
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: RglOUto7pRz/bWZuwkz1fUjLr90jWLvKPMrgtg2f2qM=
Subject key identifier: 90:5F:23:BB:23:70:14:FB:6F:CF:7A:89:BE:67:AD:D6:5D:20:1E:F7
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 019E30A93D5DA94B155262482F3890F1D6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 1914
Signing time: Sat 16 May 2026 12:00:58 +0000
Manifest this update: Sat 16 May 2026 12:00:58 +0000
Manifest next update: Sun 17 May 2026 12:00:58 +0000
Files and hashes: 1: 2u4DW90i6pJn6TNxJSQdCJPO9PA.roa (hash: z+7kYSl922ZGHRd4ve+viSStXQUCmw3QVQ5Lgiw6cXk=)
2: 7YQffxRE0rSLQxPURshHecG_JTc.roa (hash: uQCBTYo2a3hrZABdDnP1fnClvfQjBgoT9LYi5KTntlk=)
3: AsS6Pm-pzCccfpBN7h6vWbKNH-0.roa (hash: QSEqtIt5+vLOlNNT3jvuTFm3bvcUsPaUnJycOPB71zs=)
4: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: vVFX+ci88KeVYYay96+DXDqafP5w4pYhz18cabqfHmE=)
5: tgt22Xbh2dYkc5Tjjf4Gx-Xa2eY.roa (hash: XvxWV+DKU6Gtey3JNABlz2pi2cGrZK+aZ7VTSpuGXSw=)
6: vM268rav9B38xfaLn_yfc-f5loY.roa (hash: L3My8FF3Oma4omxz1SHFdJJ/WgvkO4FPZLAe6cqle1I=)
7: wsHpLkBYw1EeftdDR6sp04VigBw.roa (hash: /kY3oNdD/MtjNpfjYxiTgX3Hn7hLZLYXv3Sx0dMMAnA=)
8: zOqpyrA-mf4nkA9uzKu6WERUh9M.roa (hash: YZ3w9TWP7euxVmL2Kl9d48zmDrmJVrnCAiOTTTRIhhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:3d:5d:a9:4b:15:52:62:48:2f:38:90:f1:d6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: May 16 12:00:58 2026 GMT
Not After : May 17 12:00:58 2026 GMT
Subject: CN=905f23bb237014fb6fcf7a89be67add65d201ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:54:a4:cf:0b:24:45:99:f1:90:38:45:95:df:
a0:a4:98:96:b9:ad:e7:a4:e8:93:fb:49:1a:a8:14:
e9:83:b9:70:68:85:c1:a6:42:98:71:1e:a2:d7:07:
fd:70:e6:7b:ca:43:ac:bb:24:e6:0a:16:e8:83:ed:
d2:5a:9c:1b:ea:d7:97:07:8f:ea:dc:83:48:1b:3a:
da:e8:25:cc:41:90:08:ec:ce:fb:23:bf:53:d9:c1:
8f:c7:54:7e:88:f9:ea:7e:66:26:5e:4e:42:1f:52:
7f:ff:25:0a:f9:bf:72:56:32:4b:3b:db:d1:fa:d2:
a5:a9:3d:16:ba:2f:06:e4:f2:5c:c6:67:0f:ff:4f:
bf:9a:c1:76:5f:35:59:54:a1:ce:81:d1:b5:52:69:
17:4c:f2:fe:4a:99:df:46:eb:98:ce:5f:22:d8:6a:
63:c1:eb:92:3c:4c:78:1c:65:b4:bc:0a:7f:9a:14:
e3:e3:b3:d3:2e:57:7d:10:b6:f0:a2:d2:55:65:ce:
f6:c9:f9:af:0b:d1:6c:c5:f3:05:d5:50:cc:70:cd:
de:dd:3b:2c:2e:cb:11:41:9d:72:b3:6f:bc:00:1e:
6f:06:3b:0e:69:d0:b4:a7:1b:e1:4a:50:af:d9:d8:
ba:74:9b:31:af:dd:1d:fc:0d:9b:26:65:04:bd:21:
d1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5F:23:BB:23:70:14:FB:6F:CF:7A:89:BE:67:AD:D6:5D:20:1E:F7
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4f:4a:74:f6:2b:c9:1a:ad:d8:8d:e2:3c:65:ac:ba:81:d2:
60:9f:51:b2:94:c4:eb:23:51:dd:1e:c3:d4:0a:15:3c:52:95:
d5:69:86:fd:1a:94:10:7d:6b:34:cc:c1:cf:e8:08:43:ee:db:
13:8e:bc:ea:96:6f:7c:1e:5d:a7:62:69:53:80:d1:1e:af:c9:
8a:ef:b7:25:3a:db:05:3e:0c:66:2a:d5:c3:3e:0d:81:dd:20:
ee:17:e6:00:d5:9c:ab:56:30:23:52:d2:f9:ce:b4:a2:ce:14:
00:11:e5:79:62:6f:34:88:0f:f2:3f:e8:c5:91:d4:10:62:22:
b1:4b:84:62:54:7f:7d:c5:5b:b1:37:45:3d:1e:43:a8:51:5f:
ac:75:65:f3:d8:b6:28:e3:fa:30:f9:29:37:af:f0:cf:de:cd:
ca:c7:16:c5:48:cc:b3:ef:27:ed:e6:5b:0f:15:d0:e8:4d:3e:
55:ff:f9:0c:7a:bd:c2:c0:a2:65:bc:04:16:f6:6c:e2:dd:e9:
a5:46:ab:f0:ed:18:49:98:93:0e:6e:3d:65:ef:a7:e1:15:05:
2c:76:ab:d6:a4:ec:91:a8:14:ad:32:15:6e:d0:fb:36:0b:4a:
3f:08:df:3d:13:55:cc:b3:30:0b:34:88:61:1d:16:a7:8f:a6:
34:de:4f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:14:54 2026 by rpki-client