Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
File: jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json)
Hash identifier: P3/ViCt4XNvao6Fer/TLlPOnkxGEKBgjqwG0zBdjfhk=
Subject key identifier: A3:76:49:1B:50:8A:5C:3B:AA:20:00:75:3B:FA:ED:A8:63:40:9A:47
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial: 019F9EF18C09C6FE1A11C6EE04D6F4E137BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
Manifest number: 139A
Signing time: Sun 26 Jul 2026 15:00:57 +0000
Manifest this update: Sun 26 Jul 2026 15:00:57 +0000
Manifest next update: Mon 27 Jul 2026 15:00:57 +0000
Files and hashes: 1: 4xXEgGHm6FNEvzXSZMYA4CB15Xo.roa (hash: kLRMqyoKtLNzDHMHuXXnJpKSX1vsJYZPpStvOsdpbkA=)
2: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: 2Mo8GK+dixY18aZx3ZuoQOUM8eOX9VhoSHEaZR15Wzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f1:8c:09:c6:fe:1a:11:c6:ee:04:d6:f4:e1:37:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Validity
Not Before: Jul 26 15:00:57 2026 GMT
Not After : Jul 27 15:00:57 2026 GMT
Subject: CN=a376491b508a5c3baa2000753bfaeda863409a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:1e:0e:77:09:79:c1:cd:23:bd:85:ac:2a:
6d:ec:b8:9c:61:6f:5c:30:dd:f9:8d:d5:1c:47:11:
97:06:e8:f2:9b:ab:bc:c5:ad:a9:a9:15:76:53:5f:
3a:d6:d3:06:15:c5:27:8c:0f:91:9f:04:55:30:68:
61:e9:a1:07:40:a1:6a:bc:21:40:95:1d:80:00:a4:
44:ec:90:94:48:a5:ef:38:cc:f0:b3:93:09:9b:d9:
7e:1e:b4:44:a7:5c:3d:e7:83:68:aa:1e:64:7b:6f:
8d:90:ac:79:eb:1f:2f:38:dc:ad:21:4c:e7:ab:e1:
5d:6a:7f:7a:76:4e:83:55:77:84:df:33:74:92:a2:
ec:fd:fd:4c:bf:c5:eb:60:78:a5:f2:74:54:d9:c9:
38:00:db:ac:16:11:0f:57:3c:d4:92:59:99:c5:10:
d8:16:bc:ac:93:3e:bc:58:6a:25:c3:28:78:f6:81:
19:23:24:0c:3d:59:83:ff:e4:6e:f7:b9:62:98:16:
b5:96:8d:16:0b:63:cb:77:0f:80:3c:bd:d9:51:85:
29:85:21:9e:78:8b:02:40:31:41:f7:d4:05:02:fe:
e9:2e:e2:7f:ba:58:f5:d1:a1:09:f3:1f:e8:5d:2f:
1a:70:94:06:5a:c3:c3:65:e6:e0:1c:09:e8:3e:ad:
d2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:76:49:1B:50:8A:5C:3B:AA:20:00:75:3B:FA:ED:A8:63:40:9A:47
X509v3 Authority Key Identifier:
keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c7:e6:99:d4:f4:a2:37:33:26:d2:c5:c5:b7:46:94:a2:a7:
af:94:98:a5:ae:39:f3:17:71:eb:5f:ac:50:c4:44:be:5f:df:
88:19:76:11:21:b0:59:db:39:46:20:6c:76:79:4b:fa:83:b8:
d5:56:41:f1:3d:6c:f5:f3:f7:f3:ee:87:a6:04:ce:84:59:90:
af:dc:dc:4d:bf:28:53:f7:89:31:8f:34:39:46:23:68:c9:e2:
f9:e5:5d:8a:d1:e4:71:47:d5:66:c7:42:37:9a:11:d3:24:30:
f5:b9:8c:56:60:3b:16:d3:0f:81:54:7e:b9:f3:4b:06:f6:ee:
63:6e:ac:fb:d5:7e:4c:0c:c8:f1:ff:92:1d:6c:5d:77:d0:31:
71:de:90:fb:19:77:0f:6d:8b:a3:1b:5e:75:d3:2c:94:de:a1:
d5:91:5f:2a:69:5f:0d:58:be:48:4a:2c:01:a8:ef:f1:ca:5b:
43:78:ba:5c:c5:de:41:f4:18:30:3d:6d:65:38:90:cd:8f:df:
87:f9:6b:dc:a3:02:93:ca:e9:5f:4b:a7:e9:c5:b5:7b:b2:78:
ce:73:ab:bd:96:e8:97:ff:37:f3:bc:64:a7:4d:ff:6f:81:e7:
6c:36:88:96:e9:c8:27:b8:94:9d:91:6b:90:a3:3b:a3:c5:fb:
96:09:75:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:33:18 2026 by rpki-client