Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier: CaqYtJxma6RxDXbfpXSDeIdyB8xlGKzieJiussPLW28=
Subject key identifier: BF:8F:A2:21:B5:46:5B:D1:03:07:F6:22:FA:76:88:A1:9C:9E:88:38
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial: 019E295DA0DAAC6247DAA11805CDAC94FE51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number: 0DBD
Signing time: Fri 15 May 2026 02:01:02 +0000
Manifest this update: Fri 15 May 2026 02:01:02 +0000
Manifest next update: Sat 16 May 2026 02:01:02 +0000
Files and hashes: 1: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: oEcmqmxiOJdnS/fjj2hPZLPG42GFuX1YgJPlk3GgX9Y=)
2: d9acVyGvY-GRHIzPw-VB2s24I5s.asa (hash: esYk9Pb0POVT9uiF3eUMv0Ryu0HQ4twGzvmF2wBgL8w=)
3: sQhlhQF42dcocq5duZHLdQzBA9g.roa (hash: akgpfGx0nQxJk8TcEmTS0m+MwP660iAv5arUAH9NKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5d:a0:da:ac:62:47:da:a1:18:05:cd:ac:94:fe:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
Validity
Not Before: May 15 02:01:02 2026 GMT
Not After : May 16 02:01:02 2026 GMT
Subject: CN=bf8fa221b5465bd10307f622fa7688a19c9e8838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:c5:30:f5:cf:e4:f0:5b:1e:5c:cc:07:68:
fa:65:81:9b:b8:0a:65:98:b3:ab:2a:b1:6a:e1:ff:
57:64:ce:e9:93:61:a4:a1:d7:2b:c6:85:45:9a:eb:
b4:ff:95:2f:5c:b0:88:bb:7d:41:0e:c7:55:42:f4:
17:d2:4e:2c:2e:95:8a:55:6b:99:b9:69:a8:b8:50:
bf:2e:65:15:97:de:1d:50:f0:03:32:b5:2a:c0:5c:
8f:cf:e4:2d:d2:1c:e7:d9:d2:64:c4:72:29:38:30:
ed:84:1f:56:7b:bd:d8:dc:c6:59:cf:fa:f1:f3:fb:
5f:79:fc:82:64:0d:e6:2c:47:e3:2a:17:9e:62:df:
5c:21:e3:32:33:9f:50:41:5e:ed:c8:e3:4f:63:12:
fa:b1:c2:6a:be:21:45:cd:36:29:fb:ab:cf:6c:4c:
ab:cc:cb:29:7f:bb:5c:23:da:1c:80:34:c7:e6:96:
b1:78:d8:81:ee:c0:4b:35:68:e3:58:6a:cf:45:38:
58:26:bd:3e:23:22:10:0d:6a:1e:f3:a7:40:d5:76:
e7:b8:8d:8c:8a:a4:bf:92:f2:f9:f7:c2:49:e8:a0:
ee:e1:10:65:5c:5f:56:63:58:7d:38:6d:40:ac:dc:
98:7a:97:65:3a:9b:2c:ab:af:72:fc:2c:4b:1a:d5:
d0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8F:A2:21:B5:46:5B:D1:03:07:F6:22:FA:76:88:A1:9C:9E:88:38
X509v3 Authority Key Identifier:
keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:2e:2e:b5:41:88:4b:7d:d0:34:07:db:38:d8:f8:a2:75:40:
bf:2a:73:5f:c4:fb:b9:46:2a:0b:9e:41:af:2b:73:c2:ba:c4:
18:2a:06:0c:39:8a:0b:45:cb:70:1d:70:91:47:9a:9b:de:2e:
58:56:53:de:18:ed:ec:5e:9e:f4:2f:fc:9d:32:87:a0:ff:73:
78:82:5e:3f:c3:ab:de:79:44:3d:c3:84:b3:3c:cf:fb:62:b4:
3a:20:0d:82:99:94:1b:ef:24:cb:da:cc:a9:b1:62:c0:7f:c4:
e5:ff:38:4c:86:a1:2c:8c:5a:7f:0d:14:51:da:30:26:31:7c:
79:c9:e6:85:01:de:bf:5c:00:c1:4d:88:4d:c2:09:c1:a5:67:
2d:14:57:f3:09:26:7c:59:5e:f8:39:75:d4:05:94:84:5d:76:
8f:e0:7c:aa:fb:b9:fc:7c:96:39:25:d0:62:d4:fe:17:a8:ee:
17:07:79:ff:d1:c2:a3:8f:73:da:a6:38:75:4a:bc:6b:60:72:
e0:73:d4:9d:0f:48:e5:62:7e:fa:2e:e3:3f:31:95:07:9c:cc:
0d:69:94:1a:6f:92:b1:be:e4:68:31:8d:c7:5f:52:d0:70:10:
fa:24:2a:2b:3a:b5:72:40:29:63:b8:77:b6:14:96:ff:3e:fb:
63:eb:8e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:21 2026 by rpki-client