Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: PAiVOdeCHuTFHveP9i2QFepJF83g7ElClWeQ+2zfbV0=
Subject key identifier: 02:3C:3F:83:97:31:DE:EC:23:4B:5B:E9:4E:83:D1:69:AB:C5:B3:8A
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 019F129C666BFED275C8BFD05465BCEC47F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 09:01:07 +0000
Manifest this update: Mon 29 Jun 2026 09:01:07 +0000
Manifest next update: Tue 30 Jun 2026 09:01:07 +0000
Files and hashes: 1: 06CiJdO9HY0Au03AcAurjfb-Gbo.roa (hash: G2id8BLM47E0KAXCQ9t2IpyzxImdIOcWfQNsmcd/Suw=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: LncEbVq6oc7H7bjjOoQivxNUrwS19ifsRDd46fnv9ec=)
3: K2TwYBRgnBctdKuDbIfCz7Wzozo.roa (hash: ELimPcvkoPpYP48krh/bT87ryT9UcmZsjC29243OEEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:66:6b:fe:d2:75:c8:bf:d0:54:65:bc:ec:47:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Jun 29 09:01:07 2026 GMT
Not After : Jun 30 09:01:07 2026 GMT
Subject: CN=023c3f839731deec234b5be94e83d169abc5b38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:67:40:e5:11:ea:3a:7a:e2:3d:c7:8f:3b:
70:90:0c:ee:1a:d1:24:a8:37:82:ad:88:40:ed:09:
5b:26:c9:f0:79:74:8f:3a:3f:a1:10:af:30:fb:8a:
d1:fa:39:d3:32:97:f6:f4:71:32:81:8d:0c:39:0a:
f0:31:01:bf:06:a0:95:ab:73:96:2d:36:e7:46:51:
62:8d:f3:39:5c:10:45:cd:79:79:fe:e1:ff:6e:5d:
7a:6e:3f:25:b2:e5:81:b4:65:2f:80:48:ff:bc:02:
24:bd:be:98:1a:bf:a7:cd:b3:22:5f:99:e3:c2:e1:
56:8c:e7:7a:cb:03:d9:87:81:7d:83:2d:7a:36:48:
1c:12:92:67:ed:8c:67:7d:81:8c:f9:2f:b9:bf:48:
cb:22:c5:28:49:8e:e6:94:0d:58:3b:e6:10:f9:42:
b0:47:2c:53:9f:d5:a7:ca:b3:53:b9:2b:77:ba:3b:
35:e1:25:17:b1:3e:ae:6b:31:b5:3e:5c:cf:5a:05:
77:6b:36:ee:1e:27:8a:10:ed:a6:2e:11:5b:b7:a7:
64:21:30:51:32:96:bc:77:8c:84:bb:2f:15:65:07:
5f:f1:54:a7:d2:fe:f2:87:73:d3:8c:f0:5c:01:2e:
1b:a8:11:f4:cc:70:13:d4:6e:73:65:c0:a1:8e:bd:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3C:3F:83:97:31:DE:EC:23:4B:5B:E9:4E:83:D1:69:AB:C5:B3:8A
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c9:83:06:01:37:58:b7:55:f3:8a:22:e7:e3:0b:cc:26:9f:
16:c9:d0:54:04:94:31:af:4b:05:c4:82:1a:c4:eb:b3:49:fc:
11:55:ab:a5:83:a1:5e:6f:70:a8:dc:41:51:89:a0:8c:41:75:
f7:0a:60:9c:c7:6a:5b:3f:78:ac:bc:71:28:fe:a9:d7:f7:43:
73:44:32:48:cb:3c:62:69:19:e6:0b:ce:e9:b3:18:98:92:39:
33:f8:29:cc:ac:08:a5:b7:21:b1:d7:ed:46:cb:0a:58:4e:38:
24:af:4d:32:52:2d:a8:e0:91:7d:60:d4:5a:5c:e8:64:4c:98:
8b:bf:10:bd:9e:11:97:0e:f0:9c:53:41:21:86:c3:37:51:bb:
c0:04:45:93:48:d9:b4:4d:6d:95:f6:0c:91:54:43:0a:c3:6b:
a2:6c:84:4c:1d:b5:bd:cb:58:0c:6f:ed:0c:0f:a8:77:13:22:
5f:ca:11:91:74:e2:e9:7b:33:a8:fc:5c:f1:82:88:f3:92:98:
22:2b:48:e0:4a:bf:02:ea:5a:88:7d:b4:68:df:54:3e:d7:aa:
2c:e5:6e:b7:db:5c:e8:0c:dc:8b:eb:42:0c:77:4f:63:2b:18:
e6:eb:20:ef:5b:28:ce:20:31:ca:ff:d6:7e:b7:3f:71:20:83:
52:ac:6c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:44:01 2026 by rpki-client