Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: 95IPXrewWbKA0xizdgygXuq+atTdTe265AH1Ex7N76w=
Subject key identifier: 12:A0:2F:6F:B0:D2:9A:A5:E0:C7:47:68:97:DA:BD:2D:53:64:08:4E
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 019F93C91ADC81911C8122DC8C2465F8945A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 0CC3
Signing time: Fri 24 Jul 2026 11:00:58 +0000
Manifest this update: Fri 24 Jul 2026 11:00:58 +0000
Manifest next update: Sat 25 Jul 2026 11:00:58 +0000
Files and hashes: 1: BK3tpKOSTXCxYKkOe13Q63MJb9I.roa (hash: z9SYgCP3ZiLQk0vjMcoJ4vujaJvpOaOHnYotNVtHhjQ=)
2: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: i0Q27ht8dczwyvedT5DDbGN3IQqMsN0Gu6amm5lMnUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:1a:dc:81:91:1c:81:22:dc:8c:24:65:f8:94:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Jul 24 11:00:58 2026 GMT
Not After : Jul 25 11:00:58 2026 GMT
Subject: CN=12a02f6fb0d29aa5e0c7476897dabd2d5364084e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2a:44:c6:7e:ce:90:31:ba:24:a6:26:a3:34:
46:c5:ef:b8:2c:f1:d2:15:45:58:d9:b7:ea:d4:55:
fe:49:2e:ad:1d:56:66:74:80:4c:f2:9b:20:e5:6b:
af:98:e9:33:83:de:ce:b4:9f:2b:1a:1f:48:36:06:
9b:26:08:c1:c5:6a:bd:9f:5a:37:62:8a:8f:39:d2:
f5:11:6d:2f:4a:20:f6:b8:4f:0d:8a:46:af:9b:68:
27:65:5d:d6:83:b4:1c:83:c7:75:bc:0b:65:67:88:
94:b4:c2:bd:50:fd:90:36:e6:63:19:f3:01:f7:19:
93:65:5e:98:52:e8:a3:01:ef:ac:bd:a1:f3:73:df:
b3:10:4d:c8:a6:cf:9b:be:f9:44:06:bb:db:c5:02:
5c:50:ba:84:0f:93:6a:90:53:4f:cd:3d:a6:e0:18:
ed:3b:42:86:fd:42:c4:3b:f5:b5:2d:97:ee:ef:91:
61:bf:68:b1:65:e9:f3:f8:43:55:98:28:a9:97:a2:
e9:89:f9:bb:e4:6c:ba:92:ea:16:83:28:07:61:ec:
41:bd:55:59:fe:66:c9:8e:d9:af:c2:f9:f0:2f:52:
02:f4:04:fe:58:19:39:cf:90:b7:e4:9e:36:25:05:
7b:1d:0e:b9:23:b4:0d:74:fe:7a:d5:f2:73:85:1d:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A0:2F:6F:B0:D2:9A:A5:E0:C7:47:68:97:DA:BD:2D:53:64:08:4E
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:20:35:21:1a:50:7c:70:c2:83:d7:f1:f3:52:0a:c4:2f:42:
d2:99:98:06:95:b0:18:8a:4d:75:44:b2:67:29:d9:d3:26:b0:
98:4e:48:89:8d:85:88:dc:c1:0a:19:6f:96:28:4d:37:6c:f0:
ac:c1:90:9e:6d:d8:61:f6:2b:8d:22:54:d8:bc:bb:9d:70:16:
fd:6b:40:d8:9f:a4:c2:18:bc:d6:e1:dd:ba:3e:1d:a6:d6:70:
30:7c:59:42:1a:92:d4:ba:65:27:0d:95:47:51:d7:7a:49:3c:
e0:a8:e2:9c:69:4c:69:f4:48:53:9a:2b:d6:87:1c:46:95:c4:
91:a0:b4:86:78:4a:da:1f:88:18:8c:2e:e7:bb:8e:59:50:7d:
cb:70:13:9f:d3:ea:11:d1:21:9a:39:7c:55:18:cc:68:65:f7:
ad:d8:be:56:5f:f0:de:7f:e7:cf:33:8c:25:bf:09:05:9a:ca:
d6:dc:8f:bd:4a:f6:c6:51:f6:2e:28:b3:ab:42:1d:6d:e9:ad:
a1:9a:4f:45:ab:87:3d:fa:4f:aa:12:58:ee:7e:2f:1f:95:f8:
5e:78:27:15:d8:0f:b1:11:18:06:24:df:68:93:b9:52:0e:88:
aa:6d:71:2e:8f:8b:94:49:c5:c7:98:31:9e:b8:97:04:32:17:
cc:53:96:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:01:51 2026 by rpki-client