Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: nfgBV7Z892YhsXElymnOouN50q1i4vOq5ZyrFa8nlsk=
Subject key identifier: BA:AB:39:C5:AE:F0:23:4C:8B:EB:53:D6:33:C7:56:C6:B2:66:50:91
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 01A0C8588E529584C0898C35F367D711C91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 09:00:41 +0000
Manifest this update: Tue 22 Sep 2026 09:00:41 +0000
Manifest next update: Wed 23 Sep 2026 09:00:41 +0000
Files and hashes: 1: 06CiJdO9HY0Au03AcAurjfb-Gbo.roa (hash: G2id8BLM47E0KAXCQ9t2IpyzxImdIOcWfQNsmcd/Suw=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: L7Oi9Jkb8Cab6VPLtsxPk8a79bnxRx/mIGC2+2XM0M4=)
3: K2TwYBRgnBctdKuDbIfCz7Wzozo.roa (hash: ELimPcvkoPpYP48krh/bT87ryT9UcmZsjC29243OEEg=)
4: Mva-wY41yQt9Nk6duc_ocpuKYFQ.roa (hash: IlOPnKgUf7QQ4gsxLLInS5A3X12Bcn5JqM322MVFryE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:8e:52:95:84:c0:89:8c:35:f3:67:d7:11:c9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Sep 22 09:00:41 2026 GMT
Not After : Sep 23 09:00:41 2026 GMT
Subject: CN=baab39c5aef0234c8beb53d633c756c6b2665091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:53:af:92:e1:0a:c7:29:e4:c0:eb:8b:69:bd:
6e:26:5d:c1:cb:fd:59:54:fa:87:1b:23:c1:1b:9f:
5c:b5:47:b5:d5:77:71:75:4b:e5:12:7d:81:01:30:
f3:de:f8:eb:c1:fc:fd:b1:e4:39:02:70:be:3e:a4:
d9:71:0d:14:78:67:16:25:4d:f6:ae:2e:0b:59:d9:
a9:d6:20:1b:1d:5b:89:14:8e:bd:0d:51:35:73:fe:
17:20:b4:83:3d:4c:ac:43:d9:dc:68:d5:9a:b7:3b:
fc:0f:bc:78:9d:a2:a5:87:27:ea:65:3e:38:a6:00:
07:81:00:c3:b4:53:fc:73:58:88:38:03:61:fe:4d:
99:f4:4f:07:6c:4b:a4:7d:5f:5e:fc:41:7a:c2:98:
91:ea:55:42:ed:4b:b1:e0:1f:87:ec:e9:36:42:99:
29:f2:18:54:66:fb:43:f6:02:7f:4b:cd:d7:93:30:
80:2e:4f:13:e2:b0:6d:b8:69:b9:ef:00:a0:17:0a:
37:35:ff:8d:04:fb:6f:1b:d9:75:19:8f:3a:e8:56:
11:b5:d8:a1:d5:10:a8:58:2e:d3:b5:a5:97:3b:34:
7c:0b:62:ec:7f:3a:a0:6a:c2:ff:40:c7:41:42:57:
7f:c9:df:8b:4f:3d:82:72:ae:03:fd:98:cb:1a:2b:
e7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AB:39:C5:AE:F0:23:4C:8B:EB:53:D6:33:C7:56:C6:B2:66:50:91
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9b:48:91:16:08:dd:7d:b2:98:f3:08:bf:41:b1:82:f9:55:
1a:c9:38:9c:c5:8e:58:97:ad:08:39:94:9e:22:a9:ba:6b:9c:
d1:a8:b9:96:f2:6b:9c:cf:dc:e2:0d:04:db:83:f2:74:6a:82:
f3:4b:0e:1d:3f:61:c9:b3:88:76:a9:d6:c1:9c:15:8d:5c:4c:
19:48:30:9d:05:fa:d0:cd:02:5e:ae:75:c6:a4:99:f1:72:88:
7c:c5:45:61:43:61:7e:5c:ab:2f:3f:c8:ff:1a:5a:c0:a0:4d:
81:15:9b:bb:ca:44:a0:85:f3:4c:e1:f7:21:12:95:2e:0f:a4:
9c:9f:e8:39:b3:d1:ef:d3:b1:70:03:9e:8a:19:a9:77:4c:8e:
6c:8f:7f:de:38:c7:7b:1f:71:28:c2:db:b6:0f:7f:25:b6:33:
93:1f:69:d9:cf:41:51:f2:ee:eb:73:1d:92:60:78:64:40:0f:
df:16:c7:72:c7:7b:6b:4f:6c:06:85:cf:eb:30:e5:fe:fb:b4:
b8:3c:0d:89:6d:ae:c4:f8:84:38:c4:ee:b5:59:14:e6:42:95:
98:07:fa:30:f9:63:f6:80:28:0f:27:46:26:83:de:fc:3f:75:
f2:50:e2:7a:a3:f7:99:c4:72:01:c4:8c:01:ab:32:d6:71:d5:
a4:fc:0b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:16:37 2026 by rpki-client