Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
File: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft (raw, json)
Hash identifier: sIIEeRKgeZZv4V8WHkBgjJWwROyAYlLuVODSsPVqBXc=
Subject key identifier: C6:C5:68:02:9F:B0:F5:05:77:71:BA:E4:90:11:AB:69:74:E6:44:25
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial: 019D29CE527145DE32B7DDF8073077391A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
Manifest number: 1755
Signing time: Thu 26 Mar 2026 11:01:20 +0000
Manifest this update: Thu 26 Mar 2026 11:01:20 +0000
Manifest next update: Fri 27 Mar 2026 11:01:20 +0000
Files and hashes: 1: 7HIOB7eoRAyG0ZPEZvvAbpswFrY.roa (hash: Es8A+6R1MLYeRZW+tk5RBf/7aXDiiAHZ+/2nLZtggb4=)
2: MCbnv8KJAY7dWm0UH6ulCMh-Zxc.roa (hash: 0xuvAxTJi/9kYRQK87s4orh7y9pLCa7vkuXPG3p7G24=)
3: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl (hash: tXJH9/sTZ6lRcvurPunMZJfbeyA00hOfkx7yeX7Vxuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:52:71:45:de:32:b7:dd:f8:07:30:77:39:1a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Validity
Not Before: Mar 26 11:01:20 2026 GMT
Not After : Mar 27 11:01:20 2026 GMT
Subject: CN=c6c568029fb0f5057771bae49011ab6974e64425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6c:0c:ef:6d:59:b8:d9:ca:10:b6:91:b1:c5:
6d:75:23:25:4a:85:00:a6:61:19:73:78:4a:18:67:
31:36:1b:f8:99:7e:3b:36:d4:c4:b5:58:4e:01:da:
95:33:96:17:0f:bd:65:46:2b:4c:71:65:0b:50:53:
f1:80:58:98:c7:6d:c1:63:fc:6f:8f:39:5f:94:21:
7d:9a:f7:b1:64:03:d3:d3:e6:51:2e:1b:63:25:0c:
7b:08:41:93:d9:4c:80:99:2a:eb:00:36:60:6e:88:
6f:3c:5f:33:a5:cc:52:a9:a5:69:aa:f8:68:42:18:
18:b9:22:93:85:1f:13:fb:ed:48:a6:9a:cd:e1:7f:
5e:c7:e8:24:2f:cc:87:07:83:fa:4c:43:38:91:52:
d7:9c:9f:0b:ee:63:94:00:00:11:16:27:18:ac:ce:
83:e9:41:08:76:a4:28:68:34:2d:71:c9:aa:1b:17:
71:d2:4f:b2:2e:86:f8:06:8d:af:d1:c7:47:b4:30:
cf:c6:c6:d1:ec:f0:00:38:b3:0a:cc:6a:d8:77:74:
d9:eb:e6:40:db:c8:a3:70:f9:8b:fa:5e:3b:ed:29:
53:b7:18:65:1a:65:ae:27:11:ad:1a:d1:96:08:1f:
4a:7e:79:8d:b2:67:9b:f8:f6:0c:e2:d6:72:51:cd:
38:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C5:68:02:9F:B0:F5:05:77:71:BA:E4:90:11:AB:69:74:E6:44:25
X509v3 Authority Key Identifier:
keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5c:97:53:88:9a:ce:cf:44:c5:ef:d6:fe:ae:14:51:88:10:
31:c5:c3:2e:85:a1:3a:5b:11:12:e7:70:c5:67:33:32:d9:64:
6a:e0:79:e9:fd:9b:2a:1f:5d:d9:8f:f0:36:26:dc:3d:80:bb:
5f:f3:a3:cc:e2:26:a9:11:b9:e0:ff:e7:d9:59:68:64:c3:0f:
84:17:90:91:da:7b:cd:47:3c:d3:9d:77:5b:95:55:84:96:a5:
7d:f5:57:33:74:a4:30:1b:c1:92:0b:db:1c:a8:80:9e:15:a3:
5a:c4:4e:6e:e0:fa:68:a5:14:30:09:62:48:a6:7f:32:16:59:
67:91:95:a6:3d:64:ea:ab:2c:1a:5d:78:73:db:ea:ef:15:19:
c9:48:f9:95:50:72:89:9d:39:e3:d9:04:6e:ca:1b:34:1a:3f:
5d:78:7a:af:43:59:48:ef:d7:0f:66:b4:fe:b2:23:8e:32:b9:
75:2c:9f:f3:a2:85:54:0e:e2:00:6d:6d:a6:a7:b5:94:ff:45:
df:d1:e8:07:e3:96:97:49:c4:0b:02:d1:f3:81:14:aa:89:a7:
0f:5e:9f:86:3a:54:76:d3:f9:73:df:c1:99:45:5d:8b:f1:19:
a7:16:e9:f9:38:b7:73:6c:f3:a4:5f:33:35:74:8e:00:bc:9b:
86:ac:31:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:56:09 2026 by rpki-client