Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
File: jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft (raw, json)
Hash identifier: N4ml4s/+CNalEyDhwPwoPz1TVOTlHO8dH7jjQ+20KlY=
Subject key identifier: 7E:0B:DA:4F:3A:16:36:34:61:83:AE:9A:F0:09:8A:9F:8B:46:30:A0
Authority key identifier: 8C:30:D8:96:F2:C5:D0:77:0F:B8:D1:C9:14:0B:05:9F:19:FF:6C:E9
Certificate issuer: /CN=8c30d896f2c5d0770fb8d1c9140b059f19ff6ce9
Certificate serial: 01A10701473EC4B07EC864B08D3AB53CE264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
Manifest number: 029D
Signing time: Sun 04 Oct 2026 13:01:26 +0000
Manifest this update: Sun 04 Oct 2026 13:01:26 +0000
Manifest next update: Mon 05 Oct 2026 13:01:26 +0000
Files and hashes: 1: gBhIlR2Vy9wZybBnJlISzDPwKZ8.roa (hash: 1heXPqmld/OvbyWoLXACStGWieBaqsBslRtSrtYIOUw=)
2: jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl (hash: PhvrWZj4yREcpFjuZgRRlpkLTdZwL8mgm+3GCNivRPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:01:47:3e:c4:b0:7e:c8:64:b0:8d:3a:b5:3c:e2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c30d896f2c5d0770fb8d1c9140b059f19ff6ce9
Validity
Not Before: Oct 4 13:01:26 2026 GMT
Not After : Oct 5 13:01:26 2026 GMT
Subject: CN=7e0bda4f3a1636346183ae9af0098a9f8b4630a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:c5:28:f9:2e:66:4f:f7:76:44:68:a7:c9:
6b:c8:59:4b:9c:a0:95:79:df:5f:f8:47:99:e8:d4:
3c:0b:9b:65:56:89:c9:69:09:ad:36:51:7f:1f:6f:
5f:f5:81:12:46:93:34:7f:c3:e9:e5:fe:d4:46:d4:
51:fc:d6:b5:62:c0:6d:0c:d0:71:9b:0b:0c:98:c6:
45:22:a5:c7:de:d2:94:e3:cf:31:07:07:a7:7a:b8:
52:a9:9a:b5:fb:b1:6d:78:d9:9e:ff:39:7f:a1:a7:
36:cf:7b:d4:17:51:8d:16:b3:23:4d:89:38:39:b2:
59:c9:38:54:af:47:df:e7:0c:a2:06:cb:29:3a:da:
ed:70:c8:5e:ec:88:bc:cb:13:0d:09:cc:49:bc:95:
24:e8:56:54:33:66:fe:e4:7f:ae:7b:e9:58:a8:c6:
f6:58:b1:3f:90:6a:ea:73:45:e9:a4:c3:4e:8e:07:
13:51:9f:59:d7:b2:9f:f9:a1:0a:fc:e4:7f:1d:9f:
68:1d:ce:86:aa:de:0b:25:d3:ab:66:a2:d4:ee:88:
55:c5:2b:eb:47:11:3d:99:aa:b8:77:26:16:c0:4a:
7b:39:44:db:99:64:5a:58:b3:e6:b2:d8:37:ac:dc:
47:44:27:c9:1b:9c:f9:f1:5a:3c:01:ed:f2:5c:41:
04:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0B:DA:4F:3A:16:36:34:61:83:AE:9A:F0:09:8A:9F:8B:46:30:A0
X509v3 Authority Key Identifier:
keyid:8C:30:D8:96:F2:C5:D0:77:0F:B8:D1:C9:14:0B:05:9F:19:FF:6C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a9:0c:18:8d:dc:0b:04:59:54:0d:c3:c3:97:37:3a:6f:97:
99:b1:2c:e3:ed:ae:b3:dc:59:90:59:04:0b:b9:08:62:81:b6:
68:20:c0:59:9e:ba:f0:02:c7:12:0e:1e:6a:8e:0c:cd:6a:4f:
45:47:bf:c3:88:fd:42:ad:ce:2f:9e:94:68:2e:94:c9:dd:88:
8b:18:ec:fc:ad:d6:b0:5f:81:dd:6e:27:5d:fd:a8:dc:f7:15:
76:e0:d1:97:a7:f4:8c:52:bc:14:13:6e:80:76:57:bf:e2:9d:
5f:dd:9a:23:80:64:6b:ea:f8:54:5c:6a:87:7a:14:6f:ac:27:
4c:cd:74:13:f3:a1:d4:3b:c6:77:b7:f3:7b:30:5d:ec:b9:82:
80:f2:aa:75:3c:cc:c4:27:45:e8:2e:1b:7c:18:9b:70:af:ac:
06:f9:c1:a1:3c:fb:de:54:9a:2a:ee:27:ba:bb:f4:4c:42:ff:
f1:29:1a:fc:9f:94:62:c7:e5:3c:94:2e:5c:ba:a5:c0:5e:12:
ad:6e:9d:d4:ba:20:91:fd:ab:c6:db:ef:d0:2c:d3:0e:15:8e:
a4:b4:39:c9:97:3e:70:c2:7c:60:34:98:6e:5e:81:66:87:ba:
56:ee:98:af:1c:e2:da:f9:16:33:86:2d:99:5c:45:83:d7:35:
fd:b1:a2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:09:03 2026 by rpki-client