Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
File: jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json)
Hash identifier: xwJbckvw66e6SH7PWaGWA540STZ4SrI57CMD8Oa/1sM=
Subject key identifier: 7D:27:88:23:98:9C:F2:16:C8:AA:72:85:F5:3C:A7:E0:8C:58:02:8D
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial: 019DCD86DEF17ED9C42A37C1D64CBEBFCC4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
Manifest number: 12A9
Signing time: Mon 27 Apr 2026 06:01:01 +0000
Manifest this update: Mon 27 Apr 2026 06:01:01 +0000
Manifest next update: Tue 28 Apr 2026 06:01:01 +0000
Files and hashes: 1: 4xXEgGHm6FNEvzXSZMYA4CB15Xo.roa (hash: kLRMqyoKtLNzDHMHuXXnJpKSX1vsJYZPpStvOsdpbkA=)
2: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: aPq9jcggq1KShsl4W9/HLn226Sr4gf67uvuZRTPNIqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:de:f1:7e:d9:c4:2a:37:c1:d6:4c:be:bf:cc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Validity
Not Before: Apr 27 06:01:01 2026 GMT
Not After : Apr 28 06:01:01 2026 GMT
Subject: CN=7d278823989cf216c8aa7285f53ca7e08c58028d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:d7:7f:e9:bf:6a:00:56:47:ff:1b:62:ca:
a6:d0:b1:ad:8e:7f:e2:0e:c7:aa:75:6b:34:fb:be:
66:a0:7d:ab:13:fe:b9:94:62:f7:d1:f5:d1:2e:6e:
a7:a0:b0:8c:2e:3e:77:f0:b4:00:75:a6:93:d2:5a:
f9:7e:27:a4:23:7e:4a:4c:86:ca:a3:bd:64:29:d4:
f8:43:8c:85:4c:84:49:81:e1:c9:6b:19:79:31:92:
29:a1:5c:72:1a:23:48:68:cb:0d:68:fd:82:3a:08:
83:fa:51:c2:93:bc:7a:82:30:73:50:41:f9:ea:16:
d9:af:02:13:98:35:8b:b2:0f:db:51:9b:3a:ae:fa:
ba:38:e8:8f:aa:3a:76:34:34:db:c6:6f:a3:d8:51:
26:36:e4:09:cb:0a:52:ee:ed:1e:85:b3:62:76:73:
fe:54:82:ff:36:b1:5c:3a:8b:c5:4a:67:ff:18:6c:
02:16:cd:f2:f3:0c:08:3a:3f:62:0c:f7:10:25:40:
d0:53:df:50:48:22:16:fa:a7:30:ed:0a:37:25:62:
18:62:d1:92:32:6d:99:35:8b:59:c9:52:bc:c4:25:
98:4e:7f:15:47:80:0e:f6:1e:a0:5d:b3:18:5f:50:
6e:77:98:8e:7d:24:44:29:b8:02:2c:0d:a1:bd:a0:
a1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:27:88:23:98:9C:F2:16:C8:AA:72:85:F5:3C:A7:E0:8C:58:02:8D
X509v3 Authority Key Identifier:
keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b5:d8:2a:b1:cc:53:f6:c6:10:7b:fa:f3:fe:d2:76:29:08:
13:59:9f:aa:d5:a8:27:05:c0:bf:9c:0d:6a:e2:b4:27:76:aa:
22:e9:46:9e:ad:91:b9:1b:07:43:f1:58:44:eb:84:b5:66:e2:
71:35:4d:80:7f:a1:07:22:70:30:9f:af:97:f3:2e:1f:a8:94:
20:c7:65:84:45:ad:fc:f5:55:5d:4d:41:ee:8a:f4:86:f3:ae:
a5:3a:ab:c4:6c:12:42:9c:9e:ad:22:36:f1:54:78:3a:2e:5b:
05:fb:d6:0f:84:71:de:40:74:c6:e2:c3:28:0e:e3:f3:06:3c:
47:d0:bc:7c:07:08:e6:f1:16:be:c6:00:62:45:2d:81:e0:62:
2a:d6:ee:be:d0:a0:3c:76:48:0e:37:79:f6:6e:70:85:66:36:
0a:aa:27:fe:12:4f:b7:c0:d1:b5:b5:29:48:4c:48:f3:df:3d:
50:21:40:35:30:62:e3:79:39:b9:d5:ff:69:02:b5:9e:96:ad:
79:44:a0:c3:73:c2:81:78:4e:a0:95:5c:5b:a7:5f:6b:de:aa:
91:4c:ba:5e:ea:d0:0b:28:e8:b7:b5:3f:c8:db:ee:ba:6b:c4:
5a:53:65:44:8a:6e:61:d9:c9:e1:46:98:ae:5f:1d:d9:13:d9:
d5:9f:53:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:11 2026 by rpki-client