Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
File: jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json)
Hash identifier: waeiKQP6VzQOa2zVp2qnIbtP60X7PoyArHVjogQp+/4=
Subject key identifier: 51:EC:54:27:D9:87:6D:0C:68:21:FA:71:0C:33:A0:00:B5:BE:C7:0E
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 019DCE62AB9040D5C4F34E033EFFB6FE37B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
Manifest number: 1928
Signing time: Mon 27 Apr 2026 10:01:05 +0000
Manifest this update: Mon 27 Apr 2026 10:01:05 +0000
Manifest next update: Tue 28 Apr 2026 10:01:05 +0000
Files and hashes: 1: 7M11WAr8ASMmTsOpEXXftqbLZKI.roa (hash: Hy7iKCS/PTOuaQ4Hy/XwhYj+Mf9Lpbiz3nTqAU+v+KA=)
2: IPD7v-J9c376oyXeNIKc_aWnNmQ.roa (hash: EEItVG+CeXn/JupxjY6OK4AdQvnwdrYLgxk2U0ldhpY=)
3: _gRsaSao0vaUMwc0x3LyFobrYg8.roa (hash: NuZeEvpoAsVGvJOhf6lMpbCZ6vhyLjtVLY0IuaaWnsk=)
4: gpd1mhOHXiMRj4sBD1YUlIe0OKY.roa (hash: Mp1A6bnLjG6e+iNvqlRY2Pi1q3kKD3uoZO/De04Jgqw=)
5: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: LLuGox/rUvd9g1VxAF9euQ7tj9O27+55JcEj5+Yxyhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:ab:90:40:d5:c4:f3:4e:03:3e:ff:b6:fe:37:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Apr 27 10:01:05 2026 GMT
Not After : Apr 28 10:01:05 2026 GMT
Subject: CN=51ec5427d9876d0c6821fa710c33a000b5bec70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:b4:da:7d:b0:dc:07:08:2a:3d:77:dd:6e:
6d:8f:64:d2:9a:85:08:96:a9:b7:fb:cf:e6:76:83:
93:1d:c1:02:62:8b:a5:19:5a:76:a8:7f:03:1e:f9:
e4:97:ee:b1:21:17:7a:33:5a:a8:dd:7f:c0:a5:f4:
80:97:9d:30:97:53:49:b1:14:0e:7c:44:d0:49:35:
fc:95:0c:86:01:33:df:fe:2d:0f:2c:39:07:9e:95:
91:c0:c2:0b:48:49:7a:aa:ae:45:34:0a:cd:12:e2:
8c:5c:96:4c:59:e7:3b:e7:93:e2:b8:00:1f:2f:2f:
ef:4e:a0:97:ec:75:19:75:73:9b:db:fe:54:9d:f0:
bb:80:51:f0:19:9b:40:9f:63:06:2e:00:dd:bf:bb:
37:bb:68:e9:d6:98:e0:0b:17:e9:91:82:2c:f9:ef:
c7:ef:e8:ff:24:5f:11:ef:5b:31:b1:75:17:7b:47:
ec:3b:1c:fb:8b:79:65:98:b3:35:2d:ba:2f:be:68:
27:d7:fe:2a:c0:c1:1e:74:31:17:dc:57:32:3d:8e:
f7:a8:84:94:fe:bd:d3:91:b1:97:80:a1:73:25:b2:
0a:ed:81:64:dc:bb:5d:b7:00:81:fa:00:02:39:0f:
8b:08:ae:4e:b5:25:36:2e:2b:0b:b6:8f:bd:59:5d:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EC:54:27:D9:87:6D:0C:68:21:FA:71:0C:33:A0:00:B5:BE:C7:0E
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b1:77:bf:7d:d0:9c:2e:ba:57:92:f3:96:a6:8b:72:d0:51:
a5:23:37:fd:22:f5:7b:ec:a2:a0:f8:64:6f:4d:8f:b0:85:c3:
7c:0e:7e:f6:f6:01:34:f8:29:05:59:5b:7f:99:31:ca:75:1e:
d8:dd:90:80:3f:c3:73:88:1c:1b:37:03:ec:fd:8c:4b:38:39:
97:05:dd:c5:ed:ad:d2:ee:e7:9d:50:b3:93:b4:52:20:6a:1a:
09:f6:ae:01:5f:30:93:d7:b6:ff:14:27:38:6c:92:c9:58:b2:
67:17:66:09:36:17:72:a5:31:f9:b4:e2:db:8d:07:af:d4:11:
55:a7:ec:4f:e8:a6:d8:36:44:14:4f:db:d7:75:26:de:e3:78:
36:f1:09:bf:26:8e:1e:1e:cb:aa:73:3c:c3:cb:7b:e5:8d:1c:
18:53:2e:68:3e:45:bf:50:b2:fc:8e:de:bd:7c:eb:e2:d0:00:
73:e2:99:ba:dd:0a:d4:68:45:fe:0a:36:73:db:3c:07:eb:ae:
4f:23:99:96:e1:7f:66:04:eb:4a:85:b0:e9:8f:38:84:11:a2:
ee:7a:f6:81:b7:e0:20:89:00:52:8c:27:78:6d:41:10:13:8d:
40:2e:37:99:bf:85:e7:f1:3a:60:bb:c3:1e:7d:09:56:98:5d:
3f:01:65:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:59:53 2026 by rpki-client