
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
File: jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json)
Hash identifier: C7ElgHR0uNIomFfSUVJSR4T5CVmmOH9oJzXqGWAB2T4=
Subject key identifier: 9E:BD:00:57:80:D1:3D:6A:4A:B9:B0:32:CA:85:FD:42:E3:97:F3:B4
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial: 01A129559B5DF6F80DE90A3B4C6FD3ED222C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 05:00:37 +0000
Manifest this update: Sun 11 Oct 2026 05:00:37 +0000
Manifest next update: Mon 12 Oct 2026 05:00:37 +0000
Files and hashes: 1: D8C_fac31Ie3Mlmm0iY26zsUpPQ.roa (hash: aXM4Hau7o88WQaKHyho1aeWalezo3Xwt0vRqN6L/8TQ=)
2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: qtPyz8mTnJ0M1HH/ITXpLTnEYzqXk26Asaa1lbLNmqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:55:9b:5d:f6:f8:0d:e9:0a:3b:4c:6f:d3:ed:22:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Validity
Not Before: Oct 11 05:00:37 2026 GMT
Not After : Oct 12 05:00:37 2026 GMT
Subject: CN=9ebd005780d13d6a4ab9b032ca85fd42e397f3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:c0:c4:fb:d7:b1:c2:04:83:34:fe:f9:d4:
e8:80:aa:04:03:e9:66:3f:a5:a8:83:e5:39:30:17:
23:9f:76:48:1f:58:9a:da:91:21:13:2d:67:a3:ca:
a4:93:67:1d:18:2e:d3:ba:1f:22:3d:f1:e2:8c:46:
f9:45:30:4a:b4:9f:83:76:1a:ba:30:90:a7:aa:b0:
fd:c6:50:ff:82:25:6a:1b:b8:db:b2:93:15:ad:8a:
60:b7:f7:8c:e2:a5:32:6f:31:12:7b:25:d2:3a:37:
e1:0b:11:c5:ed:b3:c4:04:29:57:a8:ff:0a:c6:db:
94:26:4e:ec:14:8a:00:f5:a8:b6:48:5f:ff:00:1d:
1b:e9:2e:16:4e:a1:5e:fa:60:88:16:59:5c:73:8a:
c7:8b:ca:a9:c7:f7:0f:0c:19:33:be:04:8f:59:f4:
8d:3d:07:35:71:40:62:f6:cd:7d:02:0e:43:87:3e:
88:5d:28:ee:83:a5:ab:27:7c:26:f7:94:ed:9e:54:
07:50:cb:6c:c9:ae:e7:cb:61:38:1a:8e:71:0b:81:
2b:6f:44:69:ab:e7:ac:9c:35:9b:b5:c1:14:a3:25:
fa:1c:be:ba:13:41:47:81:8b:b0:5e:1f:0b:8b:05:
65:a2:78:d9:ca:b5:4d:6e:29:3a:db:c6:a8:58:d6:
2a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BD:00:57:80:D1:3D:6A:4A:B9:B0:32:CA:85:FD:42:E3:97:F3:B4
X509v3 Authority Key Identifier:
keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5a:11:9a:39:8e:06:c9:d9:25:7d:ab:86:9b:54:ac:e4:b6:
d4:69:5b:c7:c3:de:3b:bb:31:3a:20:ac:fc:2c:91:c6:e5:51:
c4:4b:7d:a8:35:54:cd:ee:f6:0a:5b:1d:a3:65:c6:f2:5e:e5:
96:c0:e6:8e:24:84:8b:1e:88:d6:b3:81:f8:57:63:a2:89:52:
f2:9b:32:24:ef:4b:0d:bf:d6:b9:a0:cb:97:1f:bf:64:4a:13:
dd:21:f5:28:e1:5b:db:48:0d:cb:96:0e:55:3b:ff:55:80:07:
84:6f:39:cf:0c:3d:ad:15:84:60:64:8e:7c:11:c3:61:91:e5:
8e:6f:7d:ab:42:28:e3:19:e7:e4:b0:be:29:17:25:15:da:b6:
5b:29:b8:86:89:73:81:a3:73:05:74:4e:8b:b3:0b:c4:82:77:
aa:bd:4d:51:31:48:9f:2f:1e:9a:3e:27:cd:91:ec:18:31:a4:
c3:01:11:14:a7:62:d5:8b:8c:65:3d:f1:9a:1c:04:67:e2:b0:
15:fc:36:9a:f7:d0:0a:3e:1d:09:4a:e6:38:7c:dc:34:66:b3:
41:92:2c:36:96:44:dd:9a:cc:ef:52:82:a3:65:d8:b9:0f:40:
03:c5:da:8d:a3:95:44:1a:92:d1:3f:fd:65:0e:9a:dc:bf:ca:
e7:1a:dc:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEpVZtd9vgN6Qo7TG/T7SIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMzRlMjkzOGRkNjg4NDliYjQwNmU5ZWI3OWM4OTNlNmMx
MmM3OGEwHhcNMjYxMDExMDUwMDM3WhcNMjYxMDEyMDUwMDM3WjAzMTEwLwYDVQQD
Eyg5ZWJkMDA1NzgwZDEzZDZhNGFiOWIwMzJjYTg1ZmQ0MmUzOTdmM2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscnAxPvXscIEgzT++dTogKoEA+lm
P6Wog+U5MBcjn3ZIH1ia2pEhEy1no8qkk2cdGC7Tuh8iPfHijEb5RTBKtJ+Ddhq6
MJCnqrD9xlD/giVqG7jbspMVrYpgt/eM4qUybzESeyXSOjfhCxHF7bPEBClXqP8K
xtuUJk7sFIoA9ai2SF//AB0b6S4WTqFe+mCIFllcc4rHi8qpx/cPDBkzvgSPWfSN
PQc1cUBi9s19Ag5Dhz6IXSjug6WrJ3wm95TtnlQHUMtsya7ny2E4Go5xC4Erb0Rp
q+esnDWbtcEUoyX6HL66E0FHgYuwXh8LiwVlonjZyrVNbik628aoWNYq0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ69AFeA0T1qSrmwMsqF/ULjl/O0MB8GA1UdIwQY
MBaAFIw04pON1ohJu0BunreciT5sEseKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zMjA3OTctYjgxMC00ZjhlLThlN2Mt
ODNjMzhiNzc3NDc4LzEvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8zMjA3OTctYjgxMC00ZjhlLThlN2MtODNjMzhiNzc3NDc4
LzEvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVoRmjmO
BsnZJX2rhptUrOS21Glbx8PeO7sxOiCs/CyRxuVRxEt9qDVUze72Clsdo2XG8l7l
lsDmjiSEix6I1rOB+FdjoolS8psyJO9LDb/WuaDLlx+/ZEoT3SH1KOFb20gNy5YO
VTv/VYAHhG85zww9rRWEYGSOfBHDYZHljm99q0Io4xnn5LC+KRclFdq2Wym4holz
gaNzBXROi7MLxIJ3qr1NUTFIny8emj4nzZHsGDGkwwERFKdi1YuMZT3xmhwEZ+Kw
Ffw2mvfQCj4dCUrmOHzcNGazQZIsNpZE3ZrM71KCo2XYuQ9AA8XajaOVRBqS0T/9
ZQ6a3L/K5xrcfA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:28:57 2026 by rpki-client