Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: s/oAU+W/IB2/8xnXeM6ce8SAlhohFWAe4q2CtlqEzNE=
Subject key identifier: 20:B7:E5:D6:B8:9D:74:86:08:0E:FB:61:0E:D8:A4:FC:B5:E1:B3:06
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 019ED4996F75D51546AE71E2F53E5F055440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 0C60
Signing time: Wed 17 Jun 2026 08:01:25 +0000
Manifest this update: Wed 17 Jun 2026 08:01:25 +0000
Manifest next update: Thu 18 Jun 2026 08:01:25 +0000
Files and hashes: 1: BK3tpKOSTXCxYKkOe13Q63MJb9I.roa (hash: z9SYgCP3ZiLQk0vjMcoJ4vujaJvpOaOHnYotNVtHhjQ=)
2: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: WbbhX3QbgwmQY1/ttrvrC2PE45Xc+Qzp3VUKft9IZSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:99:6f:75:d5:15:46:ae:71:e2:f5:3e:5f:05:54:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Jun 17 08:01:25 2026 GMT
Not After : Jun 18 08:01:25 2026 GMT
Subject: CN=20b7e5d6b89d7486080efb610ed8a4fcb5e1b306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:92:3d:bd:e6:15:4c:aa:f8:71:63:13:05:77:
27:35:6f:42:5c:9a:a8:f3:5c:73:36:67:9a:ae:83:
86:2c:71:d1:8b:90:4b:15:85:e6:18:57:c3:3f:ae:
67:17:bc:2a:30:d1:37:3d:9d:27:fe:d7:b6:0b:89:
a5:8f:06:0f:2e:9a:0c:2b:96:5c:a5:b7:1e:63:a3:
84:ae:7c:73:4e:15:9f:0b:08:48:89:f5:1b:ed:f4:
0f:f7:d3:84:90:ff:f3:4d:79:0a:a4:3e:c9:8f:c6:
28:19:22:8d:00:6f:da:c6:8d:25:52:f0:61:e3:12:
e4:d0:42:13:4d:d3:88:71:21:29:c9:6b:34:b6:f8:
30:3f:d3:bd:65:42:51:13:b0:99:f3:7c:3b:11:81:
e9:63:c6:33:73:ae:62:04:41:7e:5f:d0:49:5a:29:
3a:58:be:62:4f:4d:3d:dd:1f:8c:f1:50:0c:f4:63:
2e:f2:88:d9:44:24:8f:91:64:9b:7f:72:46:07:2c:
ea:77:46:e8:5e:f3:20:77:53:08:d8:14:ec:6b:31:
f0:34:32:e5:a3:81:6c:d7:d3:ec:7e:07:e3:17:2b:
bb:49:4c:ef:db:1c:b8:3f:4e:f4:eb:d1:02:9f:db:
55:5f:04:3c:93:2e:3e:ee:8d:e5:0d:05:ac:59:f2:
a4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B7:E5:D6:B8:9D:74:86:08:0E:FB:61:0E:D8:A4:FC:B5:E1:B3:06
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3c:fe:c0:22:07:04:b0:36:31:3d:62:2d:6d:e3:47:6a:c6:
81:ba:b9:75:77:12:f1:3c:8a:ce:0b:8d:51:59:20:08:f2:ce:
5f:3f:27:dc:2d:69:19:db:fd:0a:75:0d:67:43:cc:e7:8b:d9:
ba:5a:16:1a:c0:2e:d1:6e:8b:de:f5:05:aa:76:02:05:71:e2:
6f:b7:68:84:55:5f:74:18:99:8d:ac:2a:78:ca:dc:1c:fb:f9:
d4:3c:f4:e5:c1:91:f8:2c:61:0c:aa:ab:e5:b4:c1:94:96:87:
0f:fd:46:d9:cc:99:47:6a:a8:9e:43:64:7a:30:51:f2:f7:88:
18:64:36:87:f5:6e:53:ad:39:11:bb:02:8f:24:48:31:73:4d:
ab:02:02:2d:27:58:13:ae:b7:72:ad:80:0b:68:f4:f6:88:7b:
2a:6c:96:65:04:e5:79:44:f5:5b:7c:74:f4:6d:c9:00:12:07:
fa:32:81:db:77:c9:e6:b2:28:66:c5:48:14:0a:79:43:9e:2c:
48:48:24:89:73:3b:42:d9:a2:fb:42:85:cb:9f:28:9c:e3:72:
32:11:28:d1:3f:8a:ce:6b:97:20:cd:30:d5:53:69:69:01:d3:
44:a0:f3:b3:a7:8d:f4:3a:6a:51:15:c0:33:61:89:77:0d:c4:
18:22:b6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:36:30 2026 by rpki-client