Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
File: jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json)
Hash identifier: 5pDICHeFCcM5fuWqmdlNanbgaxljK3ibI2GRff+deLk=
Subject key identifier: D8:E5:40:68:74:60:D6:97:0E:76:26:9B:6B:4B:74:D3:B4:C3:AD:B7
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial: 019D29CE487A874BC206ABD5E8EDB46A8E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 11:01:17 +0000
Manifest this update: Thu 26 Mar 2026 11:01:17 +0000
Manifest next update: Fri 27 Mar 2026 11:01:17 +0000
Files and hashes: 1: D8C_fac31Ie3Mlmm0iY26zsUpPQ.roa (hash: aXM4Hau7o88WQaKHyho1aeWalezo3Xwt0vRqN6L/8TQ=)
2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: gL2Go7Mn7/0TqRMP9I+qSh9IimASVpqdePcsPAXknQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:48:7a:87:4b:c2:06:ab:d5:e8:ed:b4:6a:8e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Validity
Not Before: Mar 26 11:01:17 2026 GMT
Not After : Mar 27 11:01:17 2026 GMT
Subject: CN=d8e540687460d6970e76269b6b4b74d3b4c3adb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:48:fb:ea:13:11:cf:c9:77:b7:16:be:85:8a:
26:e2:49:b5:54:f6:82:52:2d:e5:14:ef:87:4c:18:
99:4d:d3:be:1b:6c:db:c3:24:0f:7e:16:f3:38:c3:
a9:16:2f:ef:8c:ff:28:3b:28:91:52:81:78:7b:72:
b6:b4:79:a7:8b:fb:99:4c:d0:95:7c:63:d6:8c:db:
3f:84:4a:25:75:a3:ca:40:f4:62:af:52:48:ba:19:
e4:d7:3f:34:55:48:86:7c:02:57:f9:75:b3:c4:7e:
10:fd:c2:e1:29:55:b5:3e:f3:c8:68:7c:0f:9e:08:
db:86:b6:ce:49:d7:3a:01:41:95:3d:8b:61:74:05:
1c:99:06:4e:af:23:02:4a:e2:70:58:eb:3d:74:4b:
62:ca:02:45:7d:88:67:f6:b3:ef:65:b2:ab:ff:cb:
6a:f4:3a:55:4e:86:5e:8e:42:fc:3e:4a:3c:5c:fd:
80:0a:f8:3a:53:e8:42:25:b6:9f:8d:61:29:81:15:
15:01:d1:fd:ee:f5:85:80:05:a5:f5:92:69:e7:63:
1b:5c:2e:2b:e8:1c:2f:61:80:ac:8d:d3:0a:0b:67:
79:83:1a:c9:a2:90:ad:3a:ac:98:be:1c:60:4c:b5:
ab:fb:98:a8:28:20:8b:04:5a:6a:b8:0d:87:4e:20:
8c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E5:40:68:74:60:D6:97:0E:76:26:9B:6B:4B:74:D3:B4:C3:AD:B7
X509v3 Authority Key Identifier:
keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a8:22:32:77:0d:3e:28:4b:d3:01:df:ab:db:7b:3f:ad:7b:
8a:bc:ee:ca:cb:15:ab:f7:31:1d:e7:92:1b:6d:dc:f0:1d:47:
54:7f:90:88:f2:c4:41:f3:b7:67:3d:c0:ce:0b:fd:37:15:52:
ce:d2:61:b3:06:ec:53:49:db:59:3e:b7:c1:a4:57:67:3b:ef:
b0:a6:92:72:81:ca:69:f6:2f:c7:4a:83:d2:48:67:45:07:f6:
c8:48:0c:69:37:9d:72:97:7a:c3:11:65:01:4e:9f:b2:f0:2b:
27:6c:ee:ce:44:6d:ec:6a:0f:1b:3a:ee:8f:59:98:b5:74:09:
3d:3d:3c:68:7b:4e:d7:a7:a7:6c:5b:db:93:9d:15:a2:d8:a0:
2e:23:77:b5:01:f7:07:4c:d8:f0:7c:ee:46:37:23:22:46:3c:
7d:cb:f0:ff:46:91:e9:ca:fb:06:82:8a:6d:78:3b:fc:31:5e:
17:8a:6f:6f:5b:0f:53:85:e2:78:af:45:87:1a:06:91:67:e6:
e4:b4:63:e5:c0:c9:ec:aa:4c:63:1e:e5:ad:f8:66:44:88:f5:
b5:45:9b:c3:8d:6a:77:9a:99:08:5d:22:88:87:61:12:c8:59:
1c:5e:77:58:7b:d3:18:80:ee:70:f4:49:12:92:64:b1:2d:a2:
1a:2f:86:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:26:28 2026 by rpki-client