Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: hHXeNPB3Eiha7+EfmxtKx63iZ0g2xhisF2i4938+GQ8=
Subject key identifier: A2:AB:19:22:B1:55:A0:94:AC:A3:46:EF:8C:18:88:13:66:BB:A6:0A
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 01A0024B1A2B74B9D8FBEB095E5183311290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 174D
Signing time: Fri 14 Aug 2026 22:01:11 +0000
Manifest this update: Fri 14 Aug 2026 22:01:11 +0000
Manifest next update: Sat 15 Aug 2026 22:01:11 +0000
Files and hashes: 1: jOlvTqoRsdAulg6Y3XpZsAr0oMk.roa (hash: cs60eVRzgZLIh6eTxfnRAFFGp7Qvb56odPMGxJ4uAvU=)
2: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: Uve5LwoeUhVFN4In/cu5t248ttPs7fH7mjYWrjd6yrc=)
3: sAH-vh-27sRa8XMB1zXDPSKTTFE.roa (hash: Vvwat5s3NJzZ4utG1tsbAtKbf8nI+e0SigwDHdU+hO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:1a:2b:74:b9:d8:fb:eb:09:5e:51:83:31:12:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Aug 14 22:01:11 2026 GMT
Not After : Aug 15 22:01:11 2026 GMT
Subject: CN=a2ab1922b155a094aca346ef8c18881366bba60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:79:23:76:aa:63:1a:e7:86:1b:cb:58:bd:
aa:8e:00:49:f9:85:3d:36:ba:38:1d:9b:d8:05:f1:
ce:97:51:22:9d:91:48:ad:ad:70:43:29:23:b7:41:
50:ab:c3:48:01:6a:b9:fe:2e:09:ad:ba:e8:d3:89:
5a:9e:eb:ed:1a:93:54:9f:c2:bf:9d:49:88:2c:06:
f5:5d:64:55:24:d8:4d:3f:1d:57:85:08:64:db:65:
90:90:a7:3d:9c:57:e7:f7:33:dc:d2:15:78:90:b4:
b1:fd:93:0b:7c:80:66:7a:76:5f:3a:63:f4:49:44:
d5:40:ae:89:6a:4b:98:f4:9e:56:88:58:13:7a:4a:
f7:9d:c4:61:fa:45:a9:6a:b7:59:b6:5d:c4:86:1a:
b4:f8:23:3f:c9:f1:55:6a:07:1b:42:b3:d0:d7:ab:
15:42:bd:b9:d7:40:7f:9d:e9:9b:44:44:8c:a6:36:
f0:5f:2b:01:8f:5f:d1:ef:22:c6:8e:45:99:d7:de:
2d:40:bb:81:40:f7:c7:9c:ff:3b:bb:3b:52:de:47:
75:16:92:c7:2b:da:5a:9d:d6:75:19:25:83:3d:9c:
59:fb:fb:2e:25:c7:ef:41:10:a9:10:3f:01:29:11:
da:4b:ab:3b:ce:59:09:7d:3b:8c:a3:8d:66:6f:ca:
66:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AB:19:22:B1:55:A0:94:AC:A3:46:EF:8C:18:88:13:66:BB:A6:0A
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:70:12:67:cb:15:51:63:47:c2:a7:80:d9:2f:4f:ab:b3:07:
84:5b:18:81:93:67:8f:2b:45:9d:31:0a:19:10:89:13:30:72:
3a:67:a2:93:27:7b:a1:e8:8a:42:59:1b:b7:c7:ec:32:8f:45:
80:0e:97:88:f2:1b:fd:89:b3:6a:5b:68:c6:1a:12:07:99:93:
95:f0:cb:e0:0d:7e:4e:28:1f:54:cb:ca:d0:ea:9b:93:a6:be:
30:f6:d2:58:42:b2:a5:df:af:38:42:e6:6a:60:f8:94:07:d6:
d4:3a:5d:44:ba:25:aa:f2:be:8f:11:75:60:29:02:ad:ab:ee:
d7:7d:9e:23:14:f3:0d:3f:f1:1b:12:d1:f2:fc:54:f3:a1:ff:
ab:37:6f:4f:32:57:2b:b1:16:ce:54:51:e3:9a:fb:7e:c0:d6:
4d:d5:20:7a:0d:f3:cc:c1:bc:e5:0a:35:6c:6a:1f:8c:fa:22:
5a:9e:93:18:66:46:a7:f5:ee:ad:ec:27:d1:ba:47:02:af:18:
ce:bc:8c:fa:2d:c7:7e:ae:65:14:61:3c:33:89:43:64:c4:09:
03:d1:9d:89:0d:20:87:71:ee:5c:bc:c5:e2:e1:c8:dd:0b:be:
70:48:3c:ce:c9:bd:51:08:fa:6b:e9:1a:bc:cb:c5:64:8b:a3:
ca:45:0f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:12:16 2026 by rpki-client