Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
File: jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft (raw, json)
Hash identifier: OoyOFhshiesjD4wbYXxFt8kI9yvF0w6PSe53V3K5wVU=
Subject key identifier: 29:CA:F4:5A:28:D8:FE:EE:3B:04:34:FC:26:B3:A8:19:DD:E6:6E:D9
Authority key identifier: 8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
Certificate issuer: /CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
Certificate serial: 019FA1BB35E3AC4D37537A8B59654780339E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
Manifest number: 01DD
Signing time: Mon 27 Jul 2026 04:00:28 +0000
Manifest this update: Mon 27 Jul 2026 04:00:28 +0000
Manifest next update: Tue 28 Jul 2026 04:00:28 +0000
Files and hashes: 1: BW4bwVhXPDw4rzSQMevzcSQRKfs.roa (hash: Q1Pxxz9J0e4LzgZJhmknDWkBzY1nDRnnJuEtnZDIv8I=)
2: DC8uPJEFDADbc7eU0WC635sNG_4.roa (hash: l9TwArS14WF8qyEIjsmb3OXqr5AUTtyP0F2ywy5w4vY=)
3: jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl (hash: Szse+1kWOmWs+0GYtASDZNc3B5XJTU+5RA8E1dAQ3Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:35:e3:ac:4d:37:53:7a:8b:59:65:47:80:33:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
Validity
Not Before: Jul 27 04:00:28 2026 GMT
Not After : Jul 28 04:00:28 2026 GMT
Subject: CN=29caf45a28d8feee3b0434fc26b3a819dde66ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:ac:f2:e9:ea:fa:14:98:e9:e6:10:a5:e9:
37:a2:33:b5:6c:73:96:f2:89:b2:60:20:3f:b4:57:
4e:95:ca:09:e2:80:05:44:3b:f2:5b:0a:36:fb:53:
aa:3a:f6:6d:5e:6e:62:26:40:48:f0:ad:e0:d2:fe:
fd:c0:6a:b3:58:31:90:74:c7:99:1e:ec:9b:a6:06:
8c:d4:d4:8d:4c:82:06:7d:ca:7a:00:b9:f6:3c:05:
c3:62:4f:a8:59:fe:12:d9:95:a0:37:00:94:8d:5a:
5c:2e:a4:02:6b:94:cc:a4:3d:78:bc:91:c8:4e:f2:
39:81:b3:6c:71:a1:b1:bd:38:d5:85:c8:f5:0d:7a:
30:78:a9:ef:16:05:9c:56:ee:e0:c6:73:3c:b4:19:
e3:05:b2:fb:6c:cc:e6:7b:61:98:54:f5:14:6a:a3:
5b:d4:e9:5c:36:73:2a:de:fd:5c:2f:86:eb:28:c5:
5d:1d:06:98:e8:ca:7e:b5:0d:8c:8c:d2:24:42:eb:
f2:49:f3:ad:6b:5e:a7:96:b5:54:43:93:bd:08:81:
e2:f6:b1:14:8c:ab:5d:16:d8:e6:93:ce:a1:d6:03:
c6:c9:3a:b8:04:ea:ed:e9:0a:1b:d5:71:53:e9:8b:
1c:d8:c4:94:6d:cd:0a:b3:92:19:e7:25:9b:5c:e4:
1a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CA:F4:5A:28:D8:FE:EE:3B:04:34:FC:26:B3:A8:19:DD:E6:6E:D9
X509v3 Authority Key Identifier:
keyid:8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:55:8d:5e:a3:db:a5:c6:3a:61:1b:7f:04:7f:d7:eb:d1:9a:
32:29:aa:78:73:db:39:6c:4d:30:d4:25:a6:9e:fa:19:f4:cb:
f0:fc:ed:70:97:c7:e1:6e:64:31:af:cc:00:5e:d9:2f:68:fb:
38:5e:61:b3:dc:7a:81:92:cb:55:de:3f:51:ce:73:4b:56:51:
01:12:95:05:3c:53:a4:67:c0:0c:d5:37:fe:36:87:c9:19:55:
32:4e:dd:f4:e7:a8:3c:8e:e9:5b:70:7b:1f:b0:cd:de:c3:bb:
81:45:aa:12:f0:66:cb:a6:b8:1f:c0:0b:4a:e4:b1:7a:43:77:
05:1a:15:13:3c:92:a4:92:9a:a1:fb:24:cc:95:d1:eb:a0:eb:
8f:b8:54:e2:b7:74:0c:9e:e1:a4:03:5f:0b:d6:81:18:1c:66:
a6:e8:e8:9b:e4:70:1c:d1:26:41:2c:76:55:23:1a:fe:90:b0:
f5:2b:9a:5a:6c:c1:86:11:02:2b:4a:5e:02:fa:c2:18:16:80:
83:bc:4f:f3:e0:ed:e5:f8:64:d1:24:05:3a:53:64:96:01:70:
fa:d7:c4:6d:9f:8c:8b:b2:db:61:f7:4d:92:1f:fe:77:ff:bb:
11:f1:51:3d:d3:e2:82:a9:8f:22:9a:0d:54:64:ca:6c:2d:d2:
60:9a:84:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:46:41 2026 by rpki-client