Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: hZ8biJBrSq5IQyu87Q/bFGGrqOSRFglHLXv5DoQHIkU=
Subject key identifier: 14:13:28:0A:B9:1C:B8:30:CC:D6:89:64:B0:76:F8:27:91:1C:14:A0
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 01A0E1E2A4E6DB07BFEB0836F4B65A3D97E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 0D70
Signing time: Sun 27 Sep 2026 08:02:02 +0000
Manifest this update: Sun 27 Sep 2026 08:02:02 +0000
Manifest next update: Mon 28 Sep 2026 08:02:02 +0000
Files and hashes: 1: BK3tpKOSTXCxYKkOe13Q63MJb9I.roa (hash: z9SYgCP3ZiLQk0vjMcoJ4vujaJvpOaOHnYotNVtHhjQ=)
2: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: eks9AqCvQZa3YH2ZA8vUKjVbmKGA6H4zLLjr474mlWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:a4:e6:db:07:bf:eb:08:36:f4:b6:5a:3d:97:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Sep 27 08:02:02 2026 GMT
Not After : Sep 28 08:02:02 2026 GMT
Subject: CN=1413280ab91cb830ccd68964b076f827911c14a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:95:51:7f:5a:b8:5d:4a:68:b4:7d:b9:3f:
5a:f6:a7:77:a2:d5:b0:01:42:98:a5:11:43:e6:8d:
19:79:02:3a:02:96:8c:ae:06:ac:4b:e5:d7:fa:c0:
f4:5d:1e:e3:77:bf:f5:d2:19:4e:b4:47:9d:bb:ad:
84:1a:01:97:c7:ba:40:fa:e7:0f:21:c5:c4:a9:db:
48:a1:d4:2e:62:86:0e:81:6a:5c:22:79:25:20:31:
3b:17:47:fe:4a:49:18:37:fc:d8:e0:65:7c:1d:1d:
18:39:15:67:5c:00:4f:44:07:0e:fc:da:4d:93:2f:
b4:59:00:e0:0c:a7:84:8f:d2:b0:f0:aa:d5:cd:98:
a5:3f:0f:12:8b:1c:27:e2:eb:ed:f4:25:94:c5:e4:
3e:26:b7:00:e6:0c:31:4a:64:88:29:73:49:e7:37:
e5:05:ef:ed:11:b6:dd:5f:c7:3a:7c:be:d6:ad:26:
fa:2b:c9:0f:be:78:a3:a7:42:25:91:37:48:24:f4:
6e:95:8e:fb:22:c8:ae:17:06:c4:3a:9c:dd:db:64:
b9:fb:f6:32:a1:d0:ed:06:12:4d:51:96:03:16:fd:
8a:42:f2:fb:04:7c:ff:3e:12:a3:f9:42:a3:1b:e3:
eb:8d:4a:69:19:d3:f6:39:bc:36:6d:ca:42:88:67:
a3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:13:28:0A:B9:1C:B8:30:CC:D6:89:64:B0:76:F8:27:91:1C:14:A0
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:06:d6:6d:ee:ab:35:70:3e:c3:f8:b7:bd:77:ed:91:1e:09:
fc:c6:3f:bb:74:1e:89:b3:46:0a:da:2c:af:97:7a:6b:31:cc:
0c:3a:bb:07:93:7a:53:1f:19:9d:d0:8e:30:68:96:2a:55:59:
e4:cf:78:1c:12:b7:fa:94:55:b2:de:33:a6:56:a8:6c:23:24:
b6:8f:6e:e8:5a:2b:18:8b:14:68:61:34:4d:23:77:80:03:83:
cd:64:00:26:7c:c6:7e:0a:74:9e:e1:14:13:7d:6c:f2:6b:41:
38:ca:3a:4a:57:a4:8c:ec:50:5d:dd:11:1a:c3:66:ab:f0:bc:
d7:84:2f:f5:43:98:a5:9d:82:f7:11:cb:ed:10:4b:2a:62:21:
1c:2e:75:f5:e3:1a:df:95:b7:f4:61:a2:99:f2:cb:4d:82:04:
98:d1:5f:89:d3:7e:32:67:4c:bc:70:78:ba:1b:d0:a9:c2:c4:
7c:a8:90:d0:45:11:f8:f5:cb:b7:10:e4:a2:34:ad:2b:23:5d:
1e:9d:b9:c8:8b:26:e8:2b:fc:08:b3:9f:01:f4:46:a4:04:4b:
7f:d9:66:d2:7e:e7:cc:84:dc:f0:56:02:2b:17:6d:dd:2b:7f:
4f:db:ad:18:f0:88:b2:b8:7f:e3:1d:35:24:0f:94:f6:09:59:
be:a5:1a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:12:27 2026 by rpki-client