Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
File: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft (raw, json)
Hash identifier: JgpVmKJVD/7TpY/ky601gqJ7mrbcpSKhBgV/L1UmC0A=
Subject key identifier: E4:19:F2:E8:61:ED:00:37:30:69:EE:12:1D:46:0C:36:BD:D3:EC:B1
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial: 01A14271D45C87AB009C57EE7C240504CD35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
Manifest number: 1974
Signing time: Fri 16 Oct 2026 02:01:58 +0000
Manifest this update: Fri 16 Oct 2026 02:01:58 +0000
Manifest next update: Sat 17 Oct 2026 02:01:58 +0000
Files and hashes: 1: 7HIOB7eoRAyG0ZPEZvvAbpswFrY.roa (hash: Es8A+6R1MLYeRZW+tk5RBf/7aXDiiAHZ+/2nLZtggb4=)
2: MCbnv8KJAY7dWm0UH6ulCMh-Zxc.roa (hash: 0xuvAxTJi/9kYRQK87s4orh7y9pLCa7vkuXPG3p7G24=)
3: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl (hash: v0tlYP3c5EWsEJHb1jZK1QG6n4Enxsk3uBde+Xd6JvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:71:d4:5c:87:ab:00:9c:57:ee:7c:24:05:04:cd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Validity
Not Before: Oct 16 02:01:58 2026 GMT
Not After : Oct 17 02:01:58 2026 GMT
Subject: CN=e419f2e861ed00373069ee121d460c36bdd3ecb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:11:3a:60:84:e8:4e:73:3d:88:b5:91:95:
4b:e8:59:c4:b0:e3:ec:fc:19:4c:9a:26:c5:70:f9:
0d:1b:bf:7a:4c:19:4d:70:72:1f:dc:6d:fe:81:31:
25:39:a1:56:14:9c:3f:fe:72:b9:25:1b:1c:d5:b9:
8d:98:35:2c:11:75:e3:21:29:fc:bd:9f:66:42:60:
fe:69:fa:0c:9f:62:5c:d0:e2:5f:b6:23:a1:4e:29:
20:66:72:65:cb:cf:81:2d:f9:4d:bc:41:a1:16:c1:
e0:5b:68:c2:50:1e:dc:01:22:6b:49:b8:24:08:eb:
37:c6:3a:ae:65:35:4a:58:de:ef:b0:2a:ba:3c:07:
72:01:72:45:60:d4:8a:55:a8:dd:7d:49:db:0f:0b:
e4:5d:b3:f0:9d:3b:09:bd:2b:c8:fa:d0:8c:19:6c:
8d:50:9c:64:2a:f9:08:1e:dc:6f:b1:70:9c:0f:ca:
a4:1c:62:19:82:e4:63:f2:3d:9b:94:b7:72:55:b8:
f8:d7:fa:0c:24:6f:ff:52:c4:cd:0d:95:9e:64:4e:
ee:69:1a:ea:8b:0d:28:58:5d:d5:ec:97:2a:d1:d0:
25:fd:1a:2f:93:e6:a1:5b:1f:f6:19:f6:ca:46:2a:
4e:e6:c5:b1:a7:53:49:de:35:76:73:fb:c3:24:94:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:19:F2:E8:61:ED:00:37:30:69:EE:12:1D:46:0C:36:BD:D3:EC:B1
X509v3 Authority Key Identifier:
keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3a:dc:34:45:15:b2:a2:fd:40:a0:37:8e:50:37:68:a7:6b:
6a:5a:27:9f:22:f9:cb:cb:e3:53:cb:68:88:12:e1:44:29:15:
ef:87:93:ae:24:a6:84:35:c5:3e:4c:69:e6:70:66:e9:d6:9f:
cb:ab:7c:d6:f8:69:10:79:6e:ff:cb:79:57:d9:96:17:29:a2:
01:eb:2a:23:15:86:36:4c:ee:4f:7e:3a:e9:62:f2:53:25:81:
ec:ce:51:e1:71:2c:1d:66:d1:06:35:55:ad:42:78:a3:d9:ec:
aa:b8:a6:2e:10:9e:ea:92:61:87:7e:bc:54:e2:11:96:df:1f:
4d:a7:4e:7f:bc:8b:7b:50:dd:cc:b2:41:b9:ae:0e:64:15:b7:
a6:12:67:3d:7a:1f:7c:c6:b8:ae:12:95:43:44:60:11:31:8f:
36:9a:6b:68:b2:46:d8:17:47:f4:d4:41:25:2e:96:bb:77:bb:
a7:50:3e:2a:2e:9b:d4:ce:bc:ea:e6:e1:dc:d4:68:3c:8d:26:
e9:f2:21:23:a3:18:7f:88:3e:fc:a7:dd:48:be:c6:46:90:4c:
f5:f4:30:bc:e6:0d:1d:84:77:26:82:39:05:c5:08:ac:2c:99:
7f:86:a9:92:96:16:c0:5a:7d:51:d6:0a:05:67:b1:b5:b6:ee:
c0:ae:61:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 10:20:28 2026 by rpki-client