Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: eo9xwnB5KFr1dY/alzUBRnul/0QAFUyTnraJ23piLEU=
Subject key identifier: 9A:41:85:64:C3:EB:DE:68:1E:F1:C5:B8:51:1D:F2:52:7E:B1:1B:B8
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 01A0C25693760801FC5D99823ED7BA55BCA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 067B
Signing time: Mon 21 Sep 2026 05:00:48 +0000
Manifest this update: Mon 21 Sep 2026 05:00:48 +0000
Manifest next update: Tue 22 Sep 2026 05:00:48 +0000
Files and hashes: 1: OTzOq7SDpRdksgl_zYPgtdePfLI.roa (hash: D6qdGzPzEfS+jEvVQOP5Z3G0DkCqmvwi/YwWrt4+qgc=)
2: Uxk1FwItIfltxuYz2o9bKLPYoqw.roa (hash: 00PfsX6vRTHIMTxBup/P+JPXMFRRdRTXxG1QyBpuPMY=)
3: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: pgrP7Crk2M+XezCn14ekI3HMQETyfU4ZzjSVKXw3JWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:93:76:08:01:fc:5d:99:82:3e:d7:ba:55:bc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Sep 21 05:00:48 2026 GMT
Not After : Sep 22 05:00:48 2026 GMT
Subject: CN=9a418564c3ebde681ef1c5b8511df2527eb11bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:26:de:cb:71:94:b3:fc:55:ed:ae:47:45:
38:42:2d:a5:37:23:77:36:1c:16:cd:fc:0a:7e:2b:
e6:b8:1c:2a:da:6c:1a:5c:c8:72:64:44:54:d7:a5:
b6:f2:dd:d2:ca:04:a7:1d:1e:a2:11:c9:9a:d6:ab:
15:1b:e4:f6:91:4d:08:f8:87:4c:04:d8:64:05:01:
b2:1b:c9:5d:f7:ea:d5:a7:4c:7d:ce:a7:24:a0:f2:
f1:9b:92:dc:74:dd:ba:e2:38:6c:a0:18:24:fc:28:
a2:71:75:b1:74:d6:6d:f1:5f:8d:31:0c:7a:9f:c7:
46:f5:c2:08:ab:75:aa:cd:f7:80:c5:a3:7f:7d:96:
0f:4e:d8:bb:a4:0e:78:99:f3:c4:45:65:f2:ed:5f:
28:97:b6:1b:74:d6:fd:51:84:8e:8d:94:3e:09:dc:
0c:17:7c:c4:bc:28:b0:02:08:99:6f:22:b9:05:eb:
18:c1:a3:28:71:94:82:63:f0:c3:8b:0e:d3:f6:e7:
d9:6e:90:4b:90:b4:61:5a:3d:79:57:48:11:02:ca:
4e:a6:aa:e6:c3:e8:68:3d:cf:19:aa:7e:ab:ac:d2:
e1:e5:60:c6:38:77:0a:11:2b:4e:93:8c:bd:81:9e:
5b:8b:79:64:aa:03:d9:54:1e:90:44:3f:46:cb:06:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:41:85:64:C3:EB:DE:68:1E:F1:C5:B8:51:1D:F2:52:7E:B1:1B:B8
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:08:0b:56:30:24:ec:7d:92:07:7d:37:fc:37:ce:44:e4:a6:
98:d2:d8:f1:71:6e:5a:4d:21:fe:d5:5c:07:6b:4a:15:79:37:
df:f3:e0:04:6b:89:f0:d6:00:6b:5c:b4:29:71:d1:0c:63:c1:
fd:45:62:3a:b6:8a:e1:ae:2a:93:2f:9c:88:b2:e9:52:59:38:
40:51:6d:3f:44:a2:5f:a4:61:88:95:3c:b4:21:9e:84:fc:30:
1f:b7:ad:cf:46:8f:25:6f:50:3e:ef:74:a6:f5:00:46:76:52:
6c:c5:e2:21:2a:96:40:f7:60:82:e9:b4:f5:69:f5:ab:92:56:
de:96:54:84:19:d5:97:54:31:b5:01:da:cb:8a:f9:cb:b7:08:
9e:5a:d2:c6:a2:2a:c5:5f:ef:4f:dc:1a:b0:38:8f:9b:84:14:
7b:02:ba:d8:7f:30:e8:d9:6b:c3:1a:24:9f:23:8a:7d:62:22:
e1:51:aa:f6:a3:8a:33:97:80:11:d3:f4:f9:56:37:1b:60:5f:
96:b7:42:b5:23:9b:03:0f:7f:f0:66:78:c8:d2:8f:f8:96:1b:
20:7d:c2:ad:32:4c:cc:46:7c:d6:7a:cd:f7:5f:23:62:df:15:
dc:6c:42:a6:6b:5e:bf:89:bb:b1:1e:af:ed:84:87:07:41:21:
69:05:4e:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCVpN2CAH8XZmCPte6VbynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzRmYWI5YWEzM2ViNTVkOTg1NDIzN2JkMGQyMjUyNzky
MTMyZTYwHhcNMjYwOTIxMDUwMDQ4WhcNMjYwOTIyMDUwMDQ4WjAzMTEwLwYDVQQD
Eyg5YTQxODU2NGMzZWJkZTY4MWVmMWM1Yjg1MTFkZjI1MjdlYjExYmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrMm3stxlLP8Ve2uR0U4Qi2lNyN3
NhwWzfwKfivmuBwq2mwaXMhyZERU16W28t3SygSnHR6iEcma1qsVG+T2kU0I+IdM
BNhkBQGyG8ld9+rVp0x9zqckoPLxm5LcdN264jhsoBgk/CiicXWxdNZt8V+NMQx6
n8dG9cIIq3WqzfeAxaN/fZYPTti7pA54mfPERWXy7V8ol7YbdNb9UYSOjZQ+CdwM
F3zEvCiwAgiZbyK5BesYwaMocZSCY/DDiw7T9ufZbpBLkLRhWj15V0gRAspOpqrm
w+hoPc8Zqn6rrNLh5WDGOHcKEStOk4y9gZ5bi3lkqgPZVB6QRD9GywZCbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpBhWTD695oHvHFuFEd8lJ+sRu4MB8GA1UdIwQY
MBaAFI00+rmqM+tV2YVCN70NIlJ5ITLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRUNnVhb3o2MVhaaFVJM3ZRMGlVbmtoTXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ZGU3ZmYtMzIxZS00YjQ3LWIzYzUt
NmRiMDg2YzAwZjZhLzEvalRUNnVhb3o2MVhaaFVJM3ZRMGlVbmtoTXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82ZGU3ZmYtMzIxZS00YjQ3LWIzYzUtNmRiMDg2YzAwZjZh
LzEvalRUNnVhb3o2MVhaaFVJM3ZRMGlVbmtoTXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAgLVjAk
7H2SB303/DfOROSmmNLY8XFuWk0h/tVcB2tKFXk33/PgBGuJ8NYAa1y0KXHRDGPB
/UViOraK4a4qky+ciLLpUlk4QFFtP0SiX6RhiJU8tCGehPwwH7etz0aPJW9QPu90
pvUARnZSbMXiISqWQPdggum09Wn1q5JW3pZUhBnVl1QxtQHay4r5y7cInlrSxqIq
xV/vT9wasDiPm4QUewK62H8w6NlrwxoknyOKfWIi4VGq9qOKM5eAEdP0+VY3G2Bf
lrdCtSObAw9/8GZ4yNKP+JYbIH3CrTJMzEZ81nrN918jYt8V3GxCpmtev4m7sR6v
7YSHB0EhaQVO+g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:05:39 2026 by rpki-client