Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
File: jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json)
Hash identifier: e9HY6IKtH5HlYVPuV0t5suDgvHMowdeU0Uoky5cH8Rg=
Subject key identifier: B3:AA:AC:66:C8:96:D3:79:63:C9:D8:E5:60:96:F7:E9:68:EF:88:09
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial: 019CAC0FF9C7881991D758067F24F09EB42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
Manifest number: 1212
Signing time: Mon 02 Mar 2026 01:00:53 +0000
Manifest this update: Mon 02 Mar 2026 01:00:53 +0000
Manifest next update: Tue 03 Mar 2026 01:00:53 +0000
Files and hashes: 1: 4xXEgGHm6FNEvzXSZMYA4CB15Xo.roa (hash: kLRMqyoKtLNzDHMHuXXnJpKSX1vsJYZPpStvOsdpbkA=)
2: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: UYzNqCvsB/p0xo5vPADLt8DfC4Xyn/OK1GKfRmwIpnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f9:c7:88:19:91:d7:58:06:7f:24:f0:9e:b4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Validity
Not Before: Mar 2 01:00:53 2026 GMT
Not After : Mar 3 01:00:53 2026 GMT
Subject: CN=b3aaac66c896d37963c9d8e56096f7e968ef8809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1a:2d:20:e6:e4:42:ee:0f:b7:88:bd:d2:9a:
49:c9:a5:e4:62:5d:d2:5c:c4:be:3b:18:da:40:7e:
d1:82:2e:c3:67:8e:87:98:20:cf:89:5a:58:ea:43:
8e:0a:95:fa:25:05:80:37:88:3f:0f:f2:8d:19:31:
2e:01:10:ea:a0:97:c6:90:88:ee:f2:8c:4c:9b:2f:
30:54:ff:95:fb:22:f8:85:44:02:fc:3b:69:a4:14:
2f:35:29:52:8d:24:c1:ba:f4:8b:bf:ba:47:3c:90:
20:f5:0c:f8:59:53:81:f9:67:64:ec:5e:67:d1:d6:
51:39:8a:ab:45:65:db:a2:be:2e:e2:88:d0:d4:55:
d8:7b:3a:42:34:4e:fa:63:b8:c9:ee:c1:39:80:58:
f0:0b:38:c9:0e:59:9a:26:88:0f:86:9b:1e:bb:aa:
8f:6b:81:93:7c:0f:72:58:cb:c8:a0:83:e2:5d:88:
58:c3:6c:cd:41:4c:ca:98:ff:d0:cc:73:0e:a0:13:
61:f4:e7:7e:59:10:df:fa:49:ae:56:46:36:d5:56:
98:f1:ea:0d:e2:d2:20:dc:25:94:26:e5:78:2b:7a:
ef:8e:57:98:45:9f:d7:78:8d:1a:e5:7c:be:15:83:
3e:11:a6:8d:b3:16:4a:64:c5:1c:2a:dc:21:ed:1e:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AA:AC:66:C8:96:D3:79:63:C9:D8:E5:60:96:F7:E9:68:EF:88:09
X509v3 Authority Key Identifier:
keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:75:1c:df:eb:b9:0c:a9:40:8f:3f:fa:89:96:82:de:9b:76:
80:af:ee:68:fe:b2:9f:b7:ea:8c:83:3a:24:6e:08:1f:0b:53:
3a:d4:60:34:a6:11:1d:00:46:b5:c4:c5:55:56:38:fd:9d:60:
3f:85:0d:61:86:c4:16:1a:8c:6a:7a:aa:99:38:2e:3f:1a:29:
01:b9:2e:a0:a6:56:5b:de:49:66:53:5c:43:04:81:9f:8c:2a:
ae:18:42:d4:15:f7:76:8b:5f:89:fb:7e:5c:46:05:44:47:34:
95:ab:e0:e2:6f:48:71:24:6e:a2:e3:0b:45:7f:7e:db:16:3d:
93:51:50:92:d1:1e:64:6a:b3:35:c8:54:ef:39:65:17:e0:b7:
2d:49:ef:95:16:1e:a8:c3:73:56:f8:9a:d0:af:87:6e:b0:25:
0d:0c:c0:f5:c0:ab:ba:ca:0d:38:51:bf:12:c6:0c:56:9f:55:
a2:e2:b4:29:71:f3:d7:23:d0:c9:b6:17:7d:32:4d:13:db:40:
de:d7:3b:a4:d6:5d:4b:73:41:09:03:eb:50:b9:24:e6:6e:39:
d3:03:77:03:82:69:41:5e:42:09:69:42:26:ba:cb:91:e9:a5:
38:f7:e4:f4:f2:64:fe:e5:cb:28:80:ce:44:5c:37:44:cb:8a:
ac:cf:9a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:58 2026 by rpki-client