Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
File: jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft (raw, json)
Hash identifier: aWXT2/EVimsWTejZP0pexmp+6ujxMdGCLmurna/TgKc=
Subject key identifier: 6F:2C:A7:AE:A5:D2:A2:AD:65:95:70:0D:3D:A9:36:6D:E7:09:03:46
Authority key identifier: 8C:30:D8:96:F2:C5:D0:77:0F:B8:D1:C9:14:0B:05:9F:19:FF:6C:E9
Certificate issuer: /CN=8c30d896f2c5d0770fb8d1c9140b059f19ff6ce9
Certificate serial: 019FAB62F96C46191EC6D38F22F28987E9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
Manifest number: 01E9
Signing time: Wed 29 Jul 2026 01:00:17 +0000
Manifest this update: Wed 29 Jul 2026 01:00:17 +0000
Manifest next update: Thu 30 Jul 2026 01:00:17 +0000
Files and hashes: 1: gBhIlR2Vy9wZybBnJlISzDPwKZ8.roa (hash: 1heXPqmld/OvbyWoLXACStGWieBaqsBslRtSrtYIOUw=)
2: jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl (hash: YaSEmv8sgbOVNHdEC789nnMDyhlpN5oc5D9m1E7tYB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:62:f9:6c:46:19:1e:c6:d3:8f:22:f2:89:87:e9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c30d896f2c5d0770fb8d1c9140b059f19ff6ce9
Validity
Not Before: Jul 29 01:00:17 2026 GMT
Not After : Jul 30 01:00:17 2026 GMT
Subject: CN=6f2ca7aea5d2a2ad6595700d3da9366de7090346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:11:f3:ee:dd:f9:72:07:75:79:8e:43:b0:e7:
2c:71:7a:20:c9:c2:6d:33:2e:93:64:35:1b:1b:79:
9b:32:45:e0:5e:b5:ee:d3:e7:39:13:5a:46:60:7e:
5e:27:ae:f6:7f:33:8f:ff:f8:cf:75:6e:d4:d9:f0:
b9:0b:83:6d:60:61:51:ef:aa:7f:2d:f3:78:15:f6:
d0:3d:dd:e6:80:fe:98:72:aa:a9:c8:4e:fd:eb:93:
62:95:3f:f4:2f:ca:ee:74:12:54:f8:4b:55:11:43:
29:85:f2:06:a6:6d:d0:54:3f:4b:88:a0:7e:3e:f7:
25:68:f4:87:cd:21:ff:14:3a:b2:a0:57:36:fa:2a:
82:e2:3e:4d:45:94:ca:35:05:8c:7a:03:30:d8:f9:
4d:be:5a:52:38:af:2b:6c:92:7b:4a:49:38:a8:23:
3c:4b:97:a5:19:68:88:ae:2f:53:a7:38:85:48:67:
e3:54:11:b2:11:c6:07:57:43:46:c0:97:1d:9a:ec:
a0:2c:dd:13:78:2a:64:ff:c0:36:75:ca:54:be:51:
cf:72:e4:bd:af:40:1e:ce:c2:28:28:cb:5f:f6:b6:
68:39:79:a8:6a:da:21:9d:7b:2b:96:75:0b:d0:1e:
8e:5e:e2:d3:59:c0:b8:bd:e2:fd:44:60:81:50:92:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2C:A7:AE:A5:D2:A2:AD:65:95:70:0D:3D:A9:36:6D:E7:09:03:46
X509v3 Authority Key Identifier:
keyid:8C:30:D8:96:F2:C5:D0:77:0F:B8:D1:C9:14:0B:05:9F:19:FF:6C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6a:ea:96:4e:87:74:e2:7b:1c:9f:52:dd:de:68:61:07:67:
a7:ce:b5:32:18:40:1c:29:a5:40:88:df:da:f7:eb:44:87:01:
72:d3:19:0e:5f:74:7b:c0:92:39:32:16:a5:22:1a:08:b6:32:
d6:f8:ed:1f:47:0c:14:91:a3:b5:22:b2:a8:3e:c8:70:dd:7a:
55:a6:02:73:15:5b:46:9c:d3:1b:65:86:b0:10:ad:5e:5f:bc:
b3:64:73:57:78:5e:0c:76:71:97:98:a6:11:31:0d:08:16:2e:
c0:a8:2a:25:1b:fc:71:fc:44:1b:b6:ea:b4:08:b3:0b:80:c1:
0a:87:53:44:67:66:99:ff:05:03:f0:23:6f:f9:91:96:fe:d3:
2c:2f:d1:06:7b:fd:9b:d0:98:1a:8a:14:65:de:26:9b:f2:ef:
48:11:de:19:bd:20:23:79:49:c0:a4:32:0d:72:5d:c2:ff:c2:
5b:4d:ad:11:77:a4:5d:af:25:c6:5b:b3:8b:ca:23:cd:df:e2:
d9:b0:30:a0:c5:e0:84:13:1d:5f:d1:15:e8:d7:10:82:62:17:
d1:75:ee:05:52:10:66:3c:fa:4a:f8:a6:17:7e:16:db:a3:03:
8d:66:70:10:88:4e:b7:bd:70:e1:49:eb:f2:82:63:c9:e2:ed:
1b:44:9d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:41:05 2026 by rpki-client