Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
File: jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft (raw, json)
Hash identifier: 6ffmEi4zSTXLak9n5Tdxth3FQfsdqnCvgC8/sohX++A=
Subject key identifier: 60:0D:9E:99:56:CD:60:74:01:29:E0:02:15:A7:E1:68:7F:33:3E:5B
Authority key identifier: 8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C
Certificate issuer: /CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
Certificate serial: 019FF8A36CC233D765C8B7586D61C4ECB5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
Manifest number: 0146
Signing time: Thu 13 Aug 2026 01:01:27 +0000
Manifest this update: Thu 13 Aug 2026 01:01:27 +0000
Manifest next update: Fri 14 Aug 2026 01:01:27 +0000
Files and hashes: 1: jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl (hash: XnxWY9ouxNfnaulT7RMG972OS7WhTfcgHmNYAvm2q4I=)
2: y0t4f3SYiNI2RVeLlWE56pwZqao.asa (hash: 7OCsijFOaHb7cmOa3vj0zykIPZySXdI6fNcvKKq6Oig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:a3:6c:c2:33:d7:65:c8:b7:58:6d:61:c4:ec:b5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
Validity
Not Before: Aug 13 01:01:27 2026 GMT
Not After : Aug 14 01:01:27 2026 GMT
Subject: CN=600d9e9956cd60740129e00215a7e1687f333e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:19:d5:fc:3e:3a:c7:9f:d1:35:30:34:5c:
f8:52:df:1b:f9:44:82:a5:cd:ee:20:6c:43:39:99:
d2:ee:56:7d:a3:0c:f7:21:be:51:b3:b1:a6:fe:93:
80:21:46:cc:92:6d:40:2e:08:af:c6:f7:90:49:59:
1a:06:fd:b8:b8:4e:ad:84:66:b4:fb:67:95:68:26:
51:70:83:30:13:ef:09:3e:ae:e8:e9:2b:6e:09:b1:
7b:08:d0:16:b0:3f:cd:58:63:05:60:1a:61:1f:4d:
28:55:5b:d9:8d:3e:10:c9:1e:55:91:73:82:c0:a5:
1a:1c:d7:aa:6c:2e:8c:fe:6c:38:70:9b:6a:ee:38:
d6:e5:9d:95:d0:02:1b:ac:34:6e:1e:ea:e2:9e:d7:
d7:41:d6:28:fb:5e:53:96:7d:42:aa:07:6b:c6:f5:
07:38:fd:d6:15:12:b6:d2:e1:17:6d:ee:3e:5f:36:
b7:99:d0:a5:2d:9f:2d:b0:fc:92:e3:83:e6:56:ce:
0e:a0:f8:db:8c:f1:55:eb:6a:55:fc:bf:41:47:ee:
53:7b:25:3e:a8:17:6a:d0:00:26:97:b8:fe:e5:0d:
4d:8c:77:e1:af:92:58:d5:8a:9f:a0:bb:85:4b:e6:
52:fa:96:6e:02:c9:92:ba:61:47:d5:33:8c:f3:ca:
d1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0D:9E:99:56:CD:60:74:01:29:E0:02:15:A7:E1:68:7F:33:3E:5B
X509v3 Authority Key Identifier:
keyid:8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:95:6c:3f:ec:c9:5a:37:c3:0b:be:76:fc:89:30:a6:9c:ea:
8f:31:f3:06:52:02:3c:fc:14:59:a7:85:af:b7:57:b4:f6:14:
87:da:5f:22:6b:f2:da:bf:9a:9c:ef:3c:ba:ad:30:45:f2:52:
1f:76:ea:4d:7c:6f:e8:2f:76:fa:de:d1:26:1f:e9:04:99:42:
8c:93:ff:b8:5f:a9:0c:c2:b3:fa:52:95:b7:92:db:ed:e0:6f:
2a:90:7d:9b:75:00:cf:56:3c:1c:7c:9d:14:55:bd:ea:6f:19:
e5:01:cb:78:bf:23:33:a4:0e:6a:4a:d0:62:0f:6a:00:54:48:
7d:ba:e2:e3:f6:d5:a9:31:a6:ff:20:d5:66:32:10:36:ad:a4:
9b:28:3d:4a:4d:66:82:cd:e1:cb:79:cc:d8:d7:49:fc:77:d1:
75:20:26:d0:23:9a:f0:be:0e:f0:1f:77:66:21:6f:1e:4f:d6:
c2:6b:79:e4:e6:fa:7b:1a:17:60:7f:a3:79:29:f3:17:3e:3d:
94:9a:1f:4d:48:be:cc:7e:17:fc:d0:b5:c1:1f:c0:65:dd:68:
eb:1b:37:1f:05:3a:19:be:b7:33:4c:8a:9f:75:95:24:66:b4:
56:c9:0f:5d:b4:2f:73:ac:2f:6c:da:3d:33:bc:67:87:e3:d8:
a1:b6:a2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:05:13 2026 by rpki-client