Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: 0tVKuivryzIJVquPkykVRXb3Z2EBO0tgd8Z2iZ2fGFk=
Subject key identifier: F2:E0:8E:BA:22:88:41:1E:83:EC:6D:82:91:04:DB:33:F0:BB:0F:FC
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 019E28F009B9CAE3089051072EBDE558D6EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 190E
Signing time: Fri 15 May 2026 00:01:20 +0000
Manifest this update: Fri 15 May 2026 00:01:20 +0000
Manifest next update: Sat 16 May 2026 00:01:20 +0000
Files and hashes: 1: 06CiJdO9HY0Au03AcAurjfb-Gbo.roa (hash: G2id8BLM47E0KAXCQ9t2IpyzxImdIOcWfQNsmcd/Suw=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: /2m0hNHmz3ntxbDu9q/nQ2hwHUX22McUlkbMdQXVGwY=)
3: K2TwYBRgnBctdKuDbIfCz7Wzozo.roa (hash: ELimPcvkoPpYP48krh/bT87ryT9UcmZsjC29243OEEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:f0:09:b9:ca:e3:08:90:51:07:2e:bd:e5:58:d6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: May 15 00:01:20 2026 GMT
Not After : May 16 00:01:20 2026 GMT
Subject: CN=f2e08eba2288411e83ec6d829104db33f0bb0ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f7:88:e0:09:67:cf:92:86:b4:eb:da:0f:c9:
01:58:7d:ea:1c:be:e2:8c:3e:40:f9:b8:c8:25:dd:
3f:3e:e7:45:45:fe:9f:04:6a:0c:75:da:a6:4d:f7:
06:e1:4b:f7:b1:25:57:4a:0f:c1:19:df:1a:87:46:
1c:be:d3:2d:fe:1e:43:b8:71:ac:25:8f:00:48:0b:
f0:bb:ae:61:a7:32:00:97:77:4c:72:d9:16:49:96:
6e:26:99:86:ec:48:44:72:55:7e:1b:eb:41:e5:7e:
11:33:22:39:d1:b1:73:71:73:e8:b9:ee:8a:37:65:
34:a3:49:69:00:21:fc:87:37:2b:6c:b8:8e:08:5e:
d2:66:d0:9b:43:3d:03:2c:7e:03:71:e0:dc:44:73:
3e:17:64:bc:4b:a7:8b:31:94:f0:57:d4:df:f5:14:
59:05:15:10:cc:cf:d7:94:c9:2f:21:f4:f5:e8:bb:
e7:b5:10:e8:ff:af:d8:d2:7c:39:e2:65:3b:0b:5a:
8a:2f:b7:0a:1b:7e:73:3d:54:00:78:0d:e9:6a:e3:
28:2d:e2:a7:f3:58:47:61:9c:97:2e:06:46:37:93:
41:0e:1a:59:d5:67:5a:73:a1:b9:a3:54:2b:ba:9f:
e6:6f:9d:09:a4:b0:4b:c4:28:85:21:80:25:66:c2:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E0:8E:BA:22:88:41:1E:83:EC:6D:82:91:04:DB:33:F0:BB:0F:FC
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:dd:f3:db:72:b0:8e:3f:ab:d7:76:d8:5a:d8:8b:67:75:85:
0e:72:fb:a9:0a:46:c8:98:79:a7:d0:90:4a:a7:6c:ae:fd:6b:
3f:02:23:9c:53:58:47:d3:22:37:fb:c2:b4:c0:f9:10:3d:12:
20:e3:99:32:52:1f:78:6c:67:09:b0:c4:15:40:fa:0c:41:29:
0a:ce:4e:da:60:11:59:7f:39:04:73:8b:ce:23:a5:1b:92:69:
74:5a:a6:0d:39:a3:71:a9:f1:70:4f:d6:8d:1b:8d:40:7e:0a:
c0:47:73:bc:d0:b5:b1:f6:a9:96:66:08:24:88:9d:0c:d3:96:
76:1c:f4:6e:0f:7d:36:83:b8:52:41:7c:46:2d:00:2f:2f:d1:
8a:9e:c9:cd:de:87:10:92:30:d1:f1:e6:63:56:5f:0d:b0:85:
bd:ac:50:a3:24:97:b7:2a:d0:f1:85:f9:47:85:2d:e5:4a:83:
10:1a:8e:56:28:39:9a:69:53:e3:48:f9:85:87:37:ce:a7:78:
ef:6f:13:af:0a:2f:1b:de:55:d3:b4:f2:3f:9f:db:8b:36:ff:
67:9e:47:70:99:fe:32:85:71:21:56:cf:dc:61:7d:e6:16:5a:
c5:76:7a:f1:99:e8:ed:bb:f5:e3:70:10:c9:53:ad:4d:8e:d8:
98:fa:11:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:01:49 2026 by rpki-client