Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
File: jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json)
Hash identifier: TKolpOuWUwNU2O679VpDzM6Gi17FWLtlpzq+3C/+34Q=
Subject key identifier: 87:31:8B:D2:8A:63:FF:F2:26:37:FB:53:56:5B:47:1C:48:1E:87:67
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial: 019D9962E11AE1565EC22D2B5A79C1192D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
Manifest number: 128E
Signing time: Fri 17 Apr 2026 03:01:27 +0000
Manifest this update: Fri 17 Apr 2026 03:01:27 +0000
Manifest next update: Sat 18 Apr 2026 03:01:27 +0000
Files and hashes: 1: 4xXEgGHm6FNEvzXSZMYA4CB15Xo.roa (hash: kLRMqyoKtLNzDHMHuXXnJpKSX1vsJYZPpStvOsdpbkA=)
2: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: vwLts12bcqG0XuhY1WMzLaxgQqP0a9gjwp9omo2LDUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:e1:1a:e1:56:5e:c2:2d:2b:5a:79:c1:19:2d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Validity
Not Before: Apr 17 03:01:27 2026 GMT
Not After : Apr 18 03:01:27 2026 GMT
Subject: CN=87318bd28a63fff22637fb53565b471c481e8767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4b:7d:a9:d9:81:83:b5:0a:ae:e9:19:89:a7:
25:e5:90:20:42:4a:2a:af:9b:99:ce:82:43:40:72:
55:7c:38:c7:1f:4e:14:2e:67:2d:09:e7:04:50:1f:
5b:c1:b5:07:fa:f2:aa:e6:b3:75:5d:88:98:03:49:
98:46:74:e4:d9:0b:f3:5c:78:b8:bc:cb:d0:e9:f3:
74:a7:6a:f2:78:54:ee:6d:98:fe:7c:07:2f:df:3a:
d1:e4:8c:85:00:79:86:19:f2:71:54:e4:71:33:ea:
4f:96:f2:7d:0f:02:5b:35:87:64:18:d0:bd:96:0b:
df:ef:38:2a:74:0f:2b:34:6d:29:27:62:fc:71:cf:
01:1d:ff:6a:2d:69:a1:50:88:ff:cd:b3:16:7e:16:
0d:d6:ab:b0:78:11:a7:b3:2b:7b:3e:58:5f:3d:89:
4e:f9:84:a2:1a:9c:21:dc:e8:1d:6d:a8:c7:2f:14:
18:84:20:ba:1f:b6:32:cd:c9:4e:83:64:20:4e:5c:
58:9d:23:a3:98:72:40:4d:bf:7f:ac:ef:eb:fb:83:
33:b3:79:74:9e:91:aa:44:9f:4e:6c:6a:0d:e6:4a:
6a:e9:9e:ce:b2:8d:d8:63:34:3f:74:c4:8d:94:e9:
fe:11:e9:38:1a:44:d0:10:02:21:a6:97:ae:26:26:
5b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:31:8B:D2:8A:63:FF:F2:26:37:FB:53:56:5B:47:1C:48:1E:87:67
X509v3 Authority Key Identifier:
keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4f:43:3e:72:b7:e8:fb:28:8f:c5:3c:b3:e2:f5:55:db:4d:
a2:0f:3a:1b:16:9c:63:44:77:02:f7:7f:13:2d:85:07:a0:2b:
9e:e8:d8:55:30:8f:9f:73:d4:2c:d6:12:12:82:39:55:f7:19:
16:77:94:71:f3:67:ec:29:4b:c5:6a:62:39:08:03:59:79:06:
a0:40:6b:8d:9b:1b:0c:07:e5:9c:8b:cd:7f:b8:90:f8:a3:db:
e5:10:d4:5a:5a:50:ae:28:7f:d1:6c:d7:30:54:2c:e6:0a:eb:
cc:f1:21:e1:33:4c:d2:f8:2f:0e:93:8f:15:33:0f:80:cf:f3:
e5:4f:53:28:72:d0:71:1b:3c:f2:bd:89:2b:85:3e:f0:e2:62:
54:99:02:35:bc:32:de:db:4f:b2:12:d5:74:e3:f4:a8:59:82:
c6:cc:3c:f7:4a:4a:84:b0:d1:6b:c3:dd:ac:49:6e:21:39:9c:
25:5d:57:99:e6:d3:df:38:5d:b2:e1:74:b6:9b:68:ca:61:67:
1c:43:3c:4c:42:1e:c5:ac:e5:4a:e3:17:15:2f:8b:1c:b1:b6:
1f:12:5f:0f:7c:92:fa:b5:b7:3d:9b:81:31:ec:e5:e5:49:2a:
aa:8c:75:4a:09:28:f4:94:73:61:23:10:d3:b6:2d:0a:0e:67:
af:e8:72:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:54 2026 by rpki-client