Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: 6wPaCSxQ6nerOQNeSRKN6F5aq0/WGkgTGkRwQSKkCuQ=
Subject key identifier: 7F:F8:68:16:8F:54:6D:AD:CB:3A:F9:B1:E1:31:22:4D:47:04:28:75
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 019EBEB5C98E205F64010CD1B47AD9BFD0EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 0570
Signing time: Sat 13 Jun 2026 02:00:45 +0000
Manifest this update: Sat 13 Jun 2026 02:00:45 +0000
Manifest next update: Sun 14 Jun 2026 02:00:45 +0000
Files and hashes: 1: OTzOq7SDpRdksgl_zYPgtdePfLI.roa (hash: D6qdGzPzEfS+jEvVQOP5Z3G0DkCqmvwi/YwWrt4+qgc=)
2: Uxk1FwItIfltxuYz2o9bKLPYoqw.roa (hash: 00PfsX6vRTHIMTxBup/P+JPXMFRRdRTXxG1QyBpuPMY=)
3: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: RNMl78CQ42/wLPT1FGs3gV3XNMot+GhEY4d4oOgmHjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:c9:8e:20:5f:64:01:0c:d1:b4:7a:d9:bf:d0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Jun 13 02:00:45 2026 GMT
Not After : Jun 14 02:00:45 2026 GMT
Subject: CN=7ff868168f546dadcb3af9b1e131224d47042875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e4:42:cc:c0:0c:ab:f6:bb:15:d1:cf:bf:45:
16:55:71:c5:2f:96:92:ce:6b:0f:37:de:11:40:d4:
56:d2:49:25:45:8d:24:ae:bd:44:59:08:b1:c0:5e:
43:e6:f4:83:9e:02:e3:2d:ff:7c:5e:9f:7b:8a:0a:
9e:00:0f:37:6a:15:b0:fd:c1:99:66:5d:5e:0d:b5:
28:6a:a5:d7:67:a7:06:68:1a:7b:f7:3d:0d:34:15:
37:29:af:22:18:34:c7:d8:1c:ae:6a:99:74:74:76:
47:d5:d2:85:78:c1:bc:09:40:d3:d3:20:62:fa:fa:
4f:f1:7d:1a:fc:d4:a1:73:ed:62:62:e1:0f:bb:2b:
83:47:cd:5c:d9:54:9a:e9:03:28:38:3a:9c:9b:97:
05:21:62:9c:8a:45:05:bb:6c:d8:60:0a:61:ef:d5:
c0:1c:3d:6d:02:08:a4:04:ec:b1:b7:27:82:a6:97:
39:ee:fd:d2:e3:95:a5:70:c4:d3:22:6f:ea:a6:ea:
a9:38:c7:9a:9b:19:38:bd:e5:02:19:eb:6b:0f:c3:
c3:ee:e3:86:17:bc:cb:dd:28:6b:e9:e2:c8:9c:41:
7c:d5:ed:43:7e:98:a9:29:5a:71:c5:32:2a:94:00:
cf:75:b4:2b:39:96:98:80:94:26:a6:28:a3:0c:32:
79:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F8:68:16:8F:54:6D:AD:CB:3A:F9:B1:E1:31:22:4D:47:04:28:75
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6e:24:87:5b:13:13:be:73:78:f0:1a:2d:1a:3e:2c:97:8d:
a6:ec:7f:69:47:bb:8c:e2:fe:d6:c2:36:ad:3f:9b:da:45:94:
d9:d7:0e:60:c3:18:ed:4f:8f:cd:d9:81:f8:3d:7f:44:ee:43:
cb:a1:28:2f:71:9e:7d:98:36:c8:dc:c5:66:53:4d:0d:e3:ec:
49:38:6d:8a:7f:52:71:a3:06:63:e6:65:3d:cd:f0:6c:cc:e1:
00:a2:58:ff:58:0c:12:76:39:23:fc:11:3e:9f:ce:e4:05:30:
f1:aa:93:56:88:af:e8:58:0c:80:b7:59:b5:6d:36:4b:2c:d6:
77:60:97:29:6a:2b:08:80:e4:ae:58:79:c8:ff:22:81:f0:4f:
c0:0d:08:dd:19:bd:47:84:da:d1:75:3b:16:5f:c2:8c:24:08:
4a:8c:52:cc:43:f7:0b:e1:a2:7c:21:40:5f:bd:b0:80:7e:62:
7d:17:c4:55:a4:8a:c3:a5:f8:5f:7e:f2:d2:47:b1:e0:cd:99:
59:fc:33:6a:be:4d:a7:35:41:9d:e0:cd:81:6e:5d:de:5b:dd:
8e:9d:9a:29:a6:9b:4d:1f:67:67:6e:8a:96:0a:8e:9f:6c:db:
90:f6:d1:3a:6b:6c:75:06:57:ac:1c:19:1a:0b:0e:2d:d8:b4:
04:99:86:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:23:01 2026 by rpki-client