Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: anOAl8SbkzJzgSuOcqHOnYgE91IT4VpVPZVdifh3AqM=
Subject key identifier: F9:5E:B8:5C:D0:58:18:57:63:04:02:DC:EC:F0:6D:95:EB:1E:EC:63
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 019F81C233E4E2518346E645812B671A378F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 05D5
Signing time: Mon 20 Jul 2026 23:00:15 +0000
Manifest this update: Mon 20 Jul 2026 23:00:15 +0000
Manifest next update: Tue 21 Jul 2026 23:00:15 +0000
Files and hashes: 1: OTzOq7SDpRdksgl_zYPgtdePfLI.roa (hash: D6qdGzPzEfS+jEvVQOP5Z3G0DkCqmvwi/YwWrt4+qgc=)
2: Uxk1FwItIfltxuYz2o9bKLPYoqw.roa (hash: 00PfsX6vRTHIMTxBup/P+JPXMFRRdRTXxG1QyBpuPMY=)
3: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: 9z7Rd1tOM0HRABLsQoukL7lEwbdAsAwH5ruxqr/kT0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:c2:33:e4:e2:51:83:46:e6:45:81:2b:67:1a:37:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Jul 20 23:00:15 2026 GMT
Not After : Jul 21 23:00:15 2026 GMT
Subject: CN=f95eb85cd0581857630402dcecf06d95eb1eec63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4a:68:60:9c:db:be:fe:d7:b0:9e:10:ba:7e:
d8:41:96:5f:49:fe:cb:05:4e:96:67:2d:23:f7:64:
56:93:63:19:2e:2d:a6:29:c9:81:59:7a:b7:e6:8f:
24:1c:f9:af:68:3d:b3:66:1c:22:c8:65:a0:a6:3e:
e8:9e:ce:cd:66:f5:ac:6e:eb:24:87:6d:fd:40:80:
d0:1e:38:82:0c:8e:cd:a9:0e:74:eb:8b:99:52:11:
fe:73:ca:50:c1:aa:29:6d:7c:03:13:12:89:58:d2:
6d:e0:5f:b0:c2:b4:ed:64:c0:9b:79:56:25:f7:bf:
f7:93:8e:3f:c6:3f:95:9b:8a:b4:6f:3c:c8:5c:4f:
c2:4a:16:5b:b7:e5:a8:c9:f4:b7:19:d8:b0:c7:ec:
e5:41:fe:ce:1a:3b:44:de:8a:8b:be:60:2f:31:05:
56:fd:9c:c4:78:01:3f:4f:2d:83:df:ee:d4:df:bc:
e3:62:b1:02:af:ea:9d:5b:de:f7:61:53:a7:d9:2a:
40:ce:b1:f8:7f:e7:0e:b7:2a:3f:f1:08:cf:2d:f0:
4b:1b:4b:20:b1:1c:27:8b:95:c6:e6:d1:95:58:c8:
ec:50:4f:36:82:ae:31:e8:db:4d:f8:6a:73:3e:83:
35:db:3a:8f:25:e2:6f:82:0f:13:3e:f9:87:7a:a8:
88:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5E:B8:5C:D0:58:18:57:63:04:02:DC:EC:F0:6D:95:EB:1E:EC:63
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:55:d6:b2:33:06:3d:6c:e7:81:7a:10:09:27:3a:af:a4:b6:
0c:fd:15:21:23:a8:48:25:b4:a1:27:5b:24:ec:8e:bd:7d:f3:
a6:90:19:fb:35:cd:40:0d:a6:e3:54:11:89:2b:91:11:95:eb:
7b:da:01:ae:45:a5:ce:35:2f:ef:94:3e:a5:d1:0d:c2:73:da:
e0:e4:98:7f:f0:b9:63:c0:0f:63:75:3e:42:55:70:8b:0c:c1:
33:c8:bc:d8:bb:3f:d2:55:a6:f7:a1:cd:e0:19:95:4e:99:ef:
42:90:85:37:ab:68:e5:a0:4f:21:f6:7c:6b:c0:94:94:20:a8:
0d:e2:54:e1:b9:7d:86:3e:65:fd:df:ac:ce:96:ea:bb:af:4d:
18:3e:b0:bc:27:61:b0:26:2a:c6:cf:9b:2c:79:2a:58:c1:27:
84:a5:71:70:05:cb:c0:5e:8f:72:54:e3:eb:0a:81:13:1b:12:
2c:85:d3:ce:4a:44:e5:6f:87:b2:ad:84:3c:a8:20:db:41:ba:
33:9b:a3:fb:b7:14:be:78:40:bd:10:92:3e:dd:3e:fa:be:28:
b0:4c:22:8b:45:78:c5:88:65:7e:c3:79:20:cd:1a:34:b2:19:
a0:2a:9e:48:b9:32:0a:c0:35:1b:bc:f8:89:44:cf:c1:ca:73:
da:bb:a4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:58:18 2026 by rpki-client