Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
File: jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft (raw, json)
Hash identifier: DOFcjl3ezQEwWIQBSKySwtdp71ZAnKkXGCwlGuaI9wk=
Subject key identifier: 3C:8E:25:38:DC:DB:6D:48:15:5A:CE:10:E5:CF:AC:72:56:2E:10:00
Authority key identifier: 8C:30:D8:96:F2:C5:D0:77:0F:B8:D1:C9:14:0B:05:9F:19:FF:6C:E9
Certificate issuer: /CN=8c30d896f2c5d0770fb8d1c9140b059f19ff6ce9
Certificate serial: 019EC1B72BF052D0F2D9729D61F4C34298F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
Manifest number: 0170
Signing time: Sat 13 Jun 2026 16:01:07 +0000
Manifest this update: Sat 13 Jun 2026 16:01:07 +0000
Manifest next update: Sun 14 Jun 2026 16:01:07 +0000
Files and hashes: 1: gBhIlR2Vy9wZybBnJlISzDPwKZ8.roa (hash: 1heXPqmld/OvbyWoLXACStGWieBaqsBslRtSrtYIOUw=)
2: jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl (hash: 6/LBdeMkaBFUx2zICf5z+Ir+opPp+7yHmia2HXPSi2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:2b:f0:52:d0:f2:d9:72:9d:61:f4:c3:42:98:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c30d896f2c5d0770fb8d1c9140b059f19ff6ce9
Validity
Not Before: Jun 13 16:01:07 2026 GMT
Not After : Jun 14 16:01:07 2026 GMT
Subject: CN=3c8e2538dcdb6d48155ace10e5cfac72562e1000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:29:45:bd:29:f3:c2:6a:21:dc:45:c0:49:
5a:5c:aa:f1:e3:9a:d6:d5:35:41:d6:30:c3:66:a0:
6c:67:42:55:65:1a:1c:2f:81:9d:ff:43:eb:f1:8e:
15:c7:bb:46:3e:45:8d:1c:dd:6f:e5:95:0c:f2:85:
97:c2:60:b7:70:e0:f5:08:ca:6c:f3:c3:ca:dc:1c:
26:1e:60:32:2f:d3:c2:2f:54:f7:28:68:32:fc:ca:
87:d9:48:73:5e:de:5d:fd:5e:29:05:40:2a:ff:f7:
75:db:67:6f:8b:21:90:36:b1:8b:1d:2b:3b:f0:6b:
aa:fe:b1:0e:e2:87:73:af:98:ba:d8:ca:1d:75:39:
92:35:74:25:76:db:9b:3b:f7:02:73:2a:9f:e0:fb:
bb:5a:96:74:c1:f2:aa:bb:69:21:da:2c:02:40:74:
b5:6a:a3:9f:db:88:d1:48:f2:46:77:2d:ab:2f:8e:
b5:a4:df:c7:58:e4:5f:d6:7c:c6:3c:70:e3:a9:66:
d0:40:e6:ed:41:02:95:63:65:34:dd:bb:92:63:c3:
35:65:d8:9a:55:05:4d:d1:30:08:52:9d:fd:3a:8f:
fc:17:3d:c3:db:57:d5:12:ba:04:2f:4d:b3:25:34:
35:3a:57:f3:74:e4:ca:74:85:96:56:0f:21:10:d0:
a2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8E:25:38:DC:DB:6D:48:15:5A:CE:10:E5:CF:AC:72:56:2E:10:00
X509v3 Authority Key Identifier:
keyid:8C:30:D8:96:F2:C5:D0:77:0F:B8:D1:C9:14:0B:05:9F:19:FF:6C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4f:87:8c:3e:1e:1f:f2:45:6f:1e:94:fd:d0:51:7a:b4:bf:
a8:44:3f:be:e7:82:61:b6:a6:3e:75:d3:20:02:80:9e:3a:d2:
3a:1d:6f:ca:25:8c:e3:14:75:88:31:45:a6:e5:81:1f:51:99:
12:77:5f:f0:db:d4:8f:7a:9a:71:aa:1f:31:93:64:b8:ac:ae:
2d:f4:ca:11:22:55:89:47:47:9e:f5:fd:08:2b:c9:24:3f:5d:
1b:ca:16:e7:97:0c:d2:5a:a6:22:52:9b:21:99:89:56:2e:5e:
ad:ed:6b:39:0b:1c:48:06:0f:6c:10:38:03:b1:bb:9c:d0:8f:
78:9a:12:28:d4:8f:3a:fc:d2:6e:d6:d7:25:78:7d:2c:d9:03:
24:3d:ef:5e:d1:45:40:63:75:4d:11:99:4b:de:42:03:c7:93:
19:27:3a:7a:cb:6c:e2:51:ae:35:eb:0b:7a:2e:5a:17:87:73:
94:3b:f9:74:1a:22:36:a6:22:96:59:3b:1e:f4:4b:75:90:c3:
2e:cc:f0:b7:f5:4c:40:ea:80:6c:d2:62:ed:e1:2a:d4:bc:88:
07:fe:b4:08:02:55:02:b7:64:84:ec:b6:62:b5:03:02:25:8c:
1a:dc:85:9a:23:c6:22:58:56:69:fe:3c:c0:78:9c:8e:1a:75:
26:2e:28:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BtyvwUtDy2XKdYfTDQpjzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMzBkODk2ZjJjNWQwNzcwZmI4ZDFjOTE0MGIwNTlmMTlm
ZjZjZTkwHhcNMjYwNjEzMTYwMTA3WhcNMjYwNjE0MTYwMTA3WjAzMTEwLwYDVQQD
EygzYzhlMjUzOGRjZGI2ZDQ4MTU1YWNlMTBlNWNmYWM3MjU2MmUxMDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcApRb0p88JqIdxFwElaXKrx45rW
1TVB1jDDZqBsZ0JVZRocL4Gd/0Pr8Y4Vx7tGPkWNHN1v5ZUM8oWXwmC3cOD1CMps
88PK3BwmHmAyL9PCL1T3KGgy/MqH2UhzXt5d/V4pBUAq//d122dviyGQNrGLHSs7
8Guq/rEO4odzr5i62ModdTmSNXQldtubO/cCcyqf4Pu7WpZ0wfKqu2kh2iwCQHS1
aqOf24jRSPJGdy2rL461pN/HWORf1nzGPHDjqWbQQObtQQKVY2U03buSY8M1Zdia
VQVN0TAIUp39Oo/8Fz3D21fVEroEL02zJTQ1OlfzdOTKdIWWVg8hENCiAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyOJTjc221IFVrOEOXPrHJWLhAAMB8GA1UdIwQY
MBaAFIww2JbyxdB3D7jRyRQLBZ8Z/2zpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakREWWx2TEYwSGNQdU5ISkZBc0ZueG5fYk9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9kNjhmN2ItMmRmNy00YWZmLWJkMTYt
NzYyNGRkNmQ3ZDMwLzEvakREWWx2TEYwSGNQdU5ISkZBc0ZueG5fYk9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9kNjhmN2ItMmRmNy00YWZmLWJkMTYtNzYyNGRkNmQ3ZDMw
LzEvakREWWx2TEYwSGNQdU5ISkZBc0ZueG5fYk9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgE+HjD4e
H/JFbx6U/dBRerS/qEQ/vueCYbamPnXTIAKAnjrSOh1vyiWM4xR1iDFFpuWBH1GZ
Endf8NvUj3qacaofMZNkuKyuLfTKESJViUdHnvX9CCvJJD9dG8oW55cM0lqmIlKb
IZmJVi5ere1rOQscSAYPbBA4A7G7nNCPeJoSKNSPOvzSbtbXJXh9LNkDJD3vXtFF
QGN1TRGZS95CA8eTGSc6ests4lGuNesLei5aF4dzlDv5dBoiNqYillk7HvRLdZDD
Lszwt/VMQOqAbNJi7eEq1LyIB/60CAJVArdkhOy2YrUDAiWMGtyFmiPGIlhWaf48
wHicjhp1Ji4o2Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:21:00 2026 by rpki-client