Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: whcLV4wc68E8qhvqwbG4n6KFuYUurZZIgGfDCmvx8Fs=
Subject key identifier: 9B:D7:0B:00:9C:A0:FB:82:7A:FB:BF:9B:E4:CB:9F:DB:66:AD:E2:CA
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 019E284AB4C292C71CC0878D9493FF1DB00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 1239
Signing time: Thu 14 May 2026 21:00:44 +0000
Manifest this update: Thu 14 May 2026 21:00:44 +0000
Manifest next update: Fri 15 May 2026 21:00:44 +0000
Files and hashes: 1: fpTANtI4bRz4exyqA72XnfqWeAU.asa (hash: AzHMEe9qZzasIn392H8jsDvUxwHyy/nAONClfoo+kAc=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: DZOMyImDQKK9HenkQwwsimyOP/ksJnEMHYNKxI0E1p8=)
3: r_qY6TIFDc-2C46p1mCYOq9l7j4.roa (hash: eoGRneGgUw90MpEMiAODUHzFCL/oN3PFTCCGwv4cx5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:4a:b4:c2:92:c7:1c:c0:87:8d:94:93:ff:1d:b0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: May 14 21:00:44 2026 GMT
Not After : May 15 21:00:44 2026 GMT
Subject: CN=9bd70b009ca0fb827afbbf9be4cb9fdb66ade2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:b2:0d:2e:ba:e9:b1:07:8d:01:00:1e:bb:
06:97:21:db:36:91:ab:e3:6c:47:a2:cb:76:3f:98:
5b:9f:b2:ab:06:99:c2:a1:0c:da:85:99:fd:09:0e:
46:27:4d:a4:84:e7:66:6d:15:d8:f6:82:d9:ae:d8:
6c:cf:f3:20:76:9d:d8:61:37:6a:d4:24:62:22:58:
60:b5:97:71:f7:a2:23:3d:bb:33:1e:03:cf:8f:b6:
58:ec:2b:2c:11:eb:59:74:ab:56:fc:91:f2:cd:30:
b0:d4:21:23:25:6a:60:f9:c9:de:3a:d9:2c:92:ba:
71:f3:12:16:e7:b1:eb:00:c5:a4:41:d8:06:35:c4:
a9:78:e7:6a:23:1a:e3:d3:d6:02:ce:27:a9:3c:6b:
50:8a:95:ca:4b:99:00:c8:32:90:4c:35:c1:34:4e:
f4:0e:84:b5:f9:6a:ea:35:e8:b8:c1:07:ee:60:b5:
27:73:60:50:ba:bd:dd:09:4e:da:d5:30:89:9f:0e:
9d:22:6a:6a:e2:a9:53:0c:0d:df:4b:20:36:f6:c7:
40:55:85:9a:c4:86:6f:65:23:57:38:32:fe:b6:1a:
23:d5:6f:1e:1a:a3:6b:ba:c3:11:70:28:5a:4b:f6:
8d:fb:64:3d:15:68:04:ad:b6:2e:18:16:d9:39:ad:
de:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D7:0B:00:9C:A0:FB:82:7A:FB:BF:9B:E4:CB:9F:DB:66:AD:E2:CA
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b3:74:be:e5:18:14:55:6e:73:5e:28:e4:c8:69:51:7e:8a:
38:50:c5:ba:fd:bd:9f:47:bb:3a:2d:34:be:e9:8e:97:d2:b5:
f5:ff:33:c1:2b:1f:3c:b9:93:56:e0:3b:2d:8d:42:f7:87:6b:
33:08:22:88:76:a5:3a:66:c6:15:9f:9e:54:3a:f2:ec:44:b8:
11:58:13:2a:3a:7c:0b:a6:97:0d:74:d9:a2:9b:cb:d0:20:e0:
6f:5e:1e:46:98:ea:b1:f1:0d:7a:91:46:8e:b8:37:c3:1f:68:
db:75:54:81:18:f7:45:21:b3:0f:64:78:a4:89:20:71:29:59:
86:1c:68:12:0f:1c:e4:fd:18:9d:ed:80:6b:33:4b:49:d5:8c:
2b:2b:a1:37:4b:aa:5f:06:e5:43:bd:4f:af:d3:5d:a8:22:31:
b0:12:a9:e4:fd:24:7b:44:10:da:8a:77:27:e2:ba:bf:17:ed:
0e:fe:9d:ed:0f:38:c6:ba:a8:68:b1:96:97:97:78:f8:d9:6c:
3f:20:aa:54:fb:32:9b:6f:b5:9e:fe:15:53:b7:97:62:6f:a8:
6c:54:53:3c:15:60:d2:8a:99:e5:e1:88:9d:51:26:05:82:c6:
fb:88:8c:9a:5a:b0:02:13:b3:dc:6f:cc:12:4b:c0:67:99:25:
de:64:e1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:01:51 2026 by rpki-client