Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: 9uNj9kEGyz9lq6qO8PE4+5R60wjPB8bs00hBmvyfqWo=
Subject key identifier: C6:86:13:C0:10:66:A7:65:BB:A7:21:88:5D:FD:A2:47:D7:41:11:E0
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 01A00213B3F7EDB2CE8E120E755575FEA29C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 21:00:40 +0000
Manifest this update: Fri 14 Aug 2026 21:00:40 +0000
Manifest next update: Sat 15 Aug 2026 21:00:40 +0000
Files and hashes: 1: 06CiJdO9HY0Au03AcAurjfb-Gbo.roa (hash: G2id8BLM47E0KAXCQ9t2IpyzxImdIOcWfQNsmcd/Suw=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: CyK38YIcSEmaUtMG0btaXkdq+eRGdf7CfyZFlogh7Hg=)
3: K2TwYBRgnBctdKuDbIfCz7Wzozo.roa (hash: ELimPcvkoPpYP48krh/bT87ryT9UcmZsjC29243OEEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:b3:f7:ed:b2:ce:8e:12:0e:75:55:75:fe:a2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Aug 14 21:00:40 2026 GMT
Not After : Aug 15 21:00:40 2026 GMT
Subject: CN=c68613c01066a765bba721885dfda247d74111e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:71:fc:5a:bf:8b:6e:2d:3d:c7:c2:91:3f:6c:
15:8a:96:2d:bd:51:4f:b4:b1:27:a1:74:9e:ce:fd:
46:0a:36:a9:68:fc:a0:95:d3:11:3d:24:60:4f:13:
0e:45:2a:98:a2:47:e7:8f:fb:a4:19:46:d5:11:9c:
95:63:c4:c9:11:49:21:3c:a3:1e:c9:8e:0d:ab:f7:
04:cc:c2:d0:72:0b:d6:68:07:3a:74:54:c9:b2:72:
e4:ce:19:fc:5c:1f:18:cb:1b:b9:15:6c:f9:d8:04:
2c:30:09:2f:a4:b8:2d:f7:0a:12:2c:c8:2d:d8:11:
ca:fd:8a:2c:a7:9b:79:3d:1c:08:31:ed:65:1c:f4:
1e:1a:5e:c6:63:d2:87:64:bc:7a:82:74:6c:dc:ab:
1a:2e:6e:f5:14:1b:eb:28:c0:fe:eb:e0:40:16:48:
4c:ab:81:fe:7e:a7:d6:51:7b:30:8c:8a:da:63:44:
fd:84:09:84:09:8d:98:c7:4d:d0:6b:21:2c:d5:05:
77:79:96:23:36:f0:b1:7f:8c:69:1f:a9:d0:a8:1e:
aa:f3:a4:b9:ec:80:e5:3e:19:5c:24:7a:0a:17:53:
fd:f6:4d:a3:27:2d:9b:0c:a0:47:61:b3:3d:40:6b:
f5:7d:11:77:88:bb:e5:e5:42:d5:f4:4a:2e:8d:43:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:86:13:C0:10:66:A7:65:BB:A7:21:88:5D:FD:A2:47:D7:41:11:E0
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c8:5d:a3:4a:7f:a6:f4:06:0c:14:15:02:e5:fe:e3:1e:e8:
e0:63:6e:d6:ee:b0:ac:ac:8b:c0:10:5b:36:b4:5d:8e:5d:f3:
12:2f:ea:14:c1:5b:a6:d3:fc:e9:6b:e6:80:3c:6e:72:42:3f:
49:be:46:4b:91:12:5d:4d:20:19:9b:f7:41:7c:b8:a7:14:d4:
fa:be:6b:47:47:c5:a7:6a:63:11:56:bc:65:85:71:e3:bb:51:
87:ee:ca:44:4b:16:f5:06:d6:32:5a:ab:db:22:0e:bc:40:2a:
b6:05:6a:dc:62:32:5a:1a:d2:34:72:1c:3b:9c:94:f5:b3:76:
66:19:d8:85:23:2d:9e:d9:81:02:0b:2f:04:a5:73:30:10:59:
5e:a7:ed:6c:75:3f:2f:6c:fa:ee:68:c9:e5:6e:d8:48:f7:9b:
c6:b3:c2:ac:b6:52:b2:2a:5e:69:d6:53:52:c8:21:81:be:68:
3e:78:f8:81:af:51:81:5c:34:df:a0:8b:b7:3e:68:cd:c3:5d:
0a:61:33:1d:3a:1d:7b:26:93:a6:2f:6a:97:d4:00:76:fb:f1:
ed:d2:21:7f:96:0f:61:74:02:cb:5b:b6:66:e3:73:e4:7b:12:
d6:c1:76:6c:d3:6f:60:ce:41:24:03:5f:43:62:fb:48:a3:bb:
91:39:1c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:39 2026 by rpki-client