Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8490a4-87c1-4b8c-8344-2ad02eb04915/1/jBfwTpxAdFinrJrRX3oMzqURulI.mft
File: jBfwTpxAdFinrJrRX3oMzqURulI.mft (raw, json)
Hash identifier: MxPXfI2Xf8XihIJtyy36hWquCcM+bkWyzsGaE9l2o90=
Subject key identifier: 1B:F4:69:DC:92:9A:E1:34:C1:4C:0A:88:05:FB:36:D9:4F:FE:B1:5F
Authority key identifier: 8C:17:F0:4E:9C:40:74:58:A7:AC:9A:D1:5F:7A:0C:CE:A5:11:BA:52
Certificate issuer: /CN=8c17f04e9c407458a7ac9ad15f7a0ccea511ba52
Certificate serial: 019E21C2D4D7B4704D548E121A5C82598F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBfwTpxAdFinrJrRX3oMzqURulI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8490a4-87c1-4b8c-8344-2ad02eb04915/1/jBfwTpxAdFinrJrRX3oMzqURulI.mft
Manifest number: 02
Signing time: Wed 13 May 2026 14:34:37 +0000
Manifest this update: Wed 13 May 2026 14:34:37 +0000
Manifest next update: Thu 14 May 2026 14:34:37 +0000
Files and hashes: 1: jBfwTpxAdFinrJrRX3oMzqURulI.crl (hash: u6hwa6T4KYOJpWFRXAifm+A7EtARtrn4oa6H2fmKdo8=)
2: rOPLVatKhx4LZjWutE2ocwHKK4s.roa (hash: hTrWRKSl8UfXdS1Ma2/8We9N4QwcUi3+putJyD3QtJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8490a4-87c1-4b8c-8344-2ad02eb04915/1/jBfwTpxAdFinrJrRX3oMzqURulI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8490a4-87c1-4b8c-8344-2ad02eb04915/1/jBfwTpxAdFinrJrRX3oMzqURulI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBfwTpxAdFinrJrRX3oMzqURulI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:34:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:c2:d4:d7:b4:70:4d:54:8e:12:1a:5c:82:59:8f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c17f04e9c407458a7ac9ad15f7a0ccea511ba52
Validity
Not Before: May 13 14:34:37 2026 GMT
Not After : May 14 14:34:37 2026 GMT
Subject: CN=1bf469dc929ae134c14c0a8805fb36d94ffeb15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:a8:e7:23:27:14:fc:8d:1b:26:b1:7a:dc:
39:b4:15:d1:72:81:e3:46:88:67:6d:09:be:fe:54:
c6:f2:dc:d8:54:73:c2:70:43:a5:8e:09:f5:97:cf:
0d:48:24:d5:2a:47:73:df:f5:91:7f:a9:53:ed:1e:
e0:b7:70:3c:5b:d8:16:49:53:2a:0f:e8:ce:03:71:
d4:cf:94:02:6e:0b:7f:4f:05:45:b2:68:31:21:d0:
88:cf:11:4b:cf:60:84:c1:f9:01:54:f3:03:08:08:
a0:65:e0:4e:93:3e:d4:33:fd:c9:ac:63:ad:9c:3f:
41:76:bd:09:f8:b5:5f:22:5b:16:5f:85:6e:63:e5:
95:75:a9:88:c3:8b:f2:db:65:be:a8:9a:06:5b:b7:
ac:7f:d0:b7:eb:d7:a8:56:cf:0a:5d:b9:f3:c3:ea:
57:1a:b2:cd:1d:f9:7c:cc:c2:00:af:ff:fb:e7:26:
01:f8:67:01:cb:5d:b9:ab:01:57:23:6d:63:0c:86:
7e:aa:1a:f7:48:c1:0c:06:94:29:38:c1:14:cc:33:
a2:bc:79:26:66:fe:06:6d:52:3f:06:ca:ab:aa:93:
97:f4:91:01:0c:bc:6f:34:65:b5:c0:79:4a:7b:ca:
af:36:61:9d:3d:12:49:5f:e9:da:92:4a:c7:45:ad:
da:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F4:69:DC:92:9A:E1:34:C1:4C:0A:88:05:FB:36:D9:4F:FE:B1:5F
X509v3 Authority Key Identifier:
keyid:8C:17:F0:4E:9C:40:74:58:A7:AC:9A:D1:5F:7A:0C:CE:A5:11:BA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBfwTpxAdFinrJrRX3oMzqURulI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8490a4-87c1-4b8c-8344-2ad02eb04915/1/jBfwTpxAdFinrJrRX3oMzqURulI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8490a4-87c1-4b8c-8344-2ad02eb04915/1/jBfwTpxAdFinrJrRX3oMzqURulI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:48:cb:be:64:ba:49:f3:f0:7c:2d:bd:a9:fe:99:bc:7d:1d:
2b:4b:83:b7:38:41:6d:49:d9:72:da:56:29:3d:e5:af:3e:e9:
a8:5a:44:4a:27:e9:5a:eb:49:5a:3f:77:df:9c:ab:1d:ae:2c:
89:2d:1c:f7:bf:39:87:f0:14:c4:ba:00:03:fc:88:f4:0f:0d:
7f:5d:89:ba:e9:38:78:9b:66:bf:d3:35:e2:fc:ba:b6:d2:fd:
43:9a:d5:59:9f:9e:82:2c:9c:bd:96:7c:6b:6b:aa:e7:40:b9:
11:2f:62:b3:85:8c:25:25:93:2e:29:d3:b1:a1:5c:fa:d7:ec:
f2:c4:54:cd:ca:b4:2f:9e:a3:7b:7c:f7:b0:6d:45:1e:a7:4c:
1d:26:68:82:18:a3:98:59:2c:31:fc:73:7a:34:01:5d:fa:4a:
a0:9a:6e:1b:4a:12:d7:b6:20:29:ac:66:97:c7:ea:c7:08:75:
4d:b3:96:7c:e3:3a:93:17:7c:cb:2a:9d:03:2c:7e:d7:22:da:
85:38:a9:76:62:99:38:44:c1:07:1c:1a:ce:c5:51:1e:f4:86:
2c:74:3d:6c:30:1c:ed:b2:35:57:ee:77:23:d0:8d:67:8e:a8:
75:71:6f:43:7a:46:b4:b7:bb:e9:35:33:f0:bd:2b:bd:9e:26:
d5:22:54:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:45:33 2026 by rpki-client