Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
File: jTDnckXCFacL5O9X0DvR2NTbWJg.mft (raw, json)
Hash identifier: NB3T7t1mLkpXnrUYLpZBbR2oYKb2THE0EeJITueZUbE=
Subject key identifier: 97:60:44:A0:A9:AC:11:4D:A7:86:C5:94:B1:AC:78:A4:75:E7:88:17
Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
Certificate issuer: /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Certificate serial: 01A0E286DBF9DDD06A09A5E8894F354C8802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
Manifest number: 0595
Signing time: Sun 27 Sep 2026 11:01:23 +0000
Manifest this update: Sun 27 Sep 2026 11:01:23 +0000
Manifest next update: Mon 28 Sep 2026 11:01:23 +0000
Files and hashes: 1: E0AgYtmqvfWsCtuIwOtUo5wvcgU.roa (hash: w2ZEYMbSnl1r9XT320uy9sGbUhpOA37NS5yHBqC4/Fs=)
2: jTDnckXCFacL5O9X0DvR2NTbWJg.crl (hash: 1qsQPv+dRNlNhnbXtaejBbtXg9KnRj+wyqc4jn+azX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:86:db:f9:dd:d0:6a:09:a5:e8:89:4f:35:4c:88:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Validity
Not Before: Sep 27 11:01:23 2026 GMT
Not After : Sep 28 11:01:23 2026 GMT
Subject: CN=976044a0a9ac114da786c594b1ac78a475e78817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:12:c6:e3:30:74:58:52:6a:e5:0c:35:04:
4e:1a:03:30:ba:02:34:27:2f:56:85:a1:5e:e2:c3:
3d:12:07:3b:70:f8:f8:33:59:5a:b0:37:5c:57:43:
89:b7:5f:3a:d2:69:2e:da:90:df:1f:b5:3b:37:37:
c1:bf:9a:b0:ac:7a:1f:25:fc:ec:d2:36:b6:4e:9b:
0b:3a:7c:c9:e4:72:d7:a7:b7:bb:38:c0:7c:b8:46:
7f:6b:57:a2:99:f0:16:2d:0e:f9:fa:d1:70:4e:57:
a8:6f:0b:b2:fe:a2:50:f2:28:70:c6:4f:b4:60:d1:
c0:aa:5a:61:79:09:f9:d6:8f:97:37:6c:dd:65:8a:
5d:57:f7:37:6c:f8:bc:cf:60:a2:dc:3e:3f:a5:86:
4b:3f:bf:9e:d2:d3:ba:da:82:32:b3:ff:ba:8a:20:
f5:61:f2:ce:00:df:0c:2e:c1:1b:ed:9b:ff:52:9a:
8f:bd:ec:d1:07:5b:29:b1:12:99:eb:dc:e4:6d:0d:
6a:77:c2:03:26:1d:bd:1f:6e:bc:ba:51:8f:13:dd:
68:8a:a1:cd:fc:61:5c:99:03:6e:c8:c6:b2:33:06:
a4:96:a6:b2:59:41:e4:1d:37:5a:02:50:15:7a:e3:
56:14:ce:17:2f:6c:05:a4:02:41:69:4a:7a:44:df:
2f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:60:44:A0:A9:AC:11:4D:A7:86:C5:94:B1:AC:78:A4:75:E7:88:17
X509v3 Authority Key Identifier:
keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:cc:f2:79:28:2a:a0:37:c1:b6:74:dc:c0:4e:7a:2c:e4:05:
18:6c:a9:52:3c:4e:45:94:a6:b2:ff:1e:0a:3b:e6:2f:15:67:
a6:49:af:7d:37:0c:8d:93:ed:22:ed:f9:a9:3d:57:1f:67:f9:
bb:0c:e7:aa:bc:e1:18:98:67:c5:a6:6b:2b:ff:1f:a9:39:52:
05:ce:83:57:f1:0a:f5:da:bc:eb:f6:cd:89:26:3f:c1:6a:47:
35:5f:81:98:92:7c:53:2f:eb:c8:8d:d5:0b:01:b7:69:61:cb:
7c:18:fb:4b:de:4e:d1:e0:e9:9e:40:2a:e2:fa:09:ad:de:1e:
ea:fd:a7:fc:a1:af:60:75:9d:a2:70:cc:ed:55:a4:27:a9:2a:
bf:9c:df:9e:4b:8a:55:cb:4e:c4:e2:07:a0:8a:0d:b5:22:38:
e7:d8:3e:d5:04:d7:15:79:00:35:7f:3a:8a:58:11:21:53:06:
43:e8:9b:3c:9e:6e:d3:0e:7a:78:26:b2:82:34:b0:f4:05:a6:
45:82:64:cb:b1:2c:de:4f:96:69:56:29:c4:4d:af:80:38:4f:
8f:d2:d4:b0:d9:82:57:0f:00:44:15:70:4a:18:8a:84:5c:25:
3c:87:93:88:34:30:26:f3:26:92:4f:16:4d:46:6e:a6:07:aa:
c6:99:01:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:24:04 2026 by rpki-client