Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: OKpwjfoLe+rMc4VpwN1KdQqD/iCkpjBI2c+ozxX/eTw=
Subject key identifier: E7:00:8A:19:61:09:16:9B:FD:46:20:9A:2E:B4:A0:DA:62:E9:69:96
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 019F9323AAA1A3A29548F1192105A98D5C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 05DE
Signing time: Fri 24 Jul 2026 08:00:15 +0000
Manifest this update: Fri 24 Jul 2026 08:00:15 +0000
Manifest next update: Sat 25 Jul 2026 08:00:15 +0000
Files and hashes: 1: OTzOq7SDpRdksgl_zYPgtdePfLI.roa (hash: D6qdGzPzEfS+jEvVQOP5Z3G0DkCqmvwi/YwWrt4+qgc=)
2: Uxk1FwItIfltxuYz2o9bKLPYoqw.roa (hash: 00PfsX6vRTHIMTxBup/P+JPXMFRRdRTXxG1QyBpuPMY=)
3: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: DyakB/JdDzsTodX6fysNkHCi4grr3M/LMYytadedKCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:aa:a1:a3:a2:95:48:f1:19:21:05:a9:8d:5c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Jul 24 08:00:15 2026 GMT
Not After : Jul 25 08:00:15 2026 GMT
Subject: CN=e7008a196109169bfd46209a2eb4a0da62e96996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:46:3a:c5:cf:1d:f7:4b:b2:52:a7:a0:ca:
af:17:c5:01:7c:4c:3e:ed:10:50:d5:08:2c:7b:5d:
d7:b5:94:0f:b0:e3:78:c6:84:be:bb:1e:11:cf:46:
58:9b:1a:ff:d4:c8:2c:c2:ab:36:b0:11:b2:9a:75:
df:ec:69:34:7a:74:d2:ec:ed:28:0d:27:22:23:9f:
11:ba:76:74:76:6a:a5:b2:73:0f:90:ed:12:12:82:
72:ab:8e:5f:c8:aa:cb:ed:b9:de:e7:88:c1:5a:24:
f0:71:0f:4e:f0:04:9b:05:40:16:49:53:45:f7:0c:
e0:fb:fb:21:b7:6a:82:52:0a:fe:09:2e:bc:3e:4a:
9d:76:19:dd:73:4e:38:6d:aa:ec:a9:c8:8a:6d:5c:
8d:4f:da:71:c9:63:c5:6e:29:ec:b2:ce:53:9e:48:
db:e9:0b:d9:eb:b9:e6:e4:d2:cd:d8:53:32:aa:92:
94:d9:7d:4c:70:10:36:5a:f1:5c:29:91:cc:25:7d:
61:0a:35:60:05:87:d0:d1:52:96:0f:62:88:1d:72:
bb:08:33:7e:15:c7:b4:4b:35:d0:a9:1e:28:9b:f4:
4c:87:e6:08:8b:f0:60:5e:15:c1:2b:ed:cb:0b:90:
ce:1b:09:7c:79:00:c5:cc:51:ea:1a:1f:19:24:ab:
69:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:00:8A:19:61:09:16:9B:FD:46:20:9A:2E:B4:A0:DA:62:E9:69:96
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:54:7d:60:17:33:c6:46:e5:64:c3:0b:ae:68:8b:3c:ca:05:
9f:81:51:5d:1e:b1:7a:94:88:77:6b:79:ac:2e:58:84:1d:2c:
f1:03:bc:23:72:d9:c2:f5:46:8d:1f:d3:fe:75:e5:c6:6a:d5:
b8:4f:1f:8f:aa:5a:a8:2b:4f:bf:d3:8d:9b:c7:a6:c7:c2:75:
46:cc:91:de:15:cd:98:48:bc:9f:ff:da:f5:04:1b:ef:03:42:
17:09:69:fa:29:c5:43:e2:56:71:89:64:d5:bc:ae:58:7f:45:
dd:c1:64:95:12:f7:be:f7:68:15:0c:dc:ba:f7:21:46:6f:e4:
8e:f4:0d:76:5c:40:f5:b7:20:95:74:29:e0:1c:8e:9c:26:12:
69:7e:fc:f9:42:7b:b7:31:8e:16:75:5b:0e:17:d9:56:4d:0b:
c1:10:06:e8:bd:5b:87:aa:34:df:6c:94:24:6b:3b:6f:89:44:
8f:f1:91:59:8f:f0:3a:3c:9c:fd:92:f1:74:34:af:93:6b:c9:
aa:8b:fb:56:fc:36:cc:46:7c:d1:fd:27:fe:b3:dd:08:2a:e9:
38:21:e4:45:91:93:ee:28:5e:0a:df:0b:3e:8d:ce:76:bd:85:
1a:00:a2:b1:bb:09:4a:5d:3f:df:a3:72:89:7a:09:03:01:ab:
e8:16:77:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:45:38 2026 by rpki-client