Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: 0vvQ8l3w6j4o08u1ycERq42h0zr4dMbOagmSLoaJ0rI=
Subject key identifier: 8C:9D:75:38:6D:4F:B6:29:BA:5E:97:AD:32:D1:CA:3F:4C:A6:C8:71
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 01A0C444B518F5B72DBFC1FB1C7DE75EAEA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 067C
Signing time: Mon 21 Sep 2026 14:00:32 +0000
Manifest this update: Mon 21 Sep 2026 14:00:32 +0000
Manifest next update: Tue 22 Sep 2026 14:00:32 +0000
Files and hashes: 1: OTzOq7SDpRdksgl_zYPgtdePfLI.roa (hash: D6qdGzPzEfS+jEvVQOP5Z3G0DkCqmvwi/YwWrt4+qgc=)
2: Uxk1FwItIfltxuYz2o9bKLPYoqw.roa (hash: 00PfsX6vRTHIMTxBup/P+JPXMFRRdRTXxG1QyBpuPMY=)
3: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: uv4vW7Ssqayq1LN1aF6gQymGKjEjuAaw7HTxlGftjoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:b5:18:f5:b7:2d:bf:c1:fb:1c:7d:e7:5e:ae:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Sep 21 14:00:32 2026 GMT
Not After : Sep 22 14:00:32 2026 GMT
Subject: CN=8c9d75386d4fb629ba5e97ad32d1ca3f4ca6c871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:77:f5:4b:4f:6d:1d:59:30:b7:04:cf:f6:63:
5f:18:7f:a5:f3:13:94:68:e8:e2:7f:76:b4:13:2c:
dd:4f:31:dd:3e:2f:48:c6:19:8d:c8:11:0b:65:13:
de:1d:f7:b6:e9:eb:4c:7a:6b:bb:8a:aa:94:23:ee:
29:6a:3c:f8:aa:50:5e:f6:be:86:a3:df:56:d5:7e:
cc:a6:0a:07:30:a9:96:ed:a0:39:9c:89:0f:f0:4f:
e9:61:58:d7:bc:93:20:5f:ec:ac:0a:54:0c:6f:53:
38:5c:8f:e9:26:aa:c1:87:0b:f5:6b:75:56:c7:92:
7d:5c:38:35:73:b8:a5:cb:93:47:f4:20:0b:07:d6:
83:0c:57:04:f5:a5:11:52:bc:94:c2:1f:6d:1a:6a:
a9:9d:5a:96:27:d8:67:40:6b:97:04:05:84:32:c0:
36:15:c5:b5:94:d8:1c:a7:b0:30:7e:4e:b3:03:81:
e8:32:83:65:bd:cf:ad:c0:46:1b:21:7f:85:7a:20:
51:be:b6:5d:07:68:93:8b:77:77:b0:70:7d:5c:d8:
02:d9:ec:e3:c8:45:5a:f9:5d:60:57:ed:07:e4:c4:
66:74:32:d6:e2:e0:e6:6d:22:92:4d:a5:be:50:d6:
d4:be:18:5a:84:8d:9b:07:ce:6c:5c:72:ce:2a:23:
89:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9D:75:38:6D:4F:B6:29:BA:5E:97:AD:32:D1:CA:3F:4C:A6:C8:71
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:06:a4:0f:00:3b:16:35:3c:57:a2:10:37:bc:d1:63:dc:e0:
51:33:d9:82:64:68:db:1d:21:13:2c:80:9e:31:27:2b:92:ba:
1a:d1:e8:cb:22:31:91:bf:da:e6:94:f0:18:15:b9:33:11:38:
43:9d:b0:8d:37:5e:45:60:f8:ee:05:17:84:3d:d0:6a:3c:fa:
44:6e:85:e6:e9:c8:4c:03:fb:93:5b:34:ac:1b:95:77:fe:0b:
3a:66:4e:65:f9:b5:2f:b0:fb:f8:c1:67:e0:de:37:1c:93:24:
78:89:21:5e:21:d3:ce:41:20:5c:e3:03:ea:94:7a:1e:8a:a2:
22:5f:df:7b:00:24:3f:94:35:b3:fd:ea:ff:1f:0c:d9:79:f6:
45:24:26:f0:ee:c3:36:f9:86:8d:4c:9d:cb:26:2f:0c:c3:a7:
2f:6a:24:2a:91:30:87:20:54:11:b1:7b:08:23:45:d6:85:c8:
d1:92:c1:56:f3:9f:64:f2:86:be:76:b9:fb:d4:0d:31:ff:06:
55:42:db:c9:d4:d8:7c:b9:65:55:ad:c7:86:60:dc:05:6c:93:
5f:49:ca:1d:f9:e6:31:28:e8:7c:19:71:c2:e1:42:18:fe:6b:
3f:ae:4d:da:f7:f5:a5:83:f2:f8:45:b0:53:8a:d7:02:18:49:
03:4c:7c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:01:16 2026 by rpki-client