d5:b7:27:04:73:b7:83:35:e4:f0:f3:54:a7:ce:6b:
c6:70:97:0c:ee:b6:9f:6c:ff:df:73:d4:1d:ef:24:85:c6:ec:
d3:ee:b6:96:e6:e6:a7:ac:50:f5:50:71:0d:c2:ba:f3:a2:c0:
d7:b5:40:84:a0:79:d2:36:83:a7:0f:f5:2c:e7:c2:77:c7:5a:
60:1d:aa:cd:89:1e:ab:ac:41:ca:85:6a:b0:09:27:cc:3d:ea:
5c:56:28:3c:30:22:91:94:e1:97:57:56:75:47:fd:20:63:0b:
89:2d:a2:ec:c1:9d:03:ae:3c:8f:d1:77:7e:6c:77:26:46:e2:
8d:27:18:d7:66:66:29:b2:85:d8:48:e5:d6:9a:44:4f:97:d9:
b7:65:ab:de:0f:50:35:bc:60:a0:63:a1:7c:07:56:42:e0:dc:
45:17:8d:28:3a:c1:dc:ed:b4:e1:85:74:0c:90:e3:df:3e:0c:
41:c1:da:02:46:03:38:0b:b2:e4:f4:68:f6:2e:c5:bb:de:42:
f6:5e:6e:5b:96:04:94:68:21:06:d9:3b:b6:9e:6b:c3:ea:f2:
76:c5:5b:c8:50:00:d6:83:51:ea:f4:4c:35:f8:a7:43:23:66:
1c:b5:de:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:59:35 2026 by rpki-client