Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
File: jrM9OZ3Q9flhftTkcOa9ydELeiA.mft (raw, json)
Hash identifier: UMrdEJE+qJIQR9y5jTzRpR/wdLOngm5D1yMEnA4RVC0=
Subject key identifier: 9A:5C:6D:ED:A7:CA:A6:0B:1A:10:FC:2E:9E:71:D8:FC:C3:24:9D:8F
Authority key identifier: 8E:B3:3D:39:9D:D0:F5:F9:61:7E:D4:E4:70:E6:BD:C9:D1:0B:7A:20
Certificate issuer: /CN=8eb33d399dd0f5f9617ed4e470e6bdc9d10b7a20
Certificate serial: 019F13E5ACF82FAA87F447E750B1E2CBD4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
Manifest number: 0118
Signing time: Mon 29 Jun 2026 15:00:46 +0000
Manifest this update: Mon 29 Jun 2026 15:00:46 +0000
Manifest next update: Tue 30 Jun 2026 15:00:46 +0000
Files and hashes: 1: _Wy5a31X0fWVI5kzqNmJQQC4UbU.roa (hash: 9Bcaw7GkeT0B0JGjnO2Z6JkUkn/KrawL89AtsYKJKU0=)
2: jrM9OZ3Q9flhftTkcOa9ydELeiA.crl (hash: S+SPNA7NRVS1OXwLDzknt5gSU9D727EyI0anTClOPL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:e5:ac:f8:2f:aa:87:f4:47:e7:50:b1:e2:cb:d4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb33d399dd0f5f9617ed4e470e6bdc9d10b7a20
Validity
Not Before: Jun 29 15:00:46 2026 GMT
Not After : Jun 30 15:00:46 2026 GMT
Subject: CN=9a5c6deda7caa60b1a10fc2e9e71d8fcc3249d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:99:03:c0:d9:e2:d4:74:5f:1c:ec:4b:7c:
41:38:07:12:32:a2:ba:44:e1:50:13:a4:60:90:3a:
f4:51:f0:5d:c5:bc:1f:3a:fa:9c:6b:6b:f0:4a:ad:
c8:9a:3d:1a:d7:13:66:59:a1:09:b8:ed:c5:97:82:
0a:17:9f:10:ea:82:c2:66:b1:86:d1:3b:29:43:7f:
90:fe:22:fb:3f:9a:c0:ac:e5:5b:c0:97:33:8d:71:
c6:5d:e5:85:c7:d4:d4:63:2d:56:e0:87:d3:bc:05:
0a:da:f6:5b:e5:7b:1a:68:b2:40:f4:cb:0b:e1:5f:
ed:7a:f0:8b:02:76:b5:ff:2a:40:2f:74:e2:11:b1:
d3:7e:fb:92:17:7d:44:63:11:52:d9:fc:55:b7:6c:
56:db:fb:7f:cf:27:e4:9d:16:2c:b8:85:f5:76:09:
2a:9f:79:e1:dd:1a:81:3b:8b:57:43:27:8a:a6:01:
8d:73:3b:fb:50:5f:37:8d:96:5a:eb:b8:1b:53:3d:
cb:da:23:6c:f2:c1:ec:65:2b:81:6d:b7:f4:ae:2a:
ae:af:ef:2f:74:90:f0:10:59:90:41:60:a7:f3:a8:
31:e7:ac:3b:4a:f6:40:9b:6a:9a:02:32:79:b1:9f:
74:58:8f:c9:0f:b5:6d:e2:0a:b8:8a:6f:e9:78:bd:
c1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5C:6D:ED:A7:CA:A6:0B:1A:10:FC:2E:9E:71:D8:FC:C3:24:9D:8F
X509v3 Authority Key Identifier:
keyid:8E:B3:3D:39:9D:D0:F5:F9:61:7E:D4:E4:70:E6:BD:C9:D1:0B:7A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3e:dc:35:2a:86:da:c7:d9:94:d1:27:0b:74:d1:01:ef:54:
e1:b8:6d:ef:f3:73:11:99:cb:e5:3a:4c:78:ef:6e:72:ba:4c:
27:ec:2b:29:cb:8e:44:1e:75:43:2f:cf:a5:fb:44:5e:80:02:
d1:49:61:f5:81:16:e7:8f:3d:3a:f9:e0:6b:be:6c:06:cd:51:
cf:ef:48:16:e2:8c:de:63:da:a7:bc:48:b0:d9:fa:5d:67:1b:
3b:7c:53:62:db:1a:05:c2:64:47:2a:43:a9:80:70:a3:73:ec:
03:97:51:65:db:7a:70:3e:8e:13:83:d3:d1:66:84:a7:3f:c0:
90:85:2c:0c:4c:a6:43:e6:6c:a4:61:7a:84:43:3d:17:7d:14:
d5:dc:1f:d1:a7:88:fb:eb:ce:d8:90:b6:9e:73:83:b2:6b:c7:
b4:71:01:07:3a:cd:38:b1:4c:79:09:03:57:9b:ec:c0:e4:13:
d5:ba:fe:e2:2d:b7:87:58:07:84:fb:aa:c7:5b:d3:77:6e:1e:
ee:46:b0:18:85:6f:b3:8a:9b:3a:c5:38:33:4f:86:dc:27:c6:
bf:ef:7e:6b:fe:35:f2:30:df:17:63:48:1c:22:f9:37:07:14:
9d:9d:59:22:b1:ef:14:af:f0:65:ce:49:51:2e:1d:3c:7f:5c:
01:bc:c0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 18:59:42 2026 by rpki-client