Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: K0iM/YGeR5vi9YbKMBTq7sPXfdAJlTQHR7yyEEGzKoA=
Subject key identifier: E9:91:46:F7:28:44:9A:1B:0D:7C:D6:3D:27:FB:3D:C0:D7:20:A5:2F
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 019E1E6C59F8A131DB4499CB9B92AA5C65BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 051D
Signing time: Tue 12 May 2026 23:01:17 +0000
Manifest this update: Tue 12 May 2026 23:01:17 +0000
Manifest next update: Wed 13 May 2026 23:01:17 +0000
Files and hashes: 1: OTzOq7SDpRdksgl_zYPgtdePfLI.roa (hash: D6qdGzPzEfS+jEvVQOP5Z3G0DkCqmvwi/YwWrt4+qgc=)
2: Uxk1FwItIfltxuYz2o9bKLPYoqw.roa (hash: 00PfsX6vRTHIMTxBup/P+JPXMFRRdRTXxG1QyBpuPMY=)
3: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: Ijvz4/jwjKoQMYQW3Fvqu30iUd/w/CdFi8KlzAo1bYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:59:f8:a1:31:db:44:99:cb:9b:92:aa:5c:65:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: May 12 23:01:17 2026 GMT
Not After : May 13 23:01:17 2026 GMT
Subject: CN=e99146f728449a1b0d7cd63d27fb3dc0d720a52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:73:e6:84:fa:17:dd:af:85:80:22:64:f0:
fe:da:a6:22:0f:d3:ea:4b:b4:b8:6e:cd:5a:f4:71:
02:e8:d9:d2:a2:cd:41:9b:80:63:9d:c5:83:d8:eb:
70:0e:c5:78:0c:de:b1:bd:8a:24:58:60:eb:f5:56:
0f:15:e7:7e:83:94:ad:19:8d:b8:b2:57:9a:0e:ba:
9b:bd:7b:9c:e0:7f:c4:49:1a:96:c0:ca:7d:e6:0b:
ea:60:e4:fc:44:8e:86:28:e9:c0:66:2a:55:c1:23:
34:4d:34:72:74:ff:3a:83:7c:e4:b6:cc:7b:f3:4a:
10:18:fd:bb:08:1c:21:30:23:b8:d3:c7:6e:de:48:
ef:00:35:95:36:4f:5c:b3:12:af:66:ae:fa:f2:32:
be:5a:22:cd:de:5b:5a:62:10:cd:ce:9d:cc:53:05:
94:32:da:d5:21:40:07:f6:9a:ce:f5:f8:02:76:51:
9a:ce:10:b3:f0:54:f7:2c:07:0d:18:b5:28:d8:72:
1f:85:e1:09:16:d8:8b:c0:af:75:19:29:94:d0:4f:
91:09:41:fa:72:e2:0f:c5:43:1c:a2:36:92:6f:09:
ec:4b:36:3a:df:8f:8e:34:93:9e:ad:40:61:e1:35:
30:2d:52:df:5b:c1:33:86:c9:93:43:82:3d:de:93:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:91:46:F7:28:44:9A:1B:0D:7C:D6:3D:27:FB:3D:C0:D7:20:A5:2F
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:67:f9:dd:be:6a:29:94:55:d5:7d:1b:5e:c8:7d:bd:50:84:
be:41:95:ae:9f:11:d8:02:0b:54:94:eb:8e:b1:a9:7a:e3:14:
15:fd:f9:1a:03:de:d2:a6:ba:30:65:fe:29:27:9c:b4:bf:8f:
e5:e2:e8:06:77:4b:a8:e1:6a:e3:ce:97:19:2e:11:de:9e:ea:
e2:fb:a3:71:87:c1:af:2a:62:43:c2:45:fe:50:c1:4a:69:e1:
0f:1d:9c:24:2c:80:86:d7:46:fc:18:86:eb:e1:0f:d8:f5:1a:
a1:af:91:19:d3:95:eb:8c:59:05:ad:80:b8:51:51:c2:db:f6:
4f:a0:90:8a:46:79:c8:d8:ab:28:0e:c9:c7:96:50:96:7d:76:
4d:74:84:ea:2b:d1:bf:9c:dc:73:4b:fe:ac:8a:21:ad:cb:ab:
63:44:a1:0f:83:bc:11:4b:ad:c9:bc:b4:1f:3b:2e:fe:dc:54:
2d:5d:32:e4:3e:1d:84:a0:48:e0:13:d7:a4:95:e4:d5:44:27:
f7:46:24:c6:30:db:9a:fb:b5:d0:f7:55:0a:15:e1:c2:80:18:
68:d7:7f:75:e2:8c:31:ee:5b:fc:0e:d5:11:76:79:cb:1b:22:
c6:7a:e5:91:24:08:f8:fc:66:05:77:ed:66:65:6f:ec:34:39:
d2:33:3b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:29 2026 by rpki-client