Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
File: jTDnckXCFacL5O9X0DvR2NTbWJg.mft (raw, json)
Hash identifier: k6k3i16ajLz36Kf5xWYaayxRoqquVMfmAfMM0MsTsq4=
Subject key identifier: BC:8C:4C:FC:4A:D5:45:76:07:47:C8:45:3E:B0:2C:94:07:86:D1:80
Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
Certificate issuer: /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Certificate serial: 01A10B149E71171A92773DDF400FE0E3B820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
Manifest number: 05AA
Signing time: Mon 05 Oct 2026 08:01:02 +0000
Manifest this update: Mon 05 Oct 2026 08:01:02 +0000
Manifest next update: Tue 06 Oct 2026 08:01:02 +0000
Files and hashes: 1: E0AgYtmqvfWsCtuIwOtUo5wvcgU.roa (hash: w2ZEYMbSnl1r9XT320uy9sGbUhpOA37NS5yHBqC4/Fs=)
2: jTDnckXCFacL5O9X0DvR2NTbWJg.crl (hash: u0mTzc6EUL8XIPIbbuUwq+BgsEgaGc810yUXVmJnbyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:14:9e:71:17:1a:92:77:3d:df:40:0f:e0:e3:b8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Validity
Not Before: Oct 5 08:01:02 2026 GMT
Not After : Oct 6 08:01:02 2026 GMT
Subject: CN=bc8c4cfc4ad545760747c8453eb02c940786d180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:4c:b2:69:4f:5b:7c:39:d2:80:d9:bf:a8:
94:dc:09:44:9d:4a:4f:b0:8e:c8:bd:e6:fc:b5:68:
4f:47:06:85:4d:c8:8c:5c:66:9d:b0:8f:99:a0:3f:
3d:72:74:4a:51:c5:d6:2d:6b:16:0e:95:47:f1:e0:
24:00:a0:95:f0:c6:7e:b3:8a:ea:35:49:f1:36:ea:
61:17:b8:e1:eb:0d:dd:2f:89:1b:cf:80:a3:da:6c:
ec:6d:c6:41:34:b6:3e:23:23:7f:5b:ee:80:87:59:
af:4d:52:47:af:e6:e7:f2:7e:19:60:a4:20:6c:ad:
24:5a:0b:97:8c:97:a3:6a:5c:93:85:d3:25:2e:86:
a2:f7:72:cd:5c:9c:f1:27:58:63:35:ac:e8:94:19:
cd:29:ff:7b:9e:39:9c:43:21:88:21:0f:5d:16:6f:
70:59:81:9f:71:48:a8:24:fe:da:ce:d3:71:0c:da:
08:7b:7f:8f:df:b8:c2:de:4d:d2:a0:1d:a3:f9:18:
7f:65:b1:06:03:8e:5b:eb:88:e2:ec:64:ee:c0:eb:
48:c7:82:b1:12:d9:f2:b8:df:69:fb:95:c6:e2:58:
de:9c:63:49:81:dc:36:89:67:9b:00:a5:d2:72:83:
ce:97:e3:20:45:c1:93:7b:2c:85:2e:7d:af:2f:51:
fe:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8C:4C:FC:4A:D5:45:76:07:47:C8:45:3E:B0:2C:94:07:86:D1:80
X509v3 Authority Key Identifier:
keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:bf:a7:08:85:84:55:e9:72:4f:89:90:36:9c:5a:be:22:a6:
57:33:da:3b:fa:f7:d3:5f:9a:8b:7a:e7:96:44:c3:3d:fa:60:
51:b4:91:fd:ea:9f:5f:34:59:8d:52:17:12:99:8c:d1:c5:de:
30:79:93:94:ac:ff:82:81:f7:8e:9d:cc:11:09:ef:00:de:1c:
03:cd:07:e4:48:3d:a5:fb:24:c0:a3:69:93:05:b6:60:7f:e6:
93:86:1b:87:5a:2e:80:cf:ab:47:2b:99:52:9b:d3:39:bd:eb:
fe:dd:57:a1:25:f8:b8:5e:83:06:85:f8:bb:f1:61:9d:0f:88:
df:5e:95:93:aa:1c:a3:e5:6a:f8:e8:70:1a:e0:57:63:80:bc:
1d:bc:2f:13:a6:3e:1e:4b:b1:18:c5:33:18:bc:f8:22:b8:49:
2e:9b:30:10:c9:15:f9:41:38:f1:e6:75:28:ed:49:c6:37:9c:
5a:26:8e:a3:ba:bf:b9:0a:b4:07:5e:14:35:ca:4c:69:ac:4a:
ba:45:2b:7b:8f:c4:f4:bc:84:d8:bf:e9:96:d5:b9:bb:1f:59:
61:ec:44:ee:54:21:7b:d7:3a:77:39:e3:4d:df:c3:e4:29:67:
7c:62:45:31:79:03:6a:10:ca:5c:02:71:13:04:4e:58:a6:5a:
4f:de:11:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 11:09:52 2026 by rpki-client