Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
File: jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft (raw, json)
Hash identifier: bq1+krgxlO3Ni8ianFpbusOfO7Dmlzy2fzZzEOngCHs=
Subject key identifier: BF:0D:88:F6:0E:2F:40:A5:F2:B4:78:3B:57:DC:6F:85:5D:8F:FE:AD
Authority key identifier: 8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C
Certificate issuer: /CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
Certificate serial: 019EBDDA8FADFA0CFA0EFA2F352EBDE3C412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
Manifest number: A3
Signing time: Fri 12 Jun 2026 22:01:17 +0000
Manifest this update: Fri 12 Jun 2026 22:01:17 +0000
Manifest next update: Sat 13 Jun 2026 22:01:17 +0000
Files and hashes: 1: jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl (hash: Gm+ROVJ/sNumrkBkpuE+6iXtt1lirJeQUdVJsCm4b5I=)
2: y0t4f3SYiNI2RVeLlWE56pwZqao.asa (hash: 7OCsijFOaHb7cmOa3vj0zykIPZySXdI6fNcvKKq6Oig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:8f:ad:fa:0c:fa:0e:fa:2f:35:2e:bd:e3:c4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
Validity
Not Before: Jun 12 22:01:17 2026 GMT
Not After : Jun 13 22:01:17 2026 GMT
Subject: CN=bf0d88f60e2f40a5f2b4783b57dc6f855d8ffead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:fc:39:63:07:56:b1:aa:8a:61:61:7d:f3:
ae:63:69:ff:f5:bc:e9:77:ce:0b:27:21:f7:4e:8b:
f7:46:11:e1:ce:50:70:b6:3d:a4:d3:39:68:e5:d4:
2d:cf:39:ff:ec:90:34:d0:de:d5:0f:82:6c:a9:7f:
78:dd:b4:c6:cd:de:26:30:be:de:0f:55:35:83:8e:
23:fd:28:ae:85:5e:25:5c:7b:44:29:f5:0a:19:42:
0f:2e:a8:ed:1c:eb:fa:9e:14:e0:2c:4a:3a:26:b1:
13:bd:be:91:7c:da:86:da:51:50:63:65:48:6d:42:
72:f9:7c:5e:85:8d:17:c2:35:85:87:98:41:99:59:
91:62:96:c2:6c:1c:12:45:06:9c:d6:48:38:29:aa:
a5:ec:39:81:83:dd:86:a6:e3:c8:96:f9:dc:c4:ed:
42:46:2b:00:d8:c9:84:57:9b:5d:87:b7:bb:06:df:
cc:42:47:7e:4a:7e:32:3c:2b:07:1d:a9:c1:aa:16:
0c:55:db:e6:fc:41:65:49:bc:a1:34:cb:73:4a:53:
0c:9d:90:55:70:83:dc:e5:3b:72:a1:a8:7e:5f:48:
12:27:75:f4:cd:1a:1a:8c:60:19:66:08:f2:6b:9f:
74:7b:21:4c:ff:11:41:55:d6:a1:a1:31:08:4c:39:
66:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0D:88:F6:0E:2F:40:A5:F2:B4:78:3B:57:DC:6F:85:5D:8F:FE:AD
X509v3 Authority Key Identifier:
keyid:8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d9:39:a4:82:58:a7:af:cd:eb:f9:5f:73:31:5d:38:8c:7e:
0a:6e:a4:37:01:9e:45:bc:bb:15:79:87:ee:90:c2:90:31:ba:
cd:9d:e1:9a:d7:af:77:cf:64:02:81:50:5f:0f:5f:cb:f2:82:
5a:71:b3:d0:5f:b9:43:6e:59:ce:47:d2:15:b3:d8:6c:58:c1:
ab:2e:1f:f5:ff:f7:46:0a:1f:53:00:99:29:e1:2d:bf:cb:97:
34:c9:60:6b:7f:e7:37:43:54:a9:df:dc:95:4e:1a:6d:76:b3:
06:03:4c:4a:fa:cb:ef:b7:fa:1c:63:74:cc:05:18:4d:2b:60:
77:b9:f0:42:0d:5b:ed:99:e2:47:87:55:3a:98:9f:16:ac:f9:
0e:43:00:ee:b0:4e:d7:9b:e9:26:c8:2a:0e:35:69:13:2e:ad:
2b:c6:f3:20:38:8a:1e:04:99:47:50:54:a9:ee:00:79:90:6c:
ed:76:0a:18:f1:ca:6c:61:0f:25:f5:df:db:ed:61:a6:ce:9e:
32:4d:e2:6c:60:8d:2a:5b:2f:cb:26:e4:08:25:83:0d:34:2a:
cc:23:d0:67:54:f0:0d:d3:a2:5e:d4:d1:4a:81:b7:4c:29:7e:
21:f8:96:13:9e:14:ea:07:be:b0:26:69:99:94:ed:a6:7b:0e:
3f:d1:62:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:30:01 2026 by rpki-client