Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
File: jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft (raw, json)
Hash identifier: JtcWLwiBSEQZxzSNznJ0pmOWpqXJGbOOuQi081aSwQI=
Subject key identifier: CC:F8:B8:B9:D7:AA:D1:C8:E6:CF:F9:7B:6E:83:1C:7B:C0:97:63:5C
Authority key identifier: 8C:30:D8:96:F2:C5:D0:77:0F:B8:D1:C9:14:0B:05:9F:19:FF:6C:E9
Certificate issuer: /CN=8c30d896f2c5d0770fb8d1c9140b059f19ff6ce9
Certificate serial: 019D2C29DFA045C8825C005046B4B3694144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
Manifest number: 9E
Signing time: Thu 26 Mar 2026 22:00:34 +0000
Manifest this update: Thu 26 Mar 2026 22:00:34 +0000
Manifest next update: Fri 27 Mar 2026 22:00:34 +0000
Files and hashes: 1: gBhIlR2Vy9wZybBnJlISzDPwKZ8.roa (hash: 1heXPqmld/OvbyWoLXACStGWieBaqsBslRtSrtYIOUw=)
2: jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl (hash: CJ33s1qEGDR1iai6oGKYGqWUgFLMmECUODxfyKEaL3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:29:df:a0:45:c8:82:5c:00:50:46:b4:b3:69:41:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c30d896f2c5d0770fb8d1c9140b059f19ff6ce9
Validity
Not Before: Mar 26 22:00:34 2026 GMT
Not After : Mar 27 22:00:34 2026 GMT
Subject: CN=ccf8b8b9d7aad1c8e6cff97b6e831c7bc097635c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:77:0b:a4:32:e8:5a:bc:1a:ac:97:a7:a0:9b:
2d:00:04:ea:81:78:13:5c:63:5c:6a:30:64:9f:71:
c4:e1:ad:ec:bb:19:a0:96:a4:e9:0a:af:44:2c:3b:
48:98:5a:b3:0e:95:40:97:d8:23:33:f6:a4:dc:7f:
36:6f:0d:09:04:57:05:2f:e0:44:8b:1f:b3:4e:f9:
77:fc:18:97:a6:69:f4:42:ae:5b:fc:96:fe:ff:81:
ad:e0:d5:2d:89:38:77:ad:14:76:56:72:b9:ed:86:
0d:fa:1e:88:8b:23:2e:5b:af:00:ba:93:40:8d:1b:
4a:88:3e:d1:96:6c:af:23:3d:2e:e3:f2:7c:f9:4a:
03:93:30:cc:59:22:fd:52:52:21:9c:ba:f2:1c:e9:
87:a0:b8:42:91:b0:92:b4:ce:6c:d1:4b:b7:de:08:
f1:f1:d8:b3:e2:9d:8c:f0:f9:e8:48:25:9a:73:d3:
21:42:e0:19:3f:de:fc:de:dc:2a:3d:e7:b3:0b:15:
a3:d4:15:e2:ef:aa:47:45:59:6c:86:77:ac:12:c3:
b3:60:a2:53:44:15:e6:de:cb:72:2f:2a:26:c5:c4:
8b:56:a5:7e:24:9f:c9:a0:29:94:b4:71:c3:77:3d:
5a:f4:36:a6:22:91:28:0d:17:b4:ad:7c:7d:4b:a3:
11:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F8:B8:B9:D7:AA:D1:C8:E6:CF:F9:7B:6E:83:1C:7B:C0:97:63:5C
X509v3 Authority Key Identifier:
keyid:8C:30:D8:96:F2:C5:D0:77:0F:B8:D1:C9:14:0B:05:9F:19:FF:6C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:33:0e:f0:09:ab:48:8b:e2:cc:7c:bf:3c:28:19:b2:ba:c0:
2e:97:8c:26:62:bd:98:84:6a:18:1a:00:f0:32:5d:5d:c0:1a:
14:47:48:e7:c9:a1:1d:8a:15:fd:be:19:76:ee:19:0f:ed:5c:
8a:f4:d6:d1:e5:7e:7c:17:3e:44:e7:a9:2b:c2:d5:9a:66:07:
db:1a:d1:19:42:80:cd:08:dd:86:e8:63:93:85:12:17:49:07:
07:7c:f8:98:17:eb:2d:f0:94:ac:71:fe:98:55:99:80:a4:33:
15:19:07:1e:70:b7:0a:04:c0:87:76:5d:34:78:12:4a:84:b7:
61:d6:56:fb:d7:8b:22:52:56:95:00:5d:54:59:0b:b7:1e:13:
58:8c:df:04:59:be:72:f5:17:0e:8a:3b:ae:d6:32:9e:57:b1:
2e:0b:8d:db:78:35:ac:bd:19:6f:39:d8:09:91:ba:e1:12:d9:
65:1e:2c:6d:e0:3a:95:23:fe:b0:96:11:e7:af:47:60:fc:2e:
83:eb:97:87:aa:5f:e8:d7:c5:bc:e7:cc:36:dd:29:d9:5e:b0:
4d:0e:12:17:5f:dc:83:d2:26:05:e2:50:39:65:2c:f0:ce:4e:
01:26:eb:f9:27:65:68:c2:0c:12:15:f4:c4:12:d6:a7:c4:1b:
46:77:39:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:33:11 2026 by rpki-client