Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
File: jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft (raw, json)
Hash identifier: 395nwQXE9uifZ32wAjSa89gZUdJLnuZ9y2SPXOsclzI=
Subject key identifier: 4C:CD:0D:86:FB:0B:19:88:2D:D5:94:D3:E0:03:1C:10:0B:7F:51:80
Authority key identifier: 8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C
Certificate issuer: /CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
Certificate serial: 019EFBA9186229B28CC66AF1D2D138CF391D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
Manifest number: C3
Signing time: Wed 24 Jun 2026 22:03:43 +0000
Manifest this update: Wed 24 Jun 2026 22:03:43 +0000
Manifest next update: Thu 25 Jun 2026 22:03:43 +0000
Files and hashes: 1: jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl (hash: MUAVjPV/l93R2EWYBquEMOsOuuaH28AkTxOaB5PmunE=)
2: y0t4f3SYiNI2RVeLlWE56pwZqao.asa (hash: 7OCsijFOaHb7cmOa3vj0zykIPZySXdI6fNcvKKq6Oig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 22:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:a9:18:62:29:b2:8c:c6:6a:f1:d2:d1:38:cf:39:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
Validity
Not Before: Jun 24 22:03:43 2026 GMT
Not After : Jun 25 22:03:43 2026 GMT
Subject: CN=4ccd0d86fb0b19882dd594d3e0031c100b7f5180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1d:9d:46:9a:81:93:87:86:1b:d2:89:f2:b8:
4e:c4:27:b8:d3:c4:f6:5f:bf:5b:3a:22:d5:ac:29:
82:d5:53:fc:02:1c:be:e3:3c:ab:ce:b4:7f:87:8d:
93:90:b2:39:f7:3b:49:95:97:90:db:af:bd:69:97:
6d:0e:12:8e:1a:e1:6f:0d:16:33:83:11:6a:01:14:
52:a5:a6:bf:d9:4f:ca:be:88:e9:b7:21:de:01:13:
02:33:d1:a6:11:a4:be:2d:d6:0f:f2:77:da:ae:2d:
d3:6a:3e:8c:06:fc:b0:b8:43:c6:59:c3:dc:82:b8:
42:aa:76:e3:28:ae:6b:3c:a9:ed:55:0e:e1:d0:f5:
30:72:f8:74:de:02:bd:c6:60:84:08:2a:f8:53:0e:
10:ab:09:08:52:22:e7:84:f6:59:64:89:ea:8e:53:
8c:03:f4:f6:53:d9:b9:63:99:5d:24:53:d8:77:2d:
59:df:a7:94:60:5c:d6:85:4e:46:9c:7c:0a:52:e5:
52:3e:70:79:e1:41:1d:7b:43:7d:9b:3f:ef:49:54:
22:31:d4:74:08:36:61:a3:04:5c:3c:9d:7f:70:a4:
b9:67:4a:4b:d2:5f:b8:c5:17:08:9a:5a:2b:54:45:
5d:65:60:e0:4a:8d:52:b5:81:c5:9e:71:0a:e6:4c:
c2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CD:0D:86:FB:0B:19:88:2D:D5:94:D3:E0:03:1C:10:0B:7F:51:80
X509v3 Authority Key Identifier:
keyid:8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:46:b2:a3:57:ce:07:87:78:51:6c:29:98:2e:58:79:13:5a:
1c:20:aa:b6:30:ec:9b:78:4b:d7:16:66:38:5a:b0:b0:0f:c4:
2f:b7:73:84:78:7b:11:ad:59:00:cf:04:b8:5c:b7:6a:e0:23:
38:f2:ae:02:3e:15:84:83:24:53:a1:79:b0:2e:e2:59:f3:46:
1a:84:1a:3d:7f:5c:b8:fc:ff:9f:db:d7:02:f0:4b:15:e4:a0:
40:85:f3:08:ab:bd:5d:c3:f3:c1:e8:5f:fb:d1:4c:45:a3:39:
49:41:1e:59:6c:b3:ed:1e:89:0f:e0:b7:52:f3:b3:f6:62:0c:
e3:4c:06:34:a6:c4:bd:a0:c5:d0:8d:ab:6e:cb:bb:f7:d8:32:
cc:95:2d:86:6b:24:59:04:4d:e6:53:14:3e:2f:e9:68:9c:5c:
b9:17:1e:3e:61:d8:a6:fb:8c:a7:99:0a:15:97:ac:1f:10:b4:
10:e3:13:29:4e:6b:ec:9e:d2:ed:6b:9c:3a:35:c8:db:03:4e:
81:3f:cd:04:42:5b:f6:69:f1:44:f2:24:25:4b:e9:92:d5:b5:
2a:29:74:d8:b2:91:18:f7:9f:c2:29:89:7e:ba:f3:1c:77:0e:
af:79:e7:7c:dd:2b:7f:29:7e:09:a8:96:e5:92:76:f9:cc:f5:
98:47:34:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:32:00 2026 by rpki-client