Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: GNYv+9utdRp+iVTsd571TQi8CNrJQBX8NajHaHDUyw4=
Subject key identifier: 72:F3:10:3F:98:2E:D4:52:55:BA:AE:7E:BD:46:8D:FC:36:E4:B3:87
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 019E30E0DD166AAD1FF6959FF8FAC89969E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 121F
Signing time: Sat 16 May 2026 13:01:43 +0000
Manifest this update: Sat 16 May 2026 13:01:43 +0000
Manifest next update: Sun 17 May 2026 13:01:43 +0000
Files and hashes: 1: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: giDDhPyu21lX/7IJzaVasKoAbFKKL+YsYXY5uLazw3M=)
2: nb4M4Vs_oRCpP6av5yHYY7ajtGs.roa (hash: cPr0jW1v5b3Y4dRV/He/q4udsj1U7jqFBGqtSVxJD3c=)
3: qz5i0x4xJkfmTe6dozsZBG3TPU0.roa (hash: ooUbJjUT5M24S8q2RLHISS9XM6QlSckyAXcafyUdbOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:dd:16:6a:ad:1f:f6:95:9f:f8:fa:c8:99:69:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: May 16 13:01:43 2026 GMT
Not After : May 17 13:01:43 2026 GMT
Subject: CN=72f3103f982ed45255baae7ebd468dfc36e4b387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c1:98:89:ed:e4:a2:49:5c:be:6a:dd:dd:94:
65:7b:d2:95:a6:00:f6:a7:81:de:bb:03:6c:9d:0d:
e9:e3:ce:f5:08:08:c0:97:5f:84:b9:92:fe:33:71:
48:97:03:46:bd:71:07:19:36:0e:6e:08:1a:b4:7c:
21:24:03:4e:ce:46:ef:06:c8:4f:af:ec:35:5d:a5:
25:1a:0c:6e:df:d2:26:14:d6:a7:3b:05:b5:16:19:
20:4b:20:11:30:b1:d2:92:c9:5a:ba:c0:05:ac:24:
86:7f:3b:b2:cc:53:4c:d0:f4:0e:e6:e3:cb:47:00:
c3:15:c9:01:87:0e:ea:c3:00:b8:ab:43:e0:52:b1:
7d:ee:bf:9e:8f:da:af:f5:59:da:a3:23:49:32:d7:
d1:ee:bc:fa:d8:06:9c:0a:b0:62:f8:b0:06:91:fe:
25:b2:01:75:0e:59:e2:1f:69:dd:b8:69:16:ab:6f:
74:21:07:a4:9c:78:5a:4c:85:96:c3:3e:21:4a:34:
6d:de:dc:77:23:aa:a9:b3:a5:36:24:83:26:a0:24:
fc:97:dd:89:a5:51:8f:d5:44:a9:bc:1c:96:bb:27:
8f:b7:a6:22:74:04:0d:9d:44:85:ab:a0:a4:0a:8f:
5c:78:68:d1:a3:40:cb:15:31:c6:4a:28:f7:da:bb:
8b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F3:10:3F:98:2E:D4:52:55:BA:AE:7E:BD:46:8D:FC:36:E4:B3:87
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:59:8c:2c:a8:b4:50:09:29:08:77:b4:88:f6:e0:c8:4b:69:
fe:dd:38:8f:85:12:c2:8a:bc:c4:61:0e:45:6f:54:4d:b1:53:
d9:d2:8d:db:5f:18:20:a1:ba:b8:1a:08:20:79:fe:92:16:d2:
0a:2c:93:06:a7:07:d8:91:98:fc:77:3d:5e:cf:37:d3:99:a5:
1f:aa:05:58:a8:d5:b8:18:19:9d:2b:a6:d7:99:c6:09:aa:67:
b1:e8:eb:15:92:43:f1:d3:a4:64:c0:3d:4d:11:ce:c9:2e:1e:
68:bd:c6:3e:30:16:1d:1a:bc:ef:82:59:21:b9:2d:21:aa:bd:
78:c0:19:74:ec:d3:46:cc:f9:1c:e7:58:29:55:60:0a:b4:12:
d0:87:f5:cb:9b:17:80:c7:0c:3b:53:58:16:28:fd:37:fb:c2:
46:d9:98:c0:60:6c:b1:21:29:d6:44:6e:97:04:fc:29:66:81:
c5:ec:64:a8:62:81:0c:61:ad:6e:4b:a1:72:11:ef:23:02:bc:
67:3c:7f:f5:c7:90:be:2d:6f:62:cc:ac:e6:88:cc:ac:df:b6:
b9:b8:41:3a:04:bc:28:97:0a:b7:0a:88:cc:bd:02:5d:16:54:
10:6c:41:33:22:d5:9a:87:4f:c1:f0:31:23:62:96:8a:de:09:
1c:cb:91:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:28 2026 by rpki-client