Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
File: jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft (raw, json)
Hash identifier: iOsCl37KOk6b9MheUSM0q/xmH5OVFsdXFM/YPtugHJY=
Subject key identifier: D2:95:20:BF:FB:22:66:0E:F7:21:53:0A:16:A3:CB:77:C6:DB:F7:E8
Authority key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
Certificate issuer: /CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Certificate serial: 019E739BE6376B42A92B735741F297CD3AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
Manifest number: 051E
Signing time: Fri 29 May 2026 12:00:57 +0000
Manifest this update: Fri 29 May 2026 12:00:57 +0000
Manifest next update: Sat 30 May 2026 12:00:57 +0000
Files and hashes: 1: Tn_7bKvMuX8wX1EpKYGbD8kg1p0.roa (hash: arj2lz3m1CKLXQA+b+0nfQ4tgMR/lYV9tLqCCkGgt5s=)
2: jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl (hash: YroOQxYJKlJNU1FHk153Jq2keBvWyyY0jExjQbopQow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 30 May 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:9b:e6:37:6b:42:a9:2b:73:57:41:f2:97:cd:3a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Validity
Not Before: May 29 12:00:57 2026 GMT
Not After : May 30 12:00:57 2026 GMT
Subject: CN=d29520bffb22660ef721530a16a3cb77c6dbf7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:2b:45:14:b7:10:f7:19:fa:de:0b:fa:18:
3e:89:aa:3f:fa:20:b6:05:2b:35:ce:c1:54:e9:a9:
63:a7:54:ed:b9:cc:95:d1:bd:24:18:a0:23:10:bd:
74:c6:29:f6:e4:c7:0e:6b:2c:47:59:29:c7:49:31:
3a:34:a1:44:f4:43:4b:a7:7c:2d:a4:31:44:f9:5b:
78:25:90:41:24:5d:60:2d:bd:9c:34:bd:7c:69:ed:
88:19:98:fc:c1:90:7c:5d:6c:be:46:cb:a0:a8:62:
33:bb:53:07:6f:4e:8e:e0:5f:11:b4:45:a5:07:77:
53:39:d2:89:ba:a0:d1:f7:7c:e7:ff:ad:15:bf:0f:
37:2b:dd:9a:51:9b:58:05:27:7c:dc:c8:54:a5:55:
dc:de:5f:0c:31:d0:40:32:1e:fb:6d:50:1a:5d:c5:
5c:a9:20:9f:ba:29:66:ef:48:d5:e2:e9:b2:0b:bc:
e5:ab:19:08:5d:46:59:aa:03:a8:cb:c0:90:6c:ef:
96:73:a5:d7:0d:3a:75:81:b9:3a:9e:fa:c9:78:f5:
12:a6:33:65:37:33:3c:36:cf:a3:1d:67:af:51:b7:
0f:02:0a:df:b2:9c:9f:02:ca:ac:14:61:cc:5e:35:
7c:5b:87:e1:ea:69:e9:76:06:4f:dc:ce:0d:17:55:
e4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:95:20:BF:FB:22:66:0E:F7:21:53:0A:16:A3:CB:77:C6:DB:F7:E8
X509v3 Authority Key Identifier:
keyid:8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:39:3a:26:a0:f7:db:36:a8:be:d4:7a:a3:ae:f8:a4:74:ef:
f1:ae:75:88:54:b6:42:36:9d:68:dd:39:51:ed:8d:fd:37:c7:
c5:01:82:06:8e:ac:6a:e9:d4:25:14:5d:81:ad:5d:15:10:8c:
09:40:eb:c8:85:4d:5f:58:3f:32:96:07:8f:17:6a:12:10:5d:
bc:25:15:47:76:ac:84:55:b7:e6:95:b0:d1:2d:25:b3:5e:89:
65:2a:17:dd:56:33:8d:b0:d9:21:c4:92:63:30:14:6a:69:4f:
3b:d6:fd:12:6d:e0:17:6e:ce:2a:cd:19:4f:67:8a:6f:a0:8a:
f2:50:1d:49:d8:4c:64:ee:8d:6b:ed:94:f5:d2:3b:fe:d2:d6:
a8:a0:b1:39:e7:af:87:df:b7:44:4a:1e:b9:e2:5b:21:6f:25:
44:10:77:eb:3a:cb:5c:d2:c3:9c:e2:4c:0f:6e:69:d8:7a:f1:
be:2b:d5:43:15:22:90:1b:64:77:03:18:89:68:9c:95:33:9f:
c3:c4:5b:3e:d0:38:d5:75:91:34:89:21:f3:cf:4b:5c:07:25:
81:65:71:2e:ca:b9:77:17:a6:6a:1e:92:c5:d9:d8:21:ff:78:
86:67:5e:fd:0a:be:eb:f2:89:31:c0:12:ab:53:75:86:10:31:
99:50:3c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 17:04:47 2026 by rpki-client