Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
File: JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json)
Hash identifier: ZMWk+9X8pkudvJZsANJsJREZM2ob45EHffMBR74JACI=
Subject key identifier: 94:A2:D1:20:BD:9D:BA:64:8B:3F:80:69:7A:F8:74:FF:34:31:A7:A5
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Certificate issuer: /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial: 019DFA28B704AA26F141B1C0CB6CE649C5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
Manifest number: 18F6
Signing time: Tue 05 May 2026 22:01:05 +0000
Manifest this update: Tue 05 May 2026 22:01:05 +0000
Manifest next update: Wed 06 May 2026 22:01:05 +0000
Files and hashes: 1: 3pF8IhqwUxmlbr6s48L9oPema6M.roa (hash: dwMpIPqTUrQBexVcKq3XaTovbIKuATLe+PvFHdYURt8=)
2: 8MhUGiidi2m0HnQqAR9gajVbxRM.roa (hash: H33xML5R5o+4GB2XWvGYGH7H4gss4OnrQcVOqELCXeI=)
3: BsDV5gEChvqJlOEUL1parquidSQ.roa (hash: 66XQpURFVhssGT5jkMQej1bzbdrps7y8gPjFudVSOts=)
4: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: 0JQF95sfZNU2EyP5eYDHovUERJGrcvTnHqRHSz/FBek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fa:28:b7:04:aa:26:f1:41:b1:c0:cb:6c:e6:49:c5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Validity
Not Before: May 5 22:01:05 2026 GMT
Not After : May 6 22:01:05 2026 GMT
Subject: CN=94a2d120bd9dba648b3f80697af874ff3431a7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:4b:20:08:06:f9:85:15:7e:5a:a6:b6:f8:
55:b1:26:7d:97:d2:b9:11:da:f7:88:7d:e8:41:a0:
1f:1b:9d:30:7f:df:65:b2:cf:e0:22:34:d6:7a:43:
61:dd:83:05:d3:ec:a3:a0:48:8a:0b:9a:b5:74:9e:
a8:c0:3a:d0:fe:b2:31:a8:14:60:8b:67:20:48:a3:
94:bf:53:0f:28:f4:cb:00:29:68:66:02:49:c7:a5:
af:a1:7a:0e:1c:a8:87:82:58:f9:71:31:a3:bb:54:
a8:19:1c:6e:ad:64:71:e3:48:c3:23:8f:fb:54:1d:
1c:ea:6c:46:f2:4c:69:c6:6e:0d:f5:2f:ab:68:b7:
8e:da:20:b1:3e:ce:c5:f3:e7:b4:8c:fb:6d:5b:9b:
1c:49:f3:92:94:5a:93:a4:fe:d1:38:06:34:18:cf:
37:0a:ec:01:cc:7d:3e:7f:95:71:04:dc:51:20:4f:
cd:bf:d3:60:bd:3a:64:f4:54:22:2c:d5:8b:77:63:
7d:b4:ec:90:ee:29:3b:41:43:94:5e:6a:41:be:45:
e1:5d:3b:31:93:3b:0f:7c:c1:24:c8:df:22:1d:08:
a6:a6:f9:35:57:4d:93:7f:7e:32:92:82:c0:d0:df:
e2:be:c1:80:4f:8e:2c:3b:6d:1e:68:04:53:1a:14:
90:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A2:D1:20:BD:9D:BA:64:8B:3F:80:69:7A:F8:74:FF:34:31:A7:A5
X509v3 Authority Key Identifier:
keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b3:cc:4f:e7:6c:5c:48:05:c9:72:9e:9d:9e:21:e5:89:cf:
e1:bc:f6:cb:4a:d0:12:0c:47:58:a9:10:5e:30:f5:ae:b0:57:
54:8c:35:db:0c:11:39:b8:20:b9:b3:96:1f:53:e1:03:0b:6c:
80:7f:e6:20:76:f1:7a:6a:b8:76:0d:1a:ff:d2:9a:74:92:99:
bb:bb:0d:16:88:06:bf:bb:f2:18:c1:d5:3f:54:59:41:ca:49:
00:06:58:b0:97:72:96:31:db:ec:85:29:3a:6d:88:48:38:9c:
d8:ee:16:05:cf:00:80:2d:d0:e6:ea:27:2d:23:11:1b:ef:29:
3e:4d:6f:50:d3:3a:2b:b6:fc:ab:b2:ef:06:22:40:71:08:18:
eb:62:02:07:f6:44:7f:4b:60:ca:ca:d4:21:96:8b:c0:dc:ed:
6f:54:de:9a:4d:3a:d7:7a:ba:4b:97:46:75:a4:29:aa:8b:ec:
35:a8:21:d3:10:e3:71:6f:e8:d2:a2:f1:fe:8f:9c:cb:13:e3:
d1:67:1a:b8:1b:71:8e:f2:17:95:93:60:ea:7c:ff:d9:80:39:
4c:c1:6f:af:05:4a:65:9d:9f:d5:a3:b6:32:bf:d5:70:8c:80:
4b:7b:32:4c:fc:d4:d5:0f:6a:87:d2:87:6f:ca:f9:b5:1e:0f:
69:b4:e4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:34:53 2026 by rpki-client