Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: PinFIZp6xVSqZzPIumd5qpNGtWp5A3PzPHUqgG1F+Po=
Subject key identifier: 70:B5:20:70:FD:43:06:41:15:AC:77:8D:C4:2B:70:E5:FB:D6:97:C4
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 019D992BAC0AD71D3C0E71796D000984FD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 04D8
Signing time: Fri 17 Apr 2026 02:01:09 +0000
Manifest this update: Fri 17 Apr 2026 02:01:09 +0000
Manifest next update: Sat 18 Apr 2026 02:01:09 +0000
Files and hashes: 1: OTzOq7SDpRdksgl_zYPgtdePfLI.roa (hash: D6qdGzPzEfS+jEvVQOP5Z3G0DkCqmvwi/YwWrt4+qgc=)
2: Uxk1FwItIfltxuYz2o9bKLPYoqw.roa (hash: 00PfsX6vRTHIMTxBup/P+JPXMFRRdRTXxG1QyBpuPMY=)
3: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: vwK7COo9MRicPidcui9zOSx8G650k4ymwT8sKhdZqoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:ac:0a:d7:1d:3c:0e:71:79:6d:00:09:84:fd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Apr 17 02:01:09 2026 GMT
Not After : Apr 18 02:01:09 2026 GMT
Subject: CN=70b52070fd43064115ac778dc42b70e5fbd697c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:b9:8b:b1:d2:e5:15:18:b9:46:d1:05:c3:
15:be:69:14:f7:ed:59:ad:09:78:e7:b9:d8:10:94:
6f:17:4f:63:51:3f:37:f5:85:9b:b6:0b:94:04:3f:
37:7b:f9:45:21:78:f2:6f:9b:5b:dd:b5:48:ec:e2:
fd:e3:9a:a9:68:ba:91:c4:21:c2:e6:1c:d5:47:42:
34:c1:2c:f0:f0:bb:73:e3:d9:c0:ab:14:80:f5:83:
38:b4:a2:71:27:c3:06:3f:37:3a:55:a7:d1:8f:78:
4b:e7:ae:60:e8:dd:88:71:cc:5d:fb:8f:e3:3f:07:
a9:30:c7:db:13:5e:f2:8d:11:2a:a0:81:14:21:c1:
39:19:4a:84:87:72:be:31:bf:35:49:8d:72:50:0f:
f3:cb:ad:97:65:bf:17:91:91:22:a3:c2:e5:a7:8c:
c1:bd:37:4e:0e:f6:ed:72:a0:2b:47:42:bb:b6:f2:
0b:52:8d:16:06:5c:ef:13:a5:78:2e:74:3a:30:25:
72:a2:e2:13:9b:3f:d5:48:c6:7e:dd:c5:06:5c:00:
af:10:11:b5:39:b1:1c:ff:e3:34:31:5b:e9:ff:61:
ff:6f:2c:fa:0b:1d:43:cb:d5:e0:5b:04:d8:b4:84:
06:61:6c:bd:de:47:77:47:a2:0b:77:ec:81:21:fc:
41:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B5:20:70:FD:43:06:41:15:AC:77:8D:C4:2B:70:E5:FB:D6:97:C4
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e9:de:d0:0f:98:eb:fa:9e:49:fb:49:80:ce:d4:9d:f3:23:
3b:4e:81:cc:4e:db:98:cb:7b:35:17:10:94:25:eb:da:21:8d:
51:66:ed:ac:1b:6a:84:6f:c6:66:cc:44:3d:cd:95:de:18:d8:
06:c4:16:e1:14:b6:aa:65:e2:dd:9c:e2:bf:bc:4b:b1:5f:08:
92:bf:f2:6b:55:5c:d1:0b:1d:6a:83:bb:a6:b5:18:71:67:70:
49:78:cc:d4:5a:71:2f:f9:8b:c0:57:61:22:09:40:bc:34:3e:
1d:0d:e9:c6:8c:fd:70:c7:b5:b2:d4:21:7a:00:27:c9:63:a3:
50:a0:34:92:7f:d2:1d:a4:dd:8a:77:57:f5:ea:cd:7a:9b:f5:
df:f4:e1:fe:c9:39:0b:4f:63:ea:c1:8c:9e:0a:19:1f:c8:11:
26:8b:14:94:ec:32:d7:9c:69:20:92:c2:51:ec:ae:73:1d:b3:
1f:45:de:10:26:91:6b:97:30:58:d6:49:cf:94:31:49:f1:d0:
64:d8:bb:46:a5:a7:6f:69:ca:0c:35:df:d9:f4:1a:30:14:fb:
51:21:f5:b6:34:6b:dc:ff:e5:13:ae:b4:b0:1c:b2:18:3f:c2:
c0:b3:9f:14:7b:cd:f8:97:ba:58:55:f8:6e:35:64:cc:96:4b:
f3:f6:08:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:42 2026 by rpki-client