Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: wZdqv9HtbCcKcn0y8s9CXAX2WS2DLYA6f0gvIZELjYI=
Subject key identifier: 9F:60:26:D8:6A:E1:94:98:02:DC:DD:06:60:C3:CD:29:A5:FC:A9:2A
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 019FAA5065E4FBC0343BF398AE82FD899B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 05EA
Signing time: Tue 28 Jul 2026 20:00:23 +0000
Manifest this update: Tue 28 Jul 2026 20:00:23 +0000
Manifest next update: Wed 29 Jul 2026 20:00:23 +0000
Files and hashes: 1: OTzOq7SDpRdksgl_zYPgtdePfLI.roa (hash: D6qdGzPzEfS+jEvVQOP5Z3G0DkCqmvwi/YwWrt4+qgc=)
2: Uxk1FwItIfltxuYz2o9bKLPYoqw.roa (hash: 00PfsX6vRTHIMTxBup/P+JPXMFRRdRTXxG1QyBpuPMY=)
3: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: QFcXd132rC6LEMS2rybZmLy1B96N9m7NCA3t11TAAVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:65:e4:fb:c0:34:3b:f3:98:ae:82:fd:89:9b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Jul 28 20:00:23 2026 GMT
Not After : Jul 29 20:00:23 2026 GMT
Subject: CN=9f6026d86ae1949802dcdd0660c3cd29a5fca92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d5:0a:90:a3:7d:2e:a8:81:cd:41:8a:07:a6:
11:87:96:c7:39:74:77:ff:0f:d6:72:be:4f:aa:6a:
5c:03:0a:09:9e:af:03:0e:3f:e8:f1:31:84:73:47:
7e:2b:26:6d:c3:cd:0d:6a:19:84:42:bc:48:38:d7:
6a:09:92:17:1d:4b:30:36:9c:f4:ba:00:82:f7:ae:
1f:df:74:cc:17:c6:86:29:e4:ce:40:61:25:46:0d:
7c:26:94:ad:6c:5d:b3:31:69:a8:c2:9f:9b:c0:4e:
34:99:36:f6:e1:76:c5:2c:e3:d5:f0:df:bd:bf:62:
b9:c4:ba:65:d8:f3:04:15:0b:5e:41:69:c9:d3:e2:
a6:d5:d0:10:60:ca:66:25:c6:ac:09:5a:68:bf:ad:
8c:79:0d:b1:9f:1b:aa:08:aa:1a:25:4f:3f:c5:9b:
8f:a7:2b:53:f9:f6:49:a5:8e:1d:a2:3b:bf:b2:4c:
70:f8:4d:07:4b:81:29:6f:58:99:e0:9d:f5:d1:b1:
5f:e6:a4:5b:f8:35:b8:4b:71:c9:0f:77:1f:6a:1d:
31:ed:16:ca:c8:cd:a9:08:26:e3:88:26:41:1e:5f:
72:76:05:f2:ae:0f:0c:e9:20:b7:d0:68:3b:35:06:
64:50:62:9a:a1:aa:0e:08:7a:68:1c:98:dc:a2:b2:
16:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:60:26:D8:6A:E1:94:98:02:DC:DD:06:60:C3:CD:29:A5:FC:A9:2A
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:24:75:22:40:a3:50:a5:8a:f8:72:c9:80:69:52:64:9e:c9:
5f:56:cd:33:f1:cf:08:44:22:7d:bf:d9:7b:b3:c0:4b:43:e0:
73:ea:3c:02:f1:c6:2f:a7:70:01:4c:e1:e8:f1:80:8d:c8:06:
a8:43:f6:70:eb:bf:07:68:76:3d:3d:80:d0:7b:20:1b:83:41:
4c:7e:9b:64:7e:13:a6:41:a2:af:1d:ef:54:28:0b:7e:95:dc:
52:81:ce:c2:4e:04:fb:2b:7b:b0:fb:d9:9c:e9:9a:a1:d5:e4:
27:ce:84:8b:f0:13:85:cb:21:92:80:46:31:de:d7:12:79:61:
71:24:7c:d2:40:0e:3e:40:36:c5:6b:1f:c9:00:9c:7b:71:68:
08:b8:37:6f:aa:38:67:21:32:a2:67:aa:e3:e6:00:d5:eb:b9:
eb:05:f0:15:5a:19:dc:e2:82:b9:81:54:41:7d:42:b8:a5:ee:
4a:17:68:2c:09:16:b7:5f:ab:3f:dd:c7:44:6d:b9:26:d7:b8:
1e:ae:91:67:e5:a7:31:c5:d5:fc:fc:84:d8:10:d2:eb:06:22:
ec:d0:05:47:56:d5:14:4d:56:45:8f:30:c8:a8:7b:75:34:34:
fd:ed:12:bb:48:04:ab:87:f8:24:14:c2:7c:56:2b:fc:ba:53:
cd:3d:29:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:26:23 2026 by rpki-client