Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: ywD5m4p6d87g4p4eXzl16EkZzpXa5N+QyePWpq6cKLY=
Subject key identifier: 2E:77:56:63:BE:99:39:32:7D:F2:1B:CF:6E:E5:64:E6:B3:01:02:3F
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 019D397785F96AB5B9C80C879EB0B2D95A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 12:00:27 +0000
Manifest this update: Sun 29 Mar 2026 12:00:27 +0000
Manifest next update: Mon 30 Mar 2026 12:00:27 +0000
Files and hashes: 1: 06CiJdO9HY0Au03AcAurjfb-Gbo.roa (hash: G2id8BLM47E0KAXCQ9t2IpyzxImdIOcWfQNsmcd/Suw=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: 40IJi/mQ/JHE5Sc1Rp0akSanBzsdCrmh3ClgubwO3+U=)
3: K2TwYBRgnBctdKuDbIfCz7Wzozo.roa (hash: ELimPcvkoPpYP48krh/bT87ryT9UcmZsjC29243OEEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:85:f9:6a:b5:b9:c8:0c:87:9e:b0:b2:d9:5a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Mar 29 12:00:27 2026 GMT
Not After : Mar 30 12:00:27 2026 GMT
Subject: CN=2e775663be9939327df21bcf6ee564e6b301023f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:cd:33:86:1d:ec:9d:e3:61:42:b7:c6:4b:
ab:f8:62:03:4b:89:d3:a1:71:ef:78:82:34:1f:68:
11:f4:e2:5c:59:bd:e0:a1:12:d5:5f:b8:fb:0a:5d:
d1:69:b3:05:4c:50:62:c5:bf:69:6e:33:a7:38:b7:
20:91:72:d7:9e:88:30:29:bd:06:63:0c:2b:07:ca:
b7:0c:d9:8c:a2:06:b0:d3:12:99:1f:8d:84:48:d3:
c1:d6:0e:47:99:91:85:31:3b:92:b5:b5:21:ff:7f:
e6:50:b6:4f:f8:87:e6:f3:e4:79:44:95:5e:4b:39:
d6:c1:48:16:4f:7a:d8:fb:8c:51:ca:cb:89:e7:25:
cf:b5:8d:4a:5c:f4:8d:93:61:f5:d1:87:6c:70:99:
0b:61:e0:c9:b2:e9:f8:88:37:23:a7:91:52:d7:b6:
f3:9f:e5:99:04:a2:19:8c:3b:81:98:21:85:44:54:
97:07:20:27:a7:1c:2e:51:a8:b9:85:21:ac:37:cc:
3b:0e:6a:67:f3:d3:68:60:92:15:ae:29:24:08:2d:
65:f1:88:65:83:18:5d:17:7c:25:43:cd:e6:0d:57:
92:41:8c:ff:22:c1:79:34:20:08:8d:d9:ec:c9:d2:
ba:45:da:01:9d:49:34:13:22:7c:4a:5b:f9:cc:49:
a3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:77:56:63:BE:99:39:32:7D:F2:1B:CF:6E:E5:64:E6:B3:01:02:3F
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:96:45:93:e8:ef:01:cb:b2:3a:15:09:ba:45:6d:54:e6:28:
b1:be:f9:2b:1e:3d:be:0e:1b:4b:66:6e:07:d2:03:6d:f3:b1:
9f:95:b6:32:f8:ec:d7:75:36:50:c8:69:d7:e4:aa:0b:c7:fe:
9b:c0:5c:6f:fa:5f:07:8d:cb:59:06:46:5d:2c:60:0f:27:53:
79:78:a1:77:43:87:c5:65:13:2e:70:23:7b:b2:c8:22:ea:67:
83:fe:8f:b8:c7:50:d8:ee:a8:1d:42:e2:48:53:84:25:65:15:
bc:35:f4:fb:d3:b8:ce:51:64:c6:26:8f:84:3b:6a:71:8b:32:
5f:ad:83:16:32:70:34:1c:e8:a6:f9:35:9c:af:5d:67:1e:7c:
2d:75:57:20:89:97:a2:ac:67:76:96:b6:ef:ec:79:d4:56:d0:
30:12:f2:c5:6a:17:95:87:ba:01:57:14:b6:c2:d0:34:c0:14:
10:c7:07:26:5f:a1:99:04:64:2e:2f:88:93:2a:e3:66:fa:26:
8f:a7:78:47:2b:a7:0d:d7:80:ac:ec:78:27:04:04:66:ce:f9:
c6:36:48:31:ee:e6:50:79:50:4b:25:a3:8a:e8:de:04:ad:4c:
7f:81:6f:c3:f0:8a:3c:ca:fd:0a:d6:08:15:e9:2f:46:83:3e:
89:94:cd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:09:23 2026 by rpki-client