Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: xCRTfeBZjDCfNiWlEdrR/+oJVAtJEUAatxAFocYBQyU=
Subject key identifier: 7C:7B:99:CF:58:BC:7C:F9:46:CE:86:B1:15:F4:88:26:8B:0D:F7:EC
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 01A0D26E891D09550F7A0A4547D7FA480506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 0D68
Signing time: Thu 24 Sep 2026 08:00:54 +0000
Manifest this update: Thu 24 Sep 2026 08:00:54 +0000
Manifest next update: Fri 25 Sep 2026 08:00:54 +0000
Files and hashes: 1: BK3tpKOSTXCxYKkOe13Q63MJb9I.roa (hash: z9SYgCP3ZiLQk0vjMcoJ4vujaJvpOaOHnYotNVtHhjQ=)
2: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: bwH/yMkqfVgXT2at3LcLP6f0VVSJeIhvJtycxDe5WZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:89:1d:09:55:0f:7a:0a:45:47:d7:fa:48:05:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Sep 24 08:00:54 2026 GMT
Not After : Sep 25 08:00:54 2026 GMT
Subject: CN=7c7b99cf58bc7cf946ce86b115f488268b0df7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:81:a1:8a:0e:e9:f9:fb:72:93:29:74:36:1d:
9d:27:1d:4f:9f:7a:f2:39:72:75:cd:c7:80:9a:e3:
92:66:f4:fd:58:08:37:fe:ce:25:a3:f4:05:8b:d7:
34:b7:eb:89:01:10:5d:09:7d:d4:7d:bd:5a:28:15:
9b:7f:74:e5:c7:8a:d9:9f:db:b0:db:80:a2:03:36:
51:49:07:46:ba:3b:24:24:de:3c:1f:6b:59:b0:d2:
e9:09:1d:a9:17:b1:51:d7:1e:af:28:73:72:61:77:
0c:91:67:ab:ac:3e:59:0c:2c:ee:6e:11:3e:ea:db:
8f:62:a6:f7:0c:eb:14:1a:e9:86:7c:71:82:68:07:
d7:7b:bc:81:95:ff:c5:f1:92:b1:4c:06:c5:e8:da:
b1:66:b2:a6:ab:90:bd:19:41:cf:95:40:98:44:9a:
ca:61:e3:89:04:17:49:f3:8c:6a:5d:96:03:4b:f9:
cf:82:f7:68:34:80:7d:d5:78:ea:c2:e0:28:77:23:
2b:f6:27:65:e1:64:35:06:9a:24:80:b0:84:be:27:
c7:27:96:87:23:75:7d:7d:9c:f6:1b:d3:65:f9:a3:
5f:6d:bf:51:4e:89:bd:fe:0e:52:59:ec:1a:bc:c4:
5d:c1:d2:4a:c6:48:8c:d0:10:85:5a:27:10:01:3f:
f8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7B:99:CF:58:BC:7C:F9:46:CE:86:B1:15:F4:88:26:8B:0D:F7:EC
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2f:a9:6f:4b:db:62:67:e5:c2:44:df:78:d4:34:63:31:cf:
a4:08:90:9b:89:69:69:a0:44:48:ef:55:d1:9e:93:bf:51:b8:
f4:77:92:39:ad:3d:65:e8:ea:d1:93:12:bb:34:bf:99:3a:cd:
38:c9:6b:23:f8:cf:b6:ff:01:64:dd:96:80:a0:a0:6f:f3:92:
da:60:02:89:02:b5:c1:45:9d:24:9f:87:78:ff:27:b7:e5:89:
7b:cd:db:27:8f:cc:93:07:d8:da:67:62:00:37:5b:62:63:64:
21:1e:7b:a9:0c:b5:ba:78:37:35:50:1f:1e:88:75:8e:a6:ca:
ce:03:02:9c:97:8f:c9:d2:bb:1a:a3:a5:9e:4e:29:b7:b6:be:
d3:05:cb:44:74:6e:29:64:51:f1:8d:4a:58:38:1b:bd:7a:81:
cf:83:87:92:e6:92:d6:23:2e:06:5d:d5:96:db:7e:89:d3:bc:
7e:ac:1f:d6:ea:74:e1:3c:96:55:98:f8:cf:4b:51:f9:f5:6f:
fe:9e:ba:6d:47:a1:56:0d:35:cb:3f:81:5a:7b:78:65:bd:a1:
10:81:34:08:1c:e2:86:00:86:20:ff:98:ae:2d:59:e6:f5:9b:
39:ac:2c:27:6c:44:a1:a0:a0:dd:84:37:09:e9:c3:be:6b:a2:
07:7e:f9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:54:52 2026 by rpki-client