Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
File: jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft (raw, json)
Hash identifier: nkc86xuTlsf+cvsk5UnPhGDdGMaEdo2glmOv14GRmWA=
Subject key identifier: 2C:D7:45:99:70:07:33:21:BD:C7:24:5C:7D:D7:B7:F0:80:AC:C1:5D
Authority key identifier: 8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C
Certificate issuer: /CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
Certificate serial: 019D8F16BE20CDA54AE2BC73CB09E7D1192D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
Manifest number: 05
Signing time: Wed 15 Apr 2026 03:02:05 +0000
Manifest this update: Wed 15 Apr 2026 03:02:05 +0000
Manifest next update: Thu 16 Apr 2026 03:02:05 +0000
Files and hashes: 1: NEcLFSwv26xLnBwyqRu5JPI3kC4.asa (hash: unJYBX+TeFWqDQL6g6ksbM0rdW10f4yITjYBgb1aAak=)
2: jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl (hash: ywcsB4G9dN3Uf2Y1ApCNkdh/cpCSr0r97iIFSd9PX1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Apr 2026 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8f:16:be:20:cd:a5:4a:e2:bc:73:cb:09:e7:d1:19:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
Validity
Not Before: Apr 15 03:02:05 2026 GMT
Not After : Apr 16 03:02:05 2026 GMT
Subject: CN=2cd7459970073321bdc7245c7dd7b7f080acc15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:2a:7a:50:38:2c:34:df:e9:de:e6:92:6c:
8a:dd:bf:bc:39:a7:d7:33:24:1b:7c:23:fd:50:49:
13:83:da:87:57:6f:fb:ed:c4:15:40:2b:8e:c8:64:
a0:44:a9:30:d0:36:e4:54:7a:54:c1:05:da:b0:43:
8c:a1:f0:94:54:0e:6e:50:1d:73:e7:e2:18:b8:15:
0b:0e:61:b2:d0:4a:08:9a:c2:4d:40:28:96:e4:4f:
90:6e:78:49:81:70:e6:62:d9:f0:1f:a1:40:00:63:
a6:13:e9:81:45:1e:24:b5:d5:f4:7f:4c:76:30:aa:
61:19:48:f5:68:be:1c:cc:58:3f:35:d7:e8:90:b0:
08:e3:54:5b:e0:4a:ad:52:c9:d4:17:1c:f5:8c:e4:
75:51:3d:6d:04:c8:67:6f:31:84:30:5d:99:fd:5c:
be:ba:21:2c:f5:8a:0d:aa:5e:fb:ab:2e:00:82:f0:
00:48:8b:be:45:44:0e:11:a5:b3:24:b2:ec:46:29:
eb:3b:38:d9:71:0d:c1:b1:ef:94:d9:eb:22:51:f0:
34:57:27:f5:82:79:6b:a2:8a:47:ff:fc:5a:1f:0a:
f5:74:96:44:81:44:49:ac:6f:ca:d4:6c:3d:45:1d:
5c:c8:b7:a6:82:16:54:6e:53:09:fc:ea:7b:54:7c:
7b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D7:45:99:70:07:33:21:BD:C7:24:5C:7D:D7:B7:F0:80:AC:C1:5D
X509v3 Authority Key Identifier:
keyid:8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9b:67:a2:65:5f:64:5e:e1:59:cb:03:9f:7f:63:86:34:d1:
be:c9:c7:08:19:81:0e:bb:42:02:c0:d0:e7:49:77:1f:79:fd:
18:02:57:61:8c:bc:3e:c4:1a:4b:ed:15:18:20:02:c0:1f:83:
ce:b2:4d:d5:da:f5:b3:e4:10:7f:f6:55:a9:d5:7a:9b:97:e4:
64:e3:db:d6:64:62:dd:9d:3c:89:87:85:43:13:70:cd:45:0d:
70:70:f5:f3:66:b0:f7:61:ff:18:97:e3:a6:e6:1b:f9:72:13:
c7:98:a4:59:f6:6d:8c:cc:d6:cd:87:a9:0a:b5:06:c2:0a:98:
90:ca:a4:a8:1a:c2:9a:29:62:65:21:a3:ac:4c:ad:40:f7:84:
e7:a5:66:8e:b9:3a:bb:fd:16:8f:58:e6:2d:a9:b7:f0:69:d4:
db:3f:34:41:af:e8:15:15:c2:62:d3:bf:a2:31:1e:24:8d:8a:
3d:b2:8d:b3:7c:1c:c8:9c:32:72:9c:d1:b5:36:bc:3e:eb:b3:
59:a3:5f:bb:18:eb:85:1e:8f:8d:ee:d8:ab:48:6c:8a:6d:ee:
f9:68:57:51:e2:2a:f5:a8:e3:a5:ef:f9:b0:20:85:ca:a7:b4:
20:4b:fc:48:43:10:15:85:3b:2a:65:04:45:4f:5d:7a:ec:e3:
ac:c7:89:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 06:28:09 2026 by rpki-client