Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: g5W5TUqPIzRjU9q5CN5ubeM0BH2AFsUauWAsMGsEWlg=
Subject key identifier: 3C:79:A8:B9:24:F2:33:63:16:C7:12:03:BE:EC:F6:79:41:2D:25:AE
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 01A0CDECFE63FBE9B9970EAEF3EF292D74EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 0681
Signing time: Wed 23 Sep 2026 11:00:55 +0000
Manifest this update: Wed 23 Sep 2026 11:00:55 +0000
Manifest next update: Thu 24 Sep 2026 11:00:55 +0000
Files and hashes: 1: OTzOq7SDpRdksgl_zYPgtdePfLI.roa (hash: D6qdGzPzEfS+jEvVQOP5Z3G0DkCqmvwi/YwWrt4+qgc=)
2: Uxk1FwItIfltxuYz2o9bKLPYoqw.roa (hash: 00PfsX6vRTHIMTxBup/P+JPXMFRRdRTXxG1QyBpuPMY=)
3: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: 3+HcYEufrOQ/QbGYGdMb8L1Pw3XdrWqiLhc/seWE4Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:fe:63:fb:e9:b9:97:0e:ae:f3:ef:29:2d:74:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Sep 23 11:00:55 2026 GMT
Not After : Sep 24 11:00:55 2026 GMT
Subject: CN=3c79a8b924f2336316c71203beecf679412d25ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:71:83:de:4a:c2:02:c0:20:00:c6:f4:ea:
54:45:81:58:5f:03:ad:b3:16:ac:aa:d9:c9:83:fd:
78:5a:65:8d:43:5c:be:07:b1:1f:07:c4:4e:7d:21:
32:a3:8e:7a:08:b9:03:63:a6:13:22:e4:06:56:20:
a3:c2:24:93:1d:79:27:5b:00:cc:f9:21:82:cb:c5:
e8:fe:48:f1:35:14:bf:ad:bf:ad:dc:85:50:5b:40:
39:cc:a2:4a:89:42:39:3a:57:a8:8b:71:1b:98:5f:
9d:23:1d:a4:90:95:63:7c:c6:ae:e5:45:54:f5:a6:
7a:97:18:20:02:4c:cf:38:54:60:99:c9:9e:52:2c:
ca:f5:38:1c:d8:d1:b2:81:b8:64:a6:59:75:3b:c4:
c2:cf:8e:b5:82:e6:21:4c:7a:2c:2c:a6:e2:28:79:
9b:28:d2:36:fe:e1:a8:e6:d0:18:39:71:d5:cd:aa:
8b:1d:86:08:ee:d1:d2:68:5f:27:cb:e9:c7:83:f8:
f6:15:df:63:37:28:d9:79:50:c4:15:a7:b4:00:35:
67:c7:4a:fb:b7:3d:de:0b:f4:08:76:58:f6:bf:30:
b4:03:e6:fb:f5:40:99:9c:db:1c:a1:3f:81:a9:52:
41:72:d1:d4:d1:13:eb:24:be:95:30:3d:84:cb:3a:
f8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:79:A8:B9:24:F2:33:63:16:C7:12:03:BE:EC:F6:79:41:2D:25:AE
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e4:53:8c:fd:01:b9:f6:b7:1a:5e:dc:08:8b:1a:15:9e:8f:
6d:ca:ad:66:39:f0:2a:20:35:00:37:e1:83:30:61:77:73:4f:
e6:b4:c1:38:f2:ef:07:2a:c3:de:6d:19:52:ca:c6:bc:a0:55:
e4:e0:06:bc:7d:1f:89:68:cf:a9:af:e7:9c:28:f1:92:5b:7a:
dd:4f:38:67:38:d4:3e:94:73:f1:8d:20:86:88:2a:c1:b0:59:
07:1c:ac:a7:7e:70:06:2c:a0:6d:d5:7e:a8:6c:82:6f:cc:fa:
e3:12:b1:9b:8c:f4:75:69:05:fd:ee:c6:8d:53:01:cf:cc:9b:
a8:42:5f:1a:f8:e7:a5:6f:41:ae:d8:b9:c3:2c:36:d8:3b:fb:
2d:ba:e3:09:64:4e:f3:9e:f3:0c:d7:6d:b9:8f:93:ee:19:15:
11:86:fe:b2:9c:5e:d2:28:c5:c3:92:b9:72:bd:fd:82:63:7d:
46:0d:88:49:77:c9:b5:36:2c:0b:b1:52:be:42:57:05:84:48:
d0:6c:68:6a:c4:9b:5f:ad:99:38:bc:33:39:59:b0:cf:aa:58:
9c:8e:76:54:12:6e:7c:f2:6c:fd:9b:10:85:60:f3:0d:b6:d0:
49:ef:ce:0e:ff:78:39:e1:ec:1f:31:05:4a:83:8a:d9:ab:2f:
d6:7c:c3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:33:12 2026 by rpki-client