Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: 4ibdD8D3EaasRmryBftJRWDNTAdr7l+t9Th68xPm0vQ=
Subject key identifier: 38:C8:A9:7E:83:85:68:26:19:B5:9E:BC:F4:5F:A6:2B:C8:7E:00:CB
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 019E30E066F8E6AF92DA484006E49E8AD562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 165C
Signing time: Sat 16 May 2026 13:01:13 +0000
Manifest this update: Sat 16 May 2026 13:01:13 +0000
Manifest next update: Sun 17 May 2026 13:01:13 +0000
Files and hashes: 1: jOlvTqoRsdAulg6Y3XpZsAr0oMk.roa (hash: cs60eVRzgZLIh6eTxfnRAFFGp7Qvb56odPMGxJ4uAvU=)
2: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: LeYmZ9ajS7MpYDf5wtBvvV7luwOMG9qfkTHbhkCZf74=)
3: sAH-vh-27sRa8XMB1zXDPSKTTFE.roa (hash: Vvwat5s3NJzZ4utG1tsbAtKbf8nI+e0SigwDHdU+hO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:66:f8:e6:af:92:da:48:40:06:e4:9e:8a:d5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: May 16 13:01:13 2026 GMT
Not After : May 17 13:01:13 2026 GMT
Subject: CN=38c8a97e8385682619b59ebcf45fa62bc87e00cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:16:da:94:0c:46:d9:47:ad:05:da:74:70:
59:af:09:f4:4d:5f:92:95:a1:0c:3a:0b:ef:86:81:
8d:97:61:c2:25:86:e5:07:de:bc:cf:26:99:fe:bc:
2e:f3:b9:be:8a:dd:a2:0d:6e:9f:00:77:2c:71:b9:
d4:83:0b:47:d9:dc:ba:f3:cf:a0:94:3e:e0:ba:69:
6c:5a:24:6f:04:80:fa:f2:a4:9e:a5:62:46:b0:94:
ae:ce:dc:d5:92:78:fc:3f:19:19:a1:26:0a:e3:a2:
56:da:6a:6a:88:b5:82:29:a5:7a:96:51:0d:d1:b5:
78:be:79:8d:22:d4:7e:a7:7e:37:2b:46:af:6f:e8:
93:ff:71:bc:3c:a7:81:4f:e7:c1:05:c5:90:a8:ca:
2c:17:64:ca:43:8a:2f:cc:74:c0:f0:be:68:02:e7:
b9:4d:2e:76:03:7e:ee:8a:0c:13:57:ed:1e:48:92:
18:9f:2e:ea:14:30:10:d8:e0:c1:84:d9:ca:ac:d3:
d2:a8:08:6c:5c:7c:c1:b7:07:26:69:8a:8f:53:bd:
1e:6a:01:96:0e:e0:a6:b8:99:20:6d:d8:74:ea:91:
00:f2:63:51:f6:85:11:af:1f:e4:a0:24:18:b3:68:
ab:4f:c9:ec:14:cb:1f:21:c6:7a:06:e0:04:49:dc:
24:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C8:A9:7E:83:85:68:26:19:B5:9E:BC:F4:5F:A6:2B:C8:7E:00:CB
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a4:d7:4f:4d:0b:34:be:fa:9b:d0:0e:09:ac:bb:ea:94:31:
f6:e2:58:7f:7b:e0:a7:e0:37:fa:11:5a:31:d7:01:39:86:1f:
48:e0:be:be:71:45:5e:8f:7c:1b:30:04:02:f0:95:f7:ae:b8:
0e:44:7c:9d:78:3a:ee:d5:c3:c0:21:6b:11:c5:59:18:7e:87:
cb:47:69:ae:c0:a9:18:b7:73:2c:c9:1e:8a:74:d8:d4:40:86:
95:f8:ac:20:0a:5e:7b:26:5e:72:7b:0a:26:c3:28:af:83:b8:
af:87:e9:ad:5f:8c:f5:59:dd:fc:a7:ed:c6:5a:62:b0:d6:3d:
99:08:d8:51:2f:d3:ee:07:f6:ce:2f:d0:c1:6b:5a:70:a2:73:
9c:2d:0c:05:79:fd:08:90:3c:83:e9:cc:ac:8c:bf:07:89:52:
18:9c:6b:4a:ea:2e:9f:bf:af:53:cb:0a:49:aa:8b:36:0a:45:
c2:bd:63:e1:7d:bb:86:02:c5:29:e1:99:15:f8:a3:a2:ee:78:
87:ef:06:b6:56:eb:45:a0:ef:12:e6:42:f7:8e:37:fd:3f:22:
09:4b:b3:5f:42:08:8b:90:05:0f:5d:af:a5:2f:0a:09:a4:1b:
d9:58:1a:df:3e:52:05:6c:89:1a:ae:17:15:f0:16:60:3d:3b:
1f:58:dd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:14 2026 by rpki-client