Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: YTdZdsKhnSpdxWFqMHx4bPt7FoNiIwqGscTzo+Azdc0=
Subject key identifier: 3A:D3:6E:2D:89:CC:FA:60:81:03:25:43:E8:0B:ED:DA:4E:BB:9B:9A
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 019F86440DB5D570AD966AA270600947D2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 0CBC
Signing time: Tue 21 Jul 2026 20:00:34 +0000
Manifest this update: Tue 21 Jul 2026 20:00:34 +0000
Manifest next update: Wed 22 Jul 2026 20:00:34 +0000
Files and hashes: 1: BK3tpKOSTXCxYKkOe13Q63MJb9I.roa (hash: z9SYgCP3ZiLQk0vjMcoJ4vujaJvpOaOHnYotNVtHhjQ=)
2: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: EFSLDOriyKT9R7bz84KXA9rEbR2vhSdkZegnqjXC6d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:0d:b5:d5:70:ad:96:6a:a2:70:60:09:47:d2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Jul 21 20:00:34 2026 GMT
Not After : Jul 22 20:00:34 2026 GMT
Subject: CN=3ad36e2d89ccfa6081032543e80bedda4ebb9b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:7b:a8:bb:e2:7a:9c:76:90:ff:53:fc:7e:
7f:5f:66:ae:25:ef:b0:33:0a:b8:79:e0:f2:eb:e3:
70:6a:f1:51:ff:b4:0a:03:c1:ea:07:39:30:ea:f1:
63:52:0d:e6:34:12:16:ce:f6:4e:a7:af:37:47:af:
22:ad:8c:7f:aa:9b:51:66:38:a9:73:57:97:51:a1:
e0:cf:c7:8a:69:81:8f:bb:2a:09:23:80:55:55:11:
26:ca:25:ef:13:26:5d:8b:83:30:26:18:f4:62:22:
a2:f1:fb:29:53:e4:b5:06:1e:0f:fd:be:ae:9a:ca:
a7:44:26:90:5d:10:95:bb:0d:8a:91:05:50:31:dc:
3c:77:c3:4f:4b:8a:f4:4d:d6:9c:78:d0:f3:da:60:
02:80:d5:29:e3:d4:51:7f:8c:b6:e6:09:dd:1c:20:
11:28:81:6d:f9:23:60:ee:9f:16:0e:6f:9a:09:ca:
25:e5:3d:ec:3a:58:22:f2:59:37:c1:b3:93:5c:ca:
62:58:5f:9d:fc:8a:30:2c:26:cd:ef:94:b1:4a:c3:
02:05:59:75:4a:24:3a:e8:9e:71:f8:21:fa:01:23:
98:cc:61:6f:bc:5c:33:5d:fb:34:68:5d:56:4a:0c:
73:e8:ac:f0:b5:a0:fe:a4:86:80:e2:4b:75:51:06:
d9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D3:6E:2D:89:CC:FA:60:81:03:25:43:E8:0B:ED:DA:4E:BB:9B:9A
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e5:63:df:78:39:b6:86:78:4a:82:76:63:5c:ab:38:16:4e:
61:c5:b0:03:5f:7b:bc:2e:6e:de:87:0c:45:60:7c:36:36:6a:
3f:e1:26:00:1d:5d:e7:26:09:f9:65:3c:0a:32:7f:b3:f5:03:
21:ec:35:88:91:fb:4a:1f:bc:17:13:d7:31:ed:b6:87:ab:ef:
a7:9a:7a:d0:2f:40:eb:6e:ac:60:5b:cb:e9:39:97:f5:3b:e2:
16:da:d8:0b:56:ca:81:ca:5c:7c:80:8b:cb:9d:bf:cf:de:6a:
8a:8c:13:6c:91:cd:ed:9a:21:2b:b1:b7:8c:b5:f1:1d:76:d7:
b3:ec:68:23:5b:48:bc:0e:b6:6a:d5:98:3e:6f:61:a1:fb:de:
ef:b4:3c:a2:8c:4a:78:12:18:24:6c:2d:82:0f:e6:b0:f2:1e:
3d:bc:d9:7f:78:71:00:70:cc:09:fd:b6:dd:27:76:d1:4c:0e:
9e:af:7f:78:3e:36:6c:ba:79:b0:ce:d8:38:77:14:65:7a:4a:
0f:4e:38:21:f8:fe:b5:66:27:f7:ba:07:33:be:ab:7e:dc:59:
d9:4b:cc:6e:07:7b:df:56:55:73:6c:0c:f4:45:f4:50:07:33:
05:4c:61:29:fd:0e:96:c4:f2:06:2f:ce:eb:b6:f2:2b:b3:6e:
5d:6c:3b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:45:27 2026 by rpki-client