Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
File: jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft (raw, json)
Hash identifier: rsrOXnTTRZrSX0y9GcQpT+ZEIvRImWNzeopaVmhpGAw=
Subject key identifier: C1:BE:E6:3B:95:5B:2A:71:6B:EA:B7:B0:57:6F:8D:3B:D8:1D:14:B7
Authority key identifier: 8C:30:D8:96:F2:C5:D0:77:0F:B8:D1:C9:14:0B:05:9F:19:FF:6C:E9
Certificate issuer: /CN=8c30d896f2c5d0770fb8d1c9140b059f19ff6ce9
Certificate serial: 019F9436B4CD390DCBA5048C06188D55401F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
Manifest number: 01DD
Signing time: Fri 24 Jul 2026 13:00:40 +0000
Manifest this update: Fri 24 Jul 2026 13:00:40 +0000
Manifest next update: Sat 25 Jul 2026 13:00:40 +0000
Files and hashes: 1: gBhIlR2Vy9wZybBnJlISzDPwKZ8.roa (hash: 1heXPqmld/OvbyWoLXACStGWieBaqsBslRtSrtYIOUw=)
2: jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl (hash: 98RKFf3IDL8Uab1n3M/jcq6RsKGrN32vbMU3pTFjzxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:b4:cd:39:0d:cb:a5:04:8c:06:18:8d:55:40:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c30d896f2c5d0770fb8d1c9140b059f19ff6ce9
Validity
Not Before: Jul 24 13:00:40 2026 GMT
Not After : Jul 25 13:00:40 2026 GMT
Subject: CN=c1bee63b955b2a716beab7b0576f8d3bd81d14b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:11:74:ff:bc:43:8b:6b:4e:35:5a:72:68:
68:cd:24:02:79:01:21:8d:4a:c1:9d:4c:9c:e6:84:
af:38:9d:25:ed:5f:ce:9a:f4:c1:71:2d:a0:98:44:
c4:c5:75:3d:df:ac:9d:09:90:9a:93:22:53:22:88:
8b:4c:0c:cd:49:bc:77:6f:4a:df:67:82:41:8b:bc:
01:ae:4d:b0:30:72:eb:71:f8:ae:6f:36:1f:31:76:
6f:53:54:db:bb:cd:38:e9:76:17:ed:92:f6:eb:40:
4c:bd:e5:2a:23:e1:1f:a3:4d:49:45:26:ea:0a:93:
63:c0:72:bd:bf:85:a4:aa:03:33:0c:46:ab:0f:9b:
ac:9c:06:d4:4b:38:57:4b:54:6e:a4:bc:a2:6f:64:
33:2d:e7:20:79:c7:54:a8:65:cc:b8:76:22:d0:91:
a7:83:aa:a8:37:ef:1a:b9:e4:c5:82:d9:20:4e:a4:
2f:4c:e8:c4:f0:7e:a1:2b:b7:8a:61:cc:85:86:85:
95:2c:60:9c:fe:55:35:d8:39:67:e2:19:ef:0d:4e:
4b:1f:fc:58:58:67:ca:e3:d8:bf:99:a9:43:b1:fe:
29:44:7f:5b:35:6e:82:23:d9:d8:f9:ff:2d:ce:8e:
03:e1:8c:2e:fc:0a:6a:52:c8:a0:ed:4c:7a:38:8e:
62:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BE:E6:3B:95:5B:2A:71:6B:EA:B7:B0:57:6F:8D:3B:D8:1D:14:B7
X509v3 Authority Key Identifier:
keyid:8C:30:D8:96:F2:C5:D0:77:0F:B8:D1:C9:14:0B:05:9F:19:FF:6C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:51:2c:45:b4:ff:83:a9:51:47:f1:63:f3:78:8a:b6:19:00:
ce:6c:ca:85:0d:05:b3:90:3f:dc:f8:f4:82:55:a1:aa:4f:eb:
2f:59:e5:df:ce:a2:a6:66:69:dc:83:18:17:ce:0e:25:f6:a5:
8a:e9:71:76:b7:29:82:85:05:cb:02:27:f6:3c:c0:89:36:be:
99:fe:b2:ab:ee:49:b5:a7:80:d1:04:83:e8:1c:42:3b:6c:bc:
c8:95:2b:9b:1d:06:9d:de:df:bb:6b:b1:e2:d2:88:2f:d3:f7:
af:c9:aa:76:7f:eb:88:52:87:95:c4:41:ca:8b:4e:5f:ed:d1:
9d:38:d3:7c:f0:d2:46:da:09:40:48:ea:8f:dc:b6:70:a0:fe:
35:b8:6f:2f:6a:68:fa:73:29:08:d1:cb:68:9c:02:bd:ee:52:
cd:af:96:b6:ff:66:c5:f3:0d:d6:7a:fb:e7:f3:fd:e7:cf:15:
95:80:ed:b7:ba:0b:c4:64:4a:61:cd:bb:5d:ed:c9:24:b1:d3:
21:ee:2d:f6:95:15:a1:5f:c5:fd:80:f5:da:23:9d:95:e4:45:
38:f8:e5:37:fe:55:71:cf:d6:22:cb:fb:c7:0e:1c:92:65:94:
5b:e7:ac:bb:d9:e5:d7:23:b8:5e:08:c7:45:06:e4:2c:bf:63:
03:b1:15:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:51 2026 by rpki-client