Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
File: jTUmuzG54wxJBF9DaMYC7pi-wBo.mft (raw, json)
Hash identifier: TWKLpqUkwSxvC+SBBEJuuTHu0HdZvMD2NhV5oN1YJKs=
Subject key identifier: 42:E6:87:7B:DB:E3:62:52:DA:62:3F:49:AA:F2:CF:5E:58:A0:E8:25
Authority key identifier: 8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A
Certificate issuer: /CN=8d3526bb31b9e30c49045f4368c602ee98bec01a
Certificate serial: 019D38D368ED861C21FAD7EE3A7325050EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
Manifest number: 05DE
Signing time: Sun 29 Mar 2026 09:01:12 +0000
Manifest this update: Sun 29 Mar 2026 09:01:12 +0000
Manifest next update: Mon 30 Mar 2026 09:01:12 +0000
Files and hashes: 1: gxyLL0IGyiMhhjpj3sLlr_mH5w4.roa (hash: SKKXshDDRLboHf4aa83YEQ13wtjAdxCRnTQaiwngbtU=)
2: jTUmuzG54wxJBF9DaMYC7pi-wBo.crl (hash: /MQ5qTG2z6Q4DTlV78pfEpej8xyuCYO6sLd3R/IeHD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:68:ed:86:1c:21:fa:d7:ee:3a:73:25:05:0e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3526bb31b9e30c49045f4368c602ee98bec01a
Validity
Not Before: Mar 29 09:01:12 2026 GMT
Not After : Mar 30 09:01:12 2026 GMT
Subject: CN=42e6877bdbe36252da623f49aaf2cf5e58a0e825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e1:79:4c:ac:f1:8d:2c:4b:3f:33:db:a5:31:
e6:e2:5d:7a:98:2e:4e:88:8e:f0:a8:a7:b8:68:15:
fe:2a:a6:98:0b:9f:20:a2:29:99:d8:fa:13:48:ef:
e5:9a:b2:2e:ec:6b:d1:ac:dc:22:1f:77:52:ed:d2:
61:02:4f:63:17:61:98:d2:83:56:56:34:bd:36:71:
3a:d7:f5:16:ed:c6:fa:f1:b9:8a:0e:2c:5a:c3:db:
56:4f:40:0f:f9:a8:7c:51:51:41:b7:10:99:ca:89:
33:ba:cd:f4:c4:39:60:1c:91:f6:bd:36:54:8c:2c:
47:e9:4d:5d:c7:96:83:c1:c6:a5:d0:e2:47:e9:3e:
c2:f2:8f:de:64:cc:34:9d:8c:f5:58:27:c1:93:80:
ab:6e:5c:fc:86:e6:0a:0c:89:99:19:d9:65:6f:c0:
53:2f:70:59:fa:f7:c4:f6:7c:92:94:63:ed:01:4d:
62:2e:18:a2:da:e6:13:83:02:e6:4c:4f:d3:11:f1:
07:bb:4b:82:cc:7e:e1:06:ff:d1:d6:26:73:5d:f6:
93:d8:f4:a3:bf:89:ce:93:de:9b:ee:36:68:3c:12:
f2:6f:78:3b:a6:3e:95:d5:93:eb:44:36:36:f2:94:
48:72:51:8a:5b:d0:58:b7:eb:ab:2b:a0:96:e7:1f:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E6:87:7B:DB:E3:62:52:DA:62:3F:49:AA:F2:CF:5E:58:A0:E8:25
X509v3 Authority Key Identifier:
keyid:8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4d:60:b3:6e:c8:e0:3c:b6:31:82:be:e4:be:02:40:af:30:
8d:06:22:08:d9:ef:90:99:07:93:37:71:d1:88:00:1d:4c:af:
93:ed:2d:29:bb:8e:b2:1f:61:76:2a:85:a4:fe:c9:ff:a2:b4:
76:d7:26:e5:fa:47:44:cc:df:aa:7a:c2:e1:19:15:87:f3:68:
0f:b8:75:a4:d9:b4:5b:c8:75:4e:42:1b:d6:0d:de:20:89:4c:
c8:d7:df:e6:aa:42:c2:16:8b:9c:b9:31:84:33:44:91:4b:19:
a8:ca:5e:3d:0a:a9:19:95:01:34:91:8f:b0:8c:21:e3:f8:08:
3f:ad:94:c2:71:e4:7f:87:d2:a4:c0:76:de:56:31:da:98:51:
fd:97:f3:a5:ff:11:da:0e:16:50:ff:52:15:38:5c:fe:42:8a:
d1:00:06:2d:1b:06:35:53:43:8e:41:62:9a:01:3a:8b:a6:c3:
25:e9:10:03:41:93:a7:f4:e8:33:e6:5d:5e:77:3c:b8:c3:af:
57:9e:97:5b:35:e2:ff:fa:53:89:d7:89:07:0e:1b:d4:1e:71:
53:be:68:43:d9:a8:8d:5a:44:08:ce:bf:07:ed:4f:10:0f:f2:
45:19:15:e2:07:ac:4a:4e:b9:97:fc:02:a4:e0:e0:69:11:1e:
68:44:f8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:55 2026 by rpki-client