
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
File: jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft (raw, json)
Hash identifier: feQ2os0fQednLYPIhgCv04p3Mtn3qMEv7F5QNU8LJHo=
Subject key identifier: 3C:0E:F9:77:42:D6:37:AE:E9:E3:0A:90:10:2F:B3:05:27:9F:3F:1D
Authority key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
Certificate issuer: /CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Certificate serial: 019F93C98560CC630A32258451316C67053A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
Manifest number: 0D39
Signing time: Fri 24 Jul 2026 11:01:25 +0000
Manifest this update: Fri 24 Jul 2026 11:01:25 +0000
Manifest next update: Sat 25 Jul 2026 11:01:25 +0000
Files and hashes: 1: 402WgFEvx-MCA7DFemnXw9EsHq0.roa (hash: I1gPCHaPoQ70/m4H48LGfcyzChehib1qKqxsJxfnGkA=)
2: jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl (hash: Azl3nJZ9NlaYiNOu0xODmrFUpckQVV2Bk4DXnW4tYpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:85:60:cc:63:0a:32:25:84:51:31:6c:67:05:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Validity
Not Before: Jul 24 11:01:25 2026 GMT
Not After : Jul 25 11:01:25 2026 GMT
Subject: CN=3c0ef97742d637aee9e30a90102fb305279f3f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c2:b5:e6:f6:80:22:b3:84:36:4e:88:6c:2b:
1b:86:6b:f8:f9:88:5f:f5:02:ff:99:93:cc:e1:cd:
8f:e4:09:12:21:87:03:02:9b:92:d4:f2:73:1e:7f:
63:f4:6e:bd:39:34:64:73:4c:2e:b5:c7:8d:33:cf:
7e:c6:80:cf:35:32:62:00:ab:d0:b1:82:fa:02:8d:
00:c2:3d:0f:6d:37:cc:b9:43:5c:a3:a2:88:98:6c:
6c:68:df:19:c7:0e:f9:14:d2:be:92:0d:54:82:7e:
f2:79:09:41:8c:a4:e3:ef:aa:23:f5:c9:61:62:92:
cf:11:e6:8d:4f:6f:34:1f:90:fc:98:3d:81:84:a6:
a2:9c:12:81:f7:94:d3:b6:1e:71:ed:2a:ab:be:a9:
4a:2e:51:b0:ee:84:b1:af:03:b3:b7:98:10:3c:0c:
08:df:e7:80:b1:2b:be:87:3d:13:9b:c9:85:18:51:
f0:06:46:de:03:8e:4e:f4:8b:59:ed:a6:fb:82:6f:
66:4f:2f:8a:6e:b7:d2:dc:90:67:3d:79:7e:1d:77:
82:fe:32:c1:d9:83:9c:d2:42:3a:37:2c:58:1d:82:
1b:e0:74:88:8a:15:3d:4c:37:36:05:58:0a:f5:18:
c0:6d:6b:13:c8:e5:3f:e0:cf:6e:b3:39:9b:9e:a6:
63:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0E:F9:77:42:D6:37:AE:E9:E3:0A:90:10:2F:B3:05:27:9F:3F:1D
X509v3 Authority Key Identifier:
keyid:8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:00:7e:55:30:be:de:d9:80:e8:b0:8c:e5:de:8b:ed:b3:2c:
e3:aa:cc:fc:8a:a6:24:3b:02:ef:51:5a:d3:86:d2:a4:bc:64:
a0:49:e9:43:2e:82:55:77:fd:e1:9f:83:e9:0f:37:b6:b0:5d:
a9:d6:ee:5a:c2:ea:ba:39:c9:3d:fb:4a:56:3f:b4:e0:74:85:
94:b4:4b:22:5b:f1:5c:5d:ea:9c:eb:c1:d7:f6:03:53:12:36:
e5:27:4a:47:4b:78:f5:45:75:32:3a:cb:d9:fc:f7:40:e3:84:
1e:85:0b:dc:37:c8:6d:c8:f6:18:37:1c:83:b7:8c:37:a7:a0:
28:0f:31:d5:fa:44:6b:24:d0:d7:38:a2:6c:e2:c5:c7:f4:1b:
24:00:11:ee:53:72:d3:34:77:21:00:a4:21:c0:56:2a:85:f7:
3c:ff:6a:84:41:27:ea:16:f0:57:0f:26:e2:69:81:3b:76:14:
c2:85:81:3c:00:6a:fe:78:6a:c0:93:a0:a0:5c:d7:00:55:b5:
37:5c:2d:67:ab:df:96:cb:ce:32:6a:f1:d7:9b:2e:3e:6d:f2:
a4:02:05:0a:1e:e1:d8:bf:f1:85:a1:97:78:5f:19:83:55:c8:
42:56:5c:da:e8:26:f3:d2:a1:8a:f3:34:aa:52:e5:df:1f:9a:
63:a7:af:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:16:18 2026 by rpki-client