Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
File: jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json)
Hash identifier: 0cOorhV4byQQtBfUJDBf37JTLylSlGt+GduHG1Wrr8A=
Subject key identifier: 62:7F:9C:0F:E7:1B:F0:79:67:08:7C:E6:36:AF:91:E8:4E:6E:D9:30
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial: 01A181BEB9D4951BBA38C396ADA9A46A2440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
Manifest number: 1494
Signing time: Wed 28 Oct 2026 09:02:02 +0000
Manifest this update: Wed 28 Oct 2026 09:02:02 +0000
Manifest next update: Thu 29 Oct 2026 09:02:02 +0000
Files and hashes: 1: 4xXEgGHm6FNEvzXSZMYA4CB15Xo.roa (hash: kLRMqyoKtLNzDHMHuXXnJpKSX1vsJYZPpStvOsdpbkA=)
2: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: 170nOTRU3t/Qgwb5oPmAA6JEolsoW7+4CLwue1PdJFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:b9:d4:95:1b:ba:38:c3:96:ad:a9:a4:6a:24:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Validity
Not Before: Oct 28 09:02:02 2026 GMT
Not After : Oct 29 09:02:02 2026 GMT
Subject: CN=627f9c0fe71bf07967087ce636af91e84e6ed930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:85:1d:94:43:b6:aa:cd:e9:93:cf:09:19:4e:
62:21:16:73:de:9d:1f:93:b7:f1:9c:4f:a9:ed:b8:
0b:79:9b:13:1f:6c:21:fb:7b:b5:af:0d:af:3b:19:
eb:62:f0:88:d3:70:8d:ad:bb:05:13:f0:cc:e5:fd:
09:18:4f:91:d9:ee:54:86:76:df:20:76:84:ab:6b:
94:0e:cf:00:b3:ad:66:e6:05:74:23:6f:32:4a:23:
63:2c:96:5e:60:97:0e:a9:35:f8:3d:1d:ea:e0:8d:
df:21:0b:79:52:66:d3:47:55:b1:86:26:ea:9b:55:
0a:0a:be:5f:01:b4:96:64:ec:d7:af:80:30:8f:44:
21:a4:31:4b:22:00:38:27:26:49:94:98:e7:06:84:
32:25:b2:34:e7:0e:a1:e7:93:e8:8b:88:25:d9:9b:
86:e8:db:fe:92:89:20:a3:cc:6d:78:bc:1f:6e:fd:
03:e8:02:28:59:d0:54:53:eb:bc:54:1c:2f:70:bf:
1e:4e:8d:bc:10:4f:01:c8:13:34:23:13:fe:29:61:
1b:16:fd:4a:51:d0:d2:90:b9:c1:0c:e8:91:16:1b:
ac:aa:10:fd:2a:d0:b8:23:01:36:f2:1e:35:fc:9e:
11:c0:f5:ad:88:38:e4:3f:f7:79:23:a2:38:b9:6b:
6e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7F:9C:0F:E7:1B:F0:79:67:08:7C:E6:36:AF:91:E8:4E:6E:D9:30
X509v3 Authority Key Identifier:
keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:59:ab:0f:55:76:aa:66:0d:b1:b4:11:ff:be:24:08:a5:b7:
be:16:61:31:95:72:10:b3:94:4d:de:29:05:83:14:e1:14:dd:
7a:22:8c:ed:29:9f:c8:cb:3f:f0:86:3e:aa:35:5e:b8:99:a8:
f1:86:80:f6:15:15:e6:d6:4a:7c:e1:a8:41:19:5b:f5:a6:be:
63:a7:53:70:37:fa:99:05:e4:d1:e2:19:19:d1:d6:79:b2:3e:
ef:28:76:64:43:a0:ee:89:9a:e3:3a:d3:86:8f:a4:cd:0a:86:
a4:68:25:ac:54:cc:66:59:46:59:fa:ec:ea:ee:4e:75:d9:a3:
16:28:fd:fa:7a:47:30:32:35:65:26:d1:92:12:72:5b:bf:77:
62:1b:aa:ef:66:c5:b1:25:0f:d8:e3:af:1c:8b:7b:e4:3d:e1:
a4:84:b2:4d:dd:54:5d:f4:75:da:df:d9:93:d2:0a:c2:c7:40:
d4:ce:2f:01:01:0e:9f:e9:24:39:49:23:bc:fd:c2:df:56:ff:
ce:d6:74:f8:ba:63:7e:bb:58:ce:ec:38:28:ba:87:ac:f7:af:
5e:ad:39:bd:b2:74:50:10:df:83:80:31:40:89:28:33:76:29:
63:e9:e9:c6:a4:c5:a7:b7:b4:9d:b8:24:e4:bf:19:23:08:6c:
43:34:08:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:34:14 2026 by rpki-client