Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
File: jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft (raw, json)
Hash identifier: jvi0prkCETOmFMX6JeJH+0pLZhM9Yp1zcosem3cVCFA=
Subject key identifier: 04:E2:F8:43:9A:7E:F8:F9:F1:E4:91:37:CC:1B:87:95:D9:53:DB:DF
Authority key identifier: 8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
Certificate issuer: /CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Certificate serial: 019DA48AA80E114A6CFE5246296E7F5E436B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
Manifest number: 0871
Signing time: Sun 19 Apr 2026 07:00:43 +0000
Manifest this update: Sun 19 Apr 2026 07:00:43 +0000
Manifest next update: Mon 20 Apr 2026 07:00:43 +0000
Files and hashes: 1: jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl (hash: AnRfcC3K9mhEwt1vTXc+wk1epG6jcOfP1ujNhOwTEzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:a8:0e:11:4a:6c:fe:52:46:29:6e:7f:5e:43:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Validity
Not Before: Apr 19 07:00:43 2026 GMT
Not After : Apr 20 07:00:43 2026 GMT
Subject: CN=04e2f8439a7ef8f9f1e49137cc1b8795d953dbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4f:e7:5e:d4:fe:5a:41:7e:df:35:59:e4:c8:
f6:04:1a:ee:b7:41:4c:3f:63:4f:21:5d:d5:7e:7f:
6e:25:5c:35:a9:a1:53:64:97:03:29:5c:a2:11:e0:
47:cd:42:73:2f:78:55:12:fc:cd:4f:ac:89:2b:ba:
46:56:55:d2:fe:90:21:69:c5:4d:f1:22:c1:44:34:
fa:c3:90:0b:41:e0:a3:37:a4:c0:1a:8a:87:68:5d:
7c:88:4b:53:7b:2c:af:12:c1:ee:c8:9e:c7:94:fe:
da:50:7e:a8:f4:8e:73:d2:cd:2a:bd:02:3a:ea:1a:
75:73:cd:17:1a:b1:46:94:0d:17:a2:6b:51:37:df:
97:81:85:e6:65:a3:2a:9e:0f:62:97:88:b2:e5:b6:
ef:9a:d3:da:c6:81:4b:e0:9a:b3:ee:30:3c:d5:c1:
d8:e0:5e:52:19:1f:b0:19:68:50:80:37:8e:6b:e1:
a6:7b:b5:a8:ed:d6:33:c4:80:3b:2e:d0:61:06:28:
90:ff:ef:99:3f:69:e2:d9:fc:06:4b:da:7e:d7:8e:
ac:2c:a2:8d:38:58:74:d4:ec:79:b5:be:06:2e:f0:
e8:b3:00:36:bb:84:c6:7e:eb:fc:88:af:b5:57:5e:
aa:67:3e:94:cb:59:74:2b:f0:9f:74:4b:e8:16:70:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E2:F8:43:9A:7E:F8:F9:F1:E4:91:37:CC:1B:87:95:D9:53:DB:DF
X509v3 Authority Key Identifier:
keyid:8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ab:93:8e:14:44:65:8b:37:a2:27:6d:d2:ad:49:a6:91:9b:
f9:09:93:3f:1e:06:96:4c:5c:03:43:5c:6f:7f:0a:f2:62:7f:
46:fb:2a:6d:ad:f2:a9:eb:87:a5:44:4c:da:1e:2e:c8:a0:dc:
2d:14:95:47:fa:9a:55:b3:98:a0:66:28:d7:5d:e5:33:59:53:
3e:a8:da:d9:72:6d:6a:9f:b0:fa:54:05:b1:0d:43:cf:0d:22:
e3:f3:dc:04:f9:dd:ed:dd:81:f0:0f:91:6b:51:1f:92:4e:de:
90:33:c2:4d:cc:9f:94:3c:f5:74:69:48:7f:02:80:01:49:e8:
01:ce:df:18:3e:39:a2:89:59:f1:65:ea:ea:58:53:74:bf:6d:
61:e7:84:14:ce:cc:50:96:c5:f7:84:de:47:10:71:f9:75:4f:
e6:ba:99:91:c6:cd:cc:b3:b4:26:07:c7:f7:b5:c2:26:0a:cb:
84:e7:4a:48:78:d3:55:80:44:1e:f3:d0:ea:9c:02:b5:f1:04:
c7:4a:60:05:5f:88:4d:85:64:0a:48:b6:c5:ff:3d:b9:21:ce:
01:c5:2a:4b:f6:bd:0a:1b:1b:14:24:88:5d:50:a8:73:40:78:
9a:73:53:e2:aa:6c:e5:9c:bd:da:f6:fa:c2:64:22:b4:2c:ce:
11:73:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:05 2026 by rpki-client