Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
File: jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft (raw, json)
Hash identifier: XlK1dR5/dsqNsm7Tj3DAGTvnXZmApqKg20E6722+l2g=
Subject key identifier: 88:9B:98:5A:8B:D0:D2:AD:E4:3F:7E:E2:98:4C:B5:E7:09:34:3C:60
Authority key identifier: 8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
Certificate issuer: /CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Certificate serial: 019DDD9EDD44675BA2994BC9AE7C466D54B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
Manifest number: 1878
Signing time: Thu 30 Apr 2026 09:01:09 +0000
Manifest this update: Thu 30 Apr 2026 09:01:09 +0000
Manifest next update: Fri 01 May 2026 09:01:09 +0000
Files and hashes: 1: albAVH6lwfzmwVJzDmkpKh655KQ.roa (hash: BpL6bwg3t5pCu5LLatPQum4u8725IbG+PO63ipkITdM=)
2: i-ANpr6wgO4krsxaS_Mr1pJHk_s.roa (hash: gL8PqoF8vFY4ZSfQKB1yxJH42nNfNmgI+ETePYwGBJ0=)
3: jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl (hash: MFtivK61+V/IgocPT2TBDhAVGni2sG4WTgOsphD1dR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:9e:dd:44:67:5b:a2:99:4b:c9:ae:7c:46:6d:54:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Validity
Not Before: Apr 30 09:01:09 2026 GMT
Not After : May 1 09:01:09 2026 GMT
Subject: CN=889b985a8bd0d2ade43f7ee2984cb5e709343c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:d3:ad:7f:b2:cc:ff:37:fc:9f:f4:a3:e7:
24:1f:e0:40:6c:63:be:49:f6:0c:a5:79:cd:63:31:
0d:d7:d5:4f:d7:01:79:1e:0d:65:0b:a7:22:9e:60:
96:cc:44:6b:da:f9:d7:87:93:db:87:01:3b:f3:f2:
85:da:b2:20:c7:f9:49:40:74:37:dc:67:07:8d:25:
fb:54:57:63:db:f9:87:7a:14:89:9f:8e:7d:f6:3d:
ae:51:48:ed:27:34:67:5c:f1:e2:df:91:0b:8b:71:
45:f6:c1:73:e1:f4:4c:c1:cb:39:9c:f5:40:51:6b:
16:02:fa:0b:2b:59:ca:71:0e:68:12:f7:69:da:0e:
f0:70:bc:c1:fd:28:c3:96:bf:67:48:eb:11:98:63:
34:d0:7b:c5:92:0b:d9:b7:7b:65:60:5e:0e:70:c5:
fc:a8:16:fc:aa:cf:46:2d:8d:f4:98:2c:ce:1c:6c:
4c:19:1c:31:04:e4:63:03:d0:99:28:c6:2b:eb:00:
61:5f:f6:b5:b0:95:62:82:97:a2:50:08:21:be:60:
2d:3d:b1:ef:05:7e:70:46:a0:52:e7:bb:5b:08:70:
d7:79:01:9f:54:0c:66:06:13:fe:72:1c:4f:17:59:
b0:22:3c:de:b7:fa:bd:88:86:7e:96:77:44:aa:d9:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9B:98:5A:8B:D0:D2:AD:E4:3F:7E:E2:98:4C:B5:E7:09:34:3C:60
X509v3 Authority Key Identifier:
keyid:8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cb:5c:b0:cb:cd:8e:f0:49:29:a0:71:b9:c4:c9:e0:e7:64:
37:35:c3:91:68:53:d1:1a:cd:87:9c:6d:dd:f4:a8:b5:7e:49:
83:95:ea:cb:5e:12:c6:ae:29:6b:05:24:3c:08:8e:7a:6d:66:
0e:71:f0:24:d2:75:ac:21:8e:31:64:97:68:46:af:a8:94:7b:
6b:16:fe:2a:48:b2:97:ad:dc:78:9f:94:cf:f5:db:7b:99:b1:
e4:00:1f:1b:e3:7b:75:b3:d4:b6:f2:be:82:56:a7:77:f2:cf:
21:d8:3f:4d:88:bf:27:90:86:68:48:ec:98:47:9a:1c:4d:8b:
1a:fd:e1:13:f3:6b:b5:8f:47:12:5a:4a:00:ce:8d:94:a2:18:
bc:26:a7:99:23:1f:e7:ea:25:df:16:cd:92:fe:1b:54:27:76:
b5:a2:4a:59:84:e0:16:cb:c7:66:f8:0b:00:93:a2:a1:62:9b:
6d:f3:87:fc:02:33:6d:8b:5a:0b:f7:34:13:d0:22:4f:f8:9d:
f8:a9:86:e9:cb:19:f7:cf:6b:b5:df:5c:a3:c8:4d:04:ae:fa:
f9:01:f2:26:57:f6:20:24:cb:e0:df:02:30:77:f1:0b:17:6c:
69:4c:a0:ca:00:de:3d:ca:7b:15:43:6b:ff:44:4f:27:56:1f:
f6:e2:bc:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3dnt1EZ1uimUvJrnxGbVS2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMGM1NGIzYWFlMjUxOTE1ZmZjOThiZDM0YTU1MDE4MWZm
YWI0OWEwHhcNMjYwNDMwMDkwMTA5WhcNMjYwNTAxMDkwMTA5WjAzMTEwLwYDVQQD
Eyg4ODliOTg1YThiZDBkMmFkZTQzZjdlZTI5ODRjYjVlNzA5MzQzYzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArabTrX+yzP83/J/0o+ckH+BAbGO+
SfYMpXnNYzEN19VP1wF5Hg1lC6cinmCWzERr2vnXh5PbhwE78/KF2rIgx/lJQHQ3
3GcHjSX7VFdj2/mHehSJn4599j2uUUjtJzRnXPHi35ELi3FF9sFz4fRMwcs5nPVA
UWsWAvoLK1nKcQ5oEvdp2g7wcLzB/SjDlr9nSOsRmGM00HvFkgvZt3tlYF4OcMX8
qBb8qs9GLY30mCzOHGxMGRwxBORjA9CZKMYr6wBhX/a1sJVigpeiUAghvmAtPbHv
BX5wRqBS57tbCHDXeQGfVAxmBhP+chxPF1mwIjzet/q9iIZ+lndEqtlj6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIibmFqL0NKt5D9+4phMtecJNDxgMB8GA1UdIwQY
MBaAFI4MVLOq4lGRX/yYvTSlUBgf+rSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNjI1MGMtZTA2Mi00MDM3LWI4ZjMt
YmYxZTFkZTJlYTYzLzEvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iNjI1MGMtZTA2Mi00MDM3LWI4ZjMtYmYxZTFkZTJlYTYz
LzEvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8tcsMvN
jvBJKaBxucTJ4OdkNzXDkWhT0RrNh5xt3fSotX5Jg5Xqy14Sxq4pawUkPAiOem1m
DnHwJNJ1rCGOMWSXaEavqJR7axb+Kkiyl63ceJ+Uz/Xbe5mx5AAfG+N7dbPUtvK+
gland/LPIdg/TYi/J5CGaEjsmEeaHE2LGv3hE/NrtY9HElpKAM6NlKIYvCanmSMf
5+ol3xbNkv4bVCd2taJKWYTgFsvHZvgLAJOioWKbbfOH/AIzbYtaC/c0E9AiT/id
+KmG6csZ989rtd9co8hNBK76+QHyJlf2ICTL4N8CMHfxCxdsaUygygDePcp7FUNr
/0RPJ1Yf9uK82A==
-----END CERTIFICATE-----
Generated at Thu Apr 30 17:30:10 2026 by rpki-client