Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: /xA718GAQB/Dul8phBXfDxk0ZtqtaWUXXURatiC3iPQ=
Subject key identifier: 73:A0:92:22:A0:3F:32:66:1C:4E:79:50:0E:7A:66:3C:04:1B:46:B6
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 019EC180086BFA34D025DFABC0CEE6DF03BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 15:00:53 +0000
Manifest this update: Sat 13 Jun 2026 15:00:53 +0000
Manifest next update: Sun 14 Jun 2026 15:00:53 +0000
Files and hashes: 1: 06CiJdO9HY0Au03AcAurjfb-Gbo.roa (hash: G2id8BLM47E0KAXCQ9t2IpyzxImdIOcWfQNsmcd/Suw=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: bE4V/Uzegxl1NPexPl9Vh5HRx9a0h/F/x4v1Er7E9A0=)
3: K2TwYBRgnBctdKuDbIfCz7Wzozo.roa (hash: ELimPcvkoPpYP48krh/bT87ryT9UcmZsjC29243OEEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:08:6b:fa:34:d0:25:df:ab:c0:ce:e6:df:03:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Jun 13 15:00:53 2026 GMT
Not After : Jun 14 15:00:53 2026 GMT
Subject: CN=73a09222a03f32661c4e79500e7a663c041b46b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:eb:88:74:04:d3:3c:4d:76:87:60:22:65:
e3:65:91:1d:17:3a:70:2b:e9:b9:5c:ef:2a:98:b8:
a1:f9:04:4d:ea:8a:64:d7:89:0d:70:15:89:0a:56:
7b:a9:7d:47:ad:98:8d:24:d3:16:df:60:05:d8:07:
69:af:90:ff:64:06:79:08:6f:64:37:08:9a:04:77:
4c:e2:78:bf:3c:66:9c:2d:e3:7f:77:92:05:ea:3f:
51:3d:d2:36:0a:a2:0e:6c:e6:e4:cf:43:2f:3f:5d:
e1:b9:1e:1f:1d:d3:a4:dc:75:bf:15:0b:e2:4f:00:
2f:1e:a8:d9:12:3b:0b:d8:60:0e:e2:21:2d:b6:e2:
a8:02:8a:92:8b:66:55:03:a4:6c:ac:23:03:33:a6:
a6:a2:53:40:a2:7d:9e:fd:27:86:fc:48:26:a3:58:
96:5f:29:a4:9e:83:bc:5b:ff:f9:65:95:8f:db:39:
ba:35:ce:a5:ca:2c:4d:80:1c:b8:4f:97:13:5c:ba:
1e:8f:e1:bb:03:a1:f6:c7:c3:10:fe:55:e1:52:f5:
de:be:37:ec:4c:48:58:97:ae:cb:74:56:89:a8:9c:
ce:b7:13:38:3a:5e:e4:b1:60:b4:9c:3b:2f:9d:57:
72:a0:e4:d3:21:01:d7:06:52:d4:c6:29:48:17:64:
68:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A0:92:22:A0:3F:32:66:1C:4E:79:50:0E:7A:66:3C:04:1B:46:B6
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cf:af:0c:7a:05:4b:29:ae:58:99:0f:f7:ab:50:cc:5a:40:
75:60:50:b5:50:41:7e:bb:e3:7e:97:31:9e:a0:e5:39:f7:7e:
19:d0:e6:93:55:70:cc:53:2e:ba:11:05:51:a6:d8:97:43:b7:
f4:5c:43:a2:c9:03:4e:cb:25:98:d7:d0:90:9d:a7:84:69:88:
36:03:92:4b:12:e9:b0:28:00:06:9c:4a:66:b1:94:07:a2:53:
3f:cc:e6:a9:b9:0f:ce:00:21:c8:60:23:de:08:ea:e1:b5:18:
9b:78:da:bc:1c:b6:a5:5a:7a:eb:f4:00:5d:f5:a2:dc:17:f7:
0b:1d:f4:25:d5:64:4e:0d:ff:6d:df:e2:14:ca:01:2b:82:71:
18:dd:ca:9f:14:aa:49:11:4e:db:79:7a:30:71:ba:b1:68:ab:
11:29:cf:3c:7c:69:cb:16:fc:31:50:8b:37:6a:6f:df:ea:7e:
ab:a7:a9:21:3f:76:82:a3:8a:d0:46:54:fa:df:07:52:35:0e:
dd:22:34:a4:90:89:ee:71:9a:ed:ab:f9:d3:4a:6c:f0:cf:53:
0b:6f:da:0a:45:88:c5:a7:fc:3d:b4:ae:39:9c:0f:f8:26:28:
0c:17:bc:ad:54:1c:58:ab:34:e8:80:04:8b:f7:34:79:3d:cc:
ef:42:dc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:15 2026 by rpki-client