Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: E3K1+BhiSy9kG6icp24hB6yhG8iyaRfPOJh4P28hsOw=
Subject key identifier: 6D:A9:74:5D:8E:CF:00:BC:D6:7E:C4:5F:78:21:FB:7E:70:4E:91:44
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 019D9A0703E9FB56A346BDCE20337D91E130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 06:00:44 +0000
Manifest this update: Fri 17 Apr 2026 06:00:44 +0000
Manifest next update: Sat 18 Apr 2026 06:00:44 +0000
Files and hashes: 1: 06CiJdO9HY0Au03AcAurjfb-Gbo.roa (hash: G2id8BLM47E0KAXCQ9t2IpyzxImdIOcWfQNsmcd/Suw=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: 1dD4Abu6HwJ4tx3/nWaOoS86fZnRd78f26V5sc08qNI=)
3: K2TwYBRgnBctdKuDbIfCz7Wzozo.roa (hash: ELimPcvkoPpYP48krh/bT87ryT9UcmZsjC29243OEEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:03:e9:fb:56:a3:46:bd:ce:20:33:7d:91:e1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Apr 17 06:00:44 2026 GMT
Not After : Apr 18 06:00:44 2026 GMT
Subject: CN=6da9745d8ecf00bcd67ec45f7821fb7e704e9144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:13:6a:e4:3c:0b:c1:c6:9f:76:e9:b5:1b:
7d:ff:43:e1:5f:6f:97:23:66:b6:7b:e4:48:81:d9:
1b:22:4f:5b:7f:d9:fb:40:a4:3e:89:30:00:c2:b5:
84:ac:e8:0b:bd:32:54:d8:7f:4d:54:aa:7e:d5:d2:
e0:24:8a:61:0f:38:8a:22:f5:e5:a8:bb:e2:e8:f5:
11:cd:f9:61:2b:5c:4d:73:66:af:60:4f:4c:05:92:
47:4e:56:65:4d:96:3e:9b:4f:b8:2d:89:52:5c:06:
42:56:a5:9b:3a:9a:2f:6c:2f:66:a4:0b:93:78:7f:
c3:39:63:84:74:5e:83:03:c9:63:42:e1:24:c8:4a:
d7:7a:4f:10:25:64:bf:82:82:c2:7c:ca:a2:53:93:
68:47:74:91:45:47:83:b8:a7:9c:26:2d:44:17:98:
99:37:a8:76:a5:9a:2c:09:f7:1a:6c:81:e8:ae:56:
de:28:75:2e:23:47:3d:36:e9:7b:84:fb:79:c3:08:
f9:eb:6c:b1:3a:39:bc:eb:be:e3:96:38:32:61:a7:
a2:02:39:f5:c7:50:0c:bb:d3:45:11:49:21:8c:f7:
f9:6c:00:82:33:18:14:57:14:c0:ed:3f:45:1d:fb:
22:60:11:de:3f:20:b3:1a:04:21:7d:93:21:ef:e5:
29:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A9:74:5D:8E:CF:00:BC:D6:7E:C4:5F:78:21:FB:7E:70:4E:91:44
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9c:c3:16:36:47:e0:95:b3:f1:f6:e2:e0:d7:b7:c0:a9:f5:
fb:b9:55:93:cc:d9:51:6e:52:5e:6f:b4:4b:83:11:07:c0:5a:
32:01:2d:3e:bc:13:a5:51:c9:93:12:25:9b:59:55:9c:72:f9:
54:e4:e3:cb:ff:95:2f:2a:d2:7b:e8:f0:fc:63:8d:a0:1d:d3:
2d:8e:75:71:42:95:fe:f8:01:40:18:24:d5:b4:18:8f:b4:f6:
70:e3:31:41:0f:6c:29:5d:bb:2e:83:4e:c1:70:86:c4:d2:ab:
20:7e:98:fb:c9:f2:78:01:8a:32:f8:ba:70:d6:4c:1a:d0:b6:
84:4b:da:8c:97:c9:94:18:f0:2b:aa:d5:ed:40:1d:70:d6:43:
ec:f9:0e:71:56:ed:e4:66:db:4b:fc:cd:1d:3e:f0:39:79:c2:
f0:db:24:53:f8:7a:0b:b0:6e:99:76:c4:35:09:a1:b8:c6:79:
c3:b2:43:35:08:fc:ca:4f:3c:82:f2:e4:67:d8:85:51:c1:c9:
ee:5a:77:72:f5:e9:53:d6:33:c8:f0:2b:e9:ee:99:c9:20:7a:
46:63:f9:34:12:f1:7d:4d:3c:f3:2f:27:49:3f:da:98:43:ba:
cf:4e:5a:c6:b9:d3:52:02:f1:25:5c:30:95:78:2c:1e:fa:f2:
03:ac:3a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:40 2026 by rpki-client