Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: Zedr4gptNQqd94q3ikOhjzR7NfVfP+YCZOJmCLfgaCI=
Subject key identifier: FA:BD:CB:44:03:FD:3F:70:7C:89:43:6C:DE:A2:BA:84:17:80:27:80
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 019E1F114E78F214C51765B9E62AC6753BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 0C02
Signing time: Wed 13 May 2026 02:01:28 +0000
Manifest this update: Wed 13 May 2026 02:01:28 +0000
Manifest next update: Thu 14 May 2026 02:01:28 +0000
Files and hashes: 1: BK3tpKOSTXCxYKkOe13Q63MJb9I.roa (hash: z9SYgCP3ZiLQk0vjMcoJ4vujaJvpOaOHnYotNVtHhjQ=)
2: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: jxL7fmApuw31bzWpOu3TJoiy2sBdRlI79laQUyoNlgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:4e:78:f2:14:c5:17:65:b9:e6:2a:c6:75:3b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: May 13 02:01:28 2026 GMT
Not After : May 14 02:01:28 2026 GMT
Subject: CN=fabdcb4403fd3f707c89436cdea2ba8417802780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:e3:d8:7a:ea:96:83:54:57:9c:c6:85:be:
ec:d4:46:74:ee:aa:53:21:09:38:d0:0d:4a:33:4a:
07:7d:b7:ab:14:75:fb:8c:b7:93:32:6e:93:27:92:
47:0d:c7:c7:06:f7:3d:ca:b7:ee:22:71:37:ef:e7:
53:8b:1a:aa:45:88:98:ce:9c:00:f4:cc:ef:8c:1f:
9a:fb:b6:39:43:35:28:c4:77:26:29:98:e7:5d:64:
84:0f:44:f3:18:e7:cc:f6:7c:ed:bf:c2:68:5c:4d:
50:6c:84:50:cb:c8:ab:5d:7f:18:ce:8d:6c:26:73:
6e:31:f9:e6:d8:6d:9b:5d:44:29:8b:7d:d5:d9:35:
70:a3:0c:31:32:7a:34:80:42:18:f4:29:f7:3a:59:
a7:4e:a9:36:55:b9:96:09:fa:f9:39:62:63:ac:c1:
7b:84:bf:45:b0:5a:47:1a:4c:08:32:07:ce:36:3f:
1b:93:44:64:af:02:61:0d:e7:dd:47:c8:57:91:c9:
9c:c5:2e:b1:97:2c:44:a2:78:58:fe:48:a6:f5:07:
a5:ca:5b:77:4b:70:17:a4:bd:91:6f:46:f7:90:b7:
13:fd:2c:87:a6:19:e6:76:e3:c6:f7:ad:86:a8:86:
af:da:64:7d:85:06:e0:10:15:74:9a:86:e8:76:15:
e8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BD:CB:44:03:FD:3F:70:7C:89:43:6C:DE:A2:BA:84:17:80:27:80
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ba:ae:22:cf:92:54:d7:99:e6:d0:9c:dd:7f:a5:cc:50:e1:
d7:23:66:a6:90:ab:d2:2e:cf:e7:12:da:50:80:42:27:3e:df:
5f:77:df:24:17:25:61:ee:36:c9:14:57:4f:a2:90:54:ba:6d:
55:08:1c:60:07:7a:a9:b6:9a:df:40:32:c8:44:ed:78:d7:d6:
c7:a0:1a:48:87:3c:70:e7:29:23:82:36:be:31:45:9f:ce:3b:
ed:fd:c7:3e:74:8e:fe:30:97:4a:bb:0f:c6:3a:83:8f:a9:d9:
5f:41:65:53:d0:aa:2f:51:f7:1b:d6:de:24:ec:ec:0a:60:b6:
e1:ed:17:82:d0:9e:ae:25:6a:76:cb:01:2e:44:f8:44:b8:fa:
51:54:86:9c:75:3d:d2:a9:2a:fb:45:d4:0a:27:21:c0:b0:37:
74:94:de:13:e8:2a:12:2c:ac:8b:b2:8a:b4:d4:05:2c:a0:b3:
a8:55:8f:20:4c:d8:f0:c9:70:c6:d8:44:df:14:55:76:ef:45:
9f:e5:ab:2c:f8:ef:ef:a8:e5:47:96:a9:f0:2b:30:70:eb:51:
9c:e6:2b:fd:f0:43:5b:ec:6f:92:f0:02:22:2d:0d:13:d7:f4:
29:1f:c6:2d:13:29:d6:01:77:4e:da:66:6d:ed:74:5b:f0:52:
4d:75:ef:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEU548hTFF2W55irGdTu1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzBjYzA4Yzk4ZTA1ZjRlMWZiMDQ0MDA4ZDg1MmEyYTRk
YTAwZjAwHhcNMjYwNTEzMDIwMTI4WhcNMjYwNTE0MDIwMTI4WjAzMTEwLwYDVQQD
EyhmYWJkY2I0NDAzZmQzZjcwN2M4OTQzNmNkZWEyYmE4NDE3ODAyNzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLLj2HrqloNUV5zGhb7s1EZ07qpT
IQk40A1KM0oHfberFHX7jLeTMm6TJ5JHDcfHBvc9yrfuInE37+dTixqqRYiYzpwA
9MzvjB+a+7Y5QzUoxHcmKZjnXWSED0TzGOfM9nztv8JoXE1QbIRQy8irXX8Yzo1s
JnNuMfnm2G2bXUQpi33V2TVwowwxMno0gEIY9Cn3OlmnTqk2VbmWCfr5OWJjrMF7
hL9FsFpHGkwIMgfONj8bk0RkrwJhDefdR8hXkcmcxS6xlyxEonhY/kim9Qelylt3
S3AXpL2Rb0b3kLcT/SyHphnmduPG962GqIav2mR9hQbgEBV0mobodhXo2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPq9y0QD/T9wfIlDbN6iuoQXgCeAMB8GA1UdIwQY
MBaAFI7AzAjJjgX04fsEQAjYUqKk2gDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAt
MzU3NjlmMDYyOTlhLzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAtMzU3NjlmMDYyOTlh
LzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7quIs+S
VNeZ5tCc3X+lzFDh1yNmppCr0i7P5xLaUIBCJz7fX3ffJBclYe42yRRXT6KQVLpt
VQgcYAd6qbaa30AyyETteNfWx6AaSIc8cOcpI4I2vjFFn8477f3HPnSO/jCXSrsP
xjqDj6nZX0FlU9CqL1H3G9beJOzsCmC24e0XgtCeriVqdssBLkT4RLj6UVSGnHU9
0qkq+0XUCichwLA3dJTeE+gqEiysi7KKtNQFLKCzqFWPIEzY8MlwxthE3xRVdu9F
n+WrLPjv76jlR5ap8CswcOtRnOYr/fBDW+xvkvACIi0NE9f0KR/GLRMp1gF3Ttpm
be10W/BSTXXvPQ==
-----END CERTIFICATE-----
Generated at Wed May 13 10:14:06 2026 by rpki-client