
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json)
Hash identifier: G3ubhvhGyMPNJq1uaaKWtxTljChhacjSuHFgHtSKUw0=
Subject key identifier: DD:03:C3:64:78:AB:C7:A2:25:86:09:BC:F8:9F:23:1F:C5:B0:09:D1
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial: 019EC1495C61934B478A02A2256B500B8A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
Manifest number: 0E8B
Signing time: Sat 13 Jun 2026 14:01:10 +0000
Manifest this update: Sat 13 Jun 2026 14:01:10 +0000
Manifest next update: Sun 14 Jun 2026 14:01:10 +0000
Files and hashes: 1: L_9BG5xd7E-WvM8wNKg3JhMyHn0.roa (hash: fYhGLFm7hYXm5Z24lpdXxQv/bqEknOrei0vZwgl2Blk=)
2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: C1JL0vDseQi4uuaP5Fc9hooFkY8lb9Nflei33eqNWa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:5c:61:93:4b:47:8a:02:a2:25:6b:50:0b:8a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Validity
Not Before: Jun 13 14:01:10 2026 GMT
Not After : Jun 14 14:01:10 2026 GMT
Subject: CN=dd03c36478abc7a2258609bcf89f231fc5b009d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:d4:66:c8:45:50:5e:ac:ef:b9:d0:f0:ef:
76:86:fc:4f:bb:7e:81:c3:b5:50:a0:62:6e:64:b5:
35:2e:af:ee:d7:80:ef:5e:eb:9b:c3:1f:30:ce:ce:
62:2c:a7:ce:96:68:98:87:68:1c:2c:7b:79:a2:e5:
6d:06:96:83:71:fa:95:c6:d9:82:fc:a3:42:dc:c6:
ff:24:5a:c0:b8:9b:f8:64:05:1e:34:ee:18:96:8a:
0b:32:be:b7:86:89:0b:c9:fb:79:6c:b9:8e:b1:92:
ec:61:31:66:98:bf:0b:4b:aa:bc:e4:78:db:49:f7:
0d:47:b9:7e:01:47:d6:45:f3:8b:b0:74:61:c0:ce:
68:c6:26:d1:e1:1d:c3:3d:83:19:ea:95:52:f2:e1:
24:2e:79:72:76:4c:78:d7:05:2a:64:c8:ba:50:a7:
f8:09:b0:3c:dd:67:42:d7:1c:78:4a:42:a9:7b:b0:
e0:d3:a6:39:af:43:51:a5:fc:48:42:89:60:22:f5:
be:20:ff:ab:33:ef:c9:43:5d:af:6e:45:c2:5c:e3:
3d:38:86:1c:65:b7:e0:52:c5:52:ec:30:48:ae:f2:
a4:da:91:2a:33:58:8a:77:fa:43:cf:6d:b6:2e:f1:
fd:8f:5e:e1:df:5d:2a:9c:ef:14:43:8b:4e:eb:f0:
57:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:03:C3:64:78:AB:C7:A2:25:86:09:BC:F8:9F:23:1F:C5:B0:09:D1
X509v3 Authority Key Identifier:
keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:2b:2f:3b:0a:b8:4f:57:8f:12:60:be:6a:96:68:10:54:b7:
c7:8e:f5:22:c1:da:82:0b:5a:2a:13:0d:35:ce:a3:09:1f:41:
39:0d:cc:cc:48:91:f8:51:ba:a2:37:a5:c4:8c:b6:3b:a8:6f:
83:46:01:63:b7:0f:a5:fe:a5:4e:a1:91:2b:5d:51:c9:f2:de:
40:54:e4:2f:7e:25:39:10:aa:71:9f:23:e6:e3:77:7d:ea:0c:
a6:90:40:57:bb:85:07:44:a9:fa:5f:1b:45:07:26:3c:1c:1e:
0f:83:b1:56:55:14:c0:f3:9f:0a:1c:d0:8e:a2:88:1e:5f:73:
6f:b9:c7:a7:c8:76:b7:c4:cb:54:4d:0c:18:cd:f1:86:a2:a6:
38:f7:d4:04:d8:b7:5d:cc:b2:64:68:02:df:3f:d1:f3:8a:2e:
82:95:16:2b:88:6c:24:59:bb:59:8f:1f:7f:94:36:60:91:fc:
44:c2:49:19:16:03:6b:4e:b8:1e:67:f7:c2:b4:6e:e1:05:7e:
68:6a:cc:8c:b0:7f:86:2a:9f:0e:39:6a:0c:a6:70:97:73:a2:
8f:c6:c6:40:09:65:57:4f:d9:97:50:7c:24:ea:e5:a1:03:1a:
24:ed:ec:66:cf:21:ae:b7:0b:f7:b8:d2:f4:56:a3:d4:3d:13:
ce:8c:09:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSVxhk0tHigKiJWtQC4qSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkN2ZhYTViYjliM2VhNDAxMzdkYjg2YzQwNzJmY2UxNThm
NmE1Y2YwHhcNMjYwNjEzMTQwMTEwWhcNMjYwNjE0MTQwMTEwWjAzMTEwLwYDVQQD
EyhkZDAzYzM2NDc4YWJjN2EyMjU4NjA5YmNmODlmMjMxZmM1YjAwOWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc/UZshFUF6s77nQ8O92hvxPu36B
w7VQoGJuZLU1Lq/u14DvXuubwx8wzs5iLKfOlmiYh2gcLHt5ouVtBpaDcfqVxtmC
/KNC3Mb/JFrAuJv4ZAUeNO4YlooLMr63hokLyft5bLmOsZLsYTFmmL8LS6q85Hjb
SfcNR7l+AUfWRfOLsHRhwM5oxibR4R3DPYMZ6pVS8uEkLnlydkx41wUqZMi6UKf4
CbA83WdC1xx4SkKpe7Dg06Y5r0NRpfxIQolgIvW+IP+rM+/JQ12vbkXCXOM9OIYc
ZbfgUsVS7DBIrvKk2pEqM1iKd/pDz222LvH9j17h310qnO8UQ4tO6/BXQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0Dw2R4q8eiJYYJvPifIx/FsAnRMB8GA1UdIwQY
MBaAFI1/qlu5s+pAE324bEBy/OFY9qXPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDIt
Zjk5OWUxYmViOTYxLzEvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDItZjk5OWUxYmViOTYx
LzEvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwisvOwq4
T1ePEmC+apZoEFS3x471IsHaggtaKhMNNc6jCR9BOQ3MzEiR+FG6ojelxIy2O6hv
g0YBY7cPpf6lTqGRK11RyfLeQFTkL34lORCqcZ8j5uN3feoMppBAV7uFB0Sp+l8b
RQcmPBweD4OxVlUUwPOfChzQjqKIHl9zb7nHp8h2t8TLVE0MGM3xhqKmOPfUBNi3
XcyyZGgC3z/R84ougpUWK4hsJFm7WY8ff5Q2YJH8RMJJGRYDa064Hmf3wrRu4QV+
aGrMjLB/hiqfDjlqDKZwl3Oij8bGQAllV0/Zl1B8JOrloQMaJO3sZs8hrrcL97jS
9Faj1D0TzowJIw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:53:35 2026 by rpki-client