
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
File: jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft (raw, json)
Hash identifier: 1+glt6eHI7pbn1mQ9vz/+aYWFHqksckvo6zv6o0oedM=
Subject key identifier: BB:47:EB:8A:58:78:9B:67:16:B5:69:80:CF:C5:5E:71:61:AC:AA:04
Authority key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
Certificate issuer: /CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Certificate serial: 01A0DE05D0745630B612AFA356A3F6CB10D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
Manifest number: 0DE4
Signing time: Sat 26 Sep 2026 14:01:57 +0000
Manifest this update: Sat 26 Sep 2026 14:01:57 +0000
Manifest next update: Sun 27 Sep 2026 14:01:57 +0000
Files and hashes: 1: 402WgFEvx-MCA7DFemnXw9EsHq0.roa (hash: I1gPCHaPoQ70/m4H48LGfcyzChehib1qKqxsJxfnGkA=)
2: jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl (hash: JLO5P/0o9uAurF2WgnGcuuc0DEQgPZMh4t3jqL8YjOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:d0:74:56:30:b6:12:af:a3:56:a3:f6:cb:10:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Validity
Not Before: Sep 26 14:01:57 2026 GMT
Not After : Sep 27 14:01:57 2026 GMT
Subject: CN=bb47eb8a58789b6716b56980cfc55e7161acaa04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:07:b6:46:64:1c:39:04:24:24:c0:70:89:
de:a9:03:c4:3e:16:71:57:73:84:4e:84:c3:ca:1e:
ac:56:e8:88:88:ab:70:d7:3c:bf:b9:99:3f:a3:f9:
02:74:1c:aa:87:1e:97:c2:36:a0:d0:8b:aa:9e:ae:
35:ce:cd:c7:06:d5:ad:a0:99:de:18:e7:b0:59:a0:
79:b2:1a:9f:ba:64:c5:13:46:3b:a6:4d:1a:18:65:
17:93:18:7e:65:79:91:3c:e5:56:72:13:b4:51:e8:
f9:8f:36:55:14:a9:09:8b:35:bf:99:ed:b3:79:f8:
eb:05:58:8d:b4:f3:4c:c2:07:7e:68:48:c9:66:e2:
0f:35:f5:fb:9f:fe:32:c9:2e:ee:06:49:92:18:12:
24:bd:3e:b7:2d:c2:2b:21:7b:67:1b:e5:d1:8b:f5:
9e:84:b0:6b:0a:c3:df:10:14:3a:be:46:45:22:3d:
7c:9e:b4:4c:4c:ed:eb:a4:77:9a:8a:95:15:1a:94:
af:b5:e6:b7:a9:b2:eb:5c:f5:cb:a8:f8:a1:1a:d3:
b1:09:41:bc:8d:e6:c4:06:66:11:32:95:b9:7e:39:
72:09:db:da:dd:95:a9:da:d0:9a:70:d3:29:ab:82:
d1:c2:1b:36:8d:67:1f:ec:dc:19:2b:97:23:7f:8d:
e2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:47:EB:8A:58:78:9B:67:16:B5:69:80:CF:C5:5E:71:61:AC:AA:04
X509v3 Authority Key Identifier:
keyid:8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f9:60:60:c8:9e:18:d5:d4:8f:b7:74:da:ca:80:f8:b4:23:
f1:34:6a:87:bb:fd:76:3e:35:3d:46:e4:64:69:cd:af:1d:bd:
ec:d2:c0:68:37:de:73:28:5d:33:31:c9:98:93:47:e7:97:2a:
52:4c:6a:95:80:0e:a0:ea:dc:b8:0a:58:a7:2e:e1:28:82:73:
fb:f5:0b:de:8e:f3:0a:cf:33:56:08:44:7d:52:0f:a3:4f:ac:
94:64:99:73:a2:8b:51:c0:ac:fa:ee:63:39:c4:c6:32:89:2d:
e6:62:5c:35:7c:c4:75:79:34:b6:19:85:50:72:c8:40:11:38:
fc:99:07:c0:bc:36:57:b5:a2:0c:e7:94:99:22:f6:e4:b9:42:
51:1d:70:26:42:98:a9:64:1f:e2:41:d9:61:5c:26:3d:98:c3:
1c:da:d7:af:99:dc:0e:f7:99:9a:72:c6:6d:a2:6f:b3:70:7c:
10:74:82:b2:54:b8:68:b2:1b:83:a4:db:d1:01:4b:0f:fd:41:
ea:80:7c:e6:34:f1:b5:c9:b3:0a:5e:e1:91:b9:55:c1:87:12:
12:3c:69:5a:1a:0d:ad:16:09:f2:a2:88:9a:7f:0f:8f:9d:36:
12:90:84:6d:a6:0a:a5:2d:be:92:da:ff:7d:03:0e:5c:dc:13:
38:e3:da:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:04:32 2026 by rpki-client