Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: 7AAKKwDQm09PoazVyAXIJMhIby5jH4kLBNZxVDE3++c=
Subject key identifier: C3:05:37:CC:98:40:E1:29:C2:D2:2E:45:1B:DE:8B:2D:EC:87:C2:AA
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 01A06E027B0ED45791A777E8102535BFD05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 0D34
Signing time: Fri 04 Sep 2026 20:00:51 +0000
Manifest this update: Fri 04 Sep 2026 20:00:51 +0000
Manifest next update: Sat 05 Sep 2026 20:00:51 +0000
Files and hashes: 1: BK3tpKOSTXCxYKkOe13Q63MJb9I.roa (hash: z9SYgCP3ZiLQk0vjMcoJ4vujaJvpOaOHnYotNVtHhjQ=)
2: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: VAV0j4eS+vhBgtDlkA68q9Yv0IQhhnzfAvdcMH/bpvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:02:7b:0e:d4:57:91:a7:77:e8:10:25:35:bf:d0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Sep 4 20:00:51 2026 GMT
Not After : Sep 5 20:00:51 2026 GMT
Subject: CN=c30537cc9840e129c2d22e451bde8b2dec87c2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:48:c2:c7:9b:84:14:31:1e:ce:1e:0e:75:
75:90:9e:13:d9:90:32:1b:4b:19:3a:6a:c9:c9:54:
88:da:d1:f6:2f:12:f8:56:0a:67:39:87:0c:fa:f0:
b5:08:1e:5c:fa:2c:45:82:bf:89:74:86:d7:f1:26:
ec:98:6d:94:ff:01:3a:48:2a:18:fd:47:2d:0d:63:
8e:79:2b:d0:f4:c6:be:8c:ac:68:e9:8a:4c:bc:a2:
34:e4:75:4e:51:e6:7b:8f:56:85:c4:4f:7f:2f:84:
99:0d:52:5c:8f:d1:21:ba:13:0c:52:1b:24:e8:dd:
cd:23:00:a4:b5:a9:53:76:76:23:a3:97:cf:e8:55:
d0:e2:e6:0a:43:c7:4b:40:97:52:f2:ac:53:8b:cb:
8d:de:48:38:1e:46:ca:6b:12:f3:0b:24:71:7f:42:
7e:33:7e:f5:c1:96:58:c8:c7:e0:5b:28:ad:a9:9c:
d0:23:2e:da:48:d3:73:a5:d9:92:fb:bd:ed:e9:1b:
2e:c1:84:30:01:ff:07:f2:1c:29:26:cd:24:e9:48:
fa:ac:84:3a:2b:d6:eb:22:9e:32:fd:f5:84:72:81:
24:15:3f:72:a9:29:2c:a1:e5:6f:78:2d:2c:10:8a:
8e:dc:c0:57:87:7c:e6:c4:dd:45:11:27:1d:d5:c2:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:05:37:CC:98:40:E1:29:C2:D2:2E:45:1B:DE:8B:2D:EC:87:C2:AA
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a8:ed:48:3e:a7:f5:a2:33:14:e9:c0:ff:ea:bb:10:ab:02:
8a:f6:ba:42:da:db:de:95:47:25:68:16:65:30:46:9d:d8:43:
8f:2f:2a:a3:b4:2f:9e:4f:35:a2:cd:d9:98:85:c6:07:b7:2f:
32:fe:ea:29:09:8c:6e:4b:7d:9a:e0:7c:c5:75:68:c1:db:ee:
89:fd:83:93:8f:af:04:46:a8:3d:25:60:d2:0e:97:89:74:41:
df:3f:4f:02:64:bf:50:88:7f:ea:d2:21:6c:e6:60:6b:c5:40:
98:92:fa:00:92:11:e1:3f:d5:ca:f4:37:ad:86:9b:ce:81:cc:
4a:4f:d5:c3:6f:f2:36:9c:70:da:67:75:49:4d:13:58:64:8a:
69:76:9f:70:f8:60:a6:e6:cd:6b:86:27:69:97:95:d2:24:59:
57:b9:9a:78:f7:33:f6:7a:da:f3:80:a5:7c:9d:ac:96:05:59:
0e:f7:4c:e1:c0:35:27:5f:cb:44:82:f3:09:dc:e8:fa:de:aa:
a7:d0:a4:c5:fe:3d:6d:0c:12:41:66:66:93:d2:c6:53:89:29:
5e:35:0c:57:79:8e:9d:f8:f7:3a:80:a4:7a:1f:f0:32:66:97:
72:ef:e1:dc:d9:85:02:b2:57:f3:43:15:76:13:74:12:dd:81:
92:42:47:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:50:36 2026 by rpki-client