Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
File: jZknGRkaiU0GjbqNChAG6f6tqmg.mft (raw, json)
Hash identifier: CrIpw9cPXq9PrPSE90RHWh9zf6LzpE6A73MtF0pLQ4U=
Subject key identifier: 97:29:65:F3:FE:8F:37:08:17:9B:3B:8D:15:99:B3:FD:6C:C7:59:B9
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Certificate issuer: /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial: 019DF91637196DC6ED64FFD69AEC36066E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
Manifest number: 0AA4
Signing time: Tue 05 May 2026 17:01:15 +0000
Manifest this update: Tue 05 May 2026 17:01:15 +0000
Manifest next update: Wed 06 May 2026 17:01:15 +0000
Files and hashes: 1: aNdGm0-pJsnHGAxPQWpGS1Kv5ZU.roa (hash: 5JOSX/QZCccK/gUOeYHPT0U61k8N4LEoiccIN7jDjPo=)
2: jZknGRkaiU0GjbqNChAG6f6tqmg.crl (hash: qFHXZE0bs/R1Xip/cQmTutIcH81euUDDBRtYPqTNTdw=)
3: nyLvhleQEwhVmTGhN_O5OJ2dSNk.roa (hash: SjtdaWQXMJk13J5xCejsgWLSIcSxD709iSf13daT5JQ=)
4: yd8JpikDeAGL1RyToXLtaBhLXs0.roa (hash: WUNVyCqCAPZ5sr2QAi48VB7rmkpIF+duLJ03LhF4Vtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 17:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:16:37:19:6d:c6:ed:64:ff:d6:9a:ec:36:06:6e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
Validity
Not Before: May 5 17:01:15 2026 GMT
Not After : May 6 17:01:15 2026 GMT
Subject: CN=972965f3fe8f3708179b3b8d1599b3fd6cc759b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:93:b4:9d:bc:8e:f4:7a:d6:4b:ea:9a:b6:f9:
e0:98:a9:ab:88:22:17:09:5e:88:e3:10:99:da:03:
7e:97:38:2f:26:f3:3e:b2:4e:32:39:70:84:b9:9f:
45:20:51:3d:d4:c7:d4:74:f7:22:15:23:9e:00:f0:
9d:28:b2:66:b5:19:30:b7:70:6a:90:b3:eb:a2:a1:
30:b2:c8:dc:dd:53:52:f0:b6:3b:6c:83:5e:ae:f8:
56:21:bc:00:b3:55:ed:72:25:35:0a:4b:44:b5:3d:
ef:79:dd:30:aa:e9:31:7d:17:53:58:7b:09:14:ca:
16:b1:1b:26:93:78:09:bc:2f:79:af:02:e1:c2:d0:
10:02:41:78:83:e6:52:73:df:cc:0b:9a:83:67:af:
20:44:a8:28:65:b3:e9:d2:70:52:73:c8:7c:7c:31:
cd:9b:2c:2a:8b:93:5e:84:32:4d:95:03:71:7b:c5:
a6:35:06:f4:11:7e:46:fc:4f:f9:24:3d:fd:9f:25:
0e:39:f5:e8:c9:1f:7e:13:33:b4:e6:9e:05:01:2c:
44:82:61:99:3b:4c:ea:6a:9d:5c:b0:7c:1f:d6:29:
92:5d:e7:fe:6b:f3:3c:b0:68:62:59:cb:6b:c4:e7:
b6:32:77:f8:ad:75:9d:37:dd:2a:78:81:d4:75:f6:
f0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:29:65:F3:FE:8F:37:08:17:9B:3B:8D:15:99:B3:FD:6C:C7:59:B9
X509v3 Authority Key Identifier:
keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1b:05:bf:55:6a:33:96:9a:af:0c:25:6d:50:f4:4e:d1:17:
17:2f:9c:c9:58:b1:a8:7e:dd:48:f1:b8:c1:41:aa:99:89:98:
e9:04:ca:ed:f7:94:02:53:41:c5:36:cd:60:e5:57:b0:ea:65:
e2:6d:5a:d4:ec:8a:42:ca:d4:b0:49:b5:09:62:35:62:19:4f:
af:d2:93:3c:19:c4:aa:d5:6f:5c:35:08:da:fe:79:9b:f8:86:
b8:47:06:22:e7:36:1e:2f:bb:75:de:e2:7d:f4:74:64:00:cb:
c7:8f:4a:4a:e9:86:ce:3a:ea:6f:49:e9:fd:c1:87:1c:0f:3d:
04:f7:3e:14:76:a6:70:34:0f:bf:5d:33:d6:6a:cd:f9:70:cf:
f7:ed:6b:ee:63:64:2d:3f:73:da:47:d0:60:fb:04:d3:88:98:
ce:13:ab:c3:ba:02:06:2f:d2:b9:81:81:c2:30:97:79:fd:98:
e3:2b:8c:bc:db:7b:88:7f:20:5d:7d:69:37:85:9b:b2:20:b6:
d0:9f:bc:d4:68:8b:10:f6:5f:2e:91:15:3b:19:b7:93:54:d0:
87:3c:e0:16:62:ad:2a:62:1d:73:5f:53:8d:41:99:5b:29:f2:
80:3a:5f:c1:1e:fb:81:fd:cb:76:bf:d4:2b:80:97:52:c0:9e:
0b:f1:48:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 03:28:42 2026 by rpki-client