Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
File: jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft (raw, json)
Hash identifier: hM4NJLh65UI45QUDQm53VUh/X7koOjA7Vubp37gGJ9E=
Subject key identifier: 8A:25:A6:76:7E:97:4C:BC:44:77:4B:A7:0A:AC:6D:6D:32:61:53:6B
Authority key identifier: 8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
Certificate issuer: /CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
Certificate serial: 019EB80F255AAA3334DA5A4FB96FAE46704E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
Manifest number: 0164
Signing time: Thu 11 Jun 2026 19:01:00 +0000
Manifest this update: Thu 11 Jun 2026 19:01:00 +0000
Manifest next update: Fri 12 Jun 2026 19:01:00 +0000
Files and hashes: 1: BW4bwVhXPDw4rzSQMevzcSQRKfs.roa (hash: Q1Pxxz9J0e4LzgZJhmknDWkBzY1nDRnnJuEtnZDIv8I=)
2: DC8uPJEFDADbc7eU0WC635sNG_4.roa (hash: l9TwArS14WF8qyEIjsmb3OXqr5AUTtyP0F2ywy5w4vY=)
3: jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl (hash: ubNINnm2VJKgTabPstoprAOZWAt3mEUuc/rsu/6Ftng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:25:5a:aa:33:34:da:5a:4f:b9:6f:ae:46:70:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
Validity
Not Before: Jun 11 19:01:00 2026 GMT
Not After : Jun 12 19:01:00 2026 GMT
Subject: CN=8a25a6767e974cbc44774ba70aac6d6d3261536b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:0c:b0:4d:1a:81:03:b2:37:a7:83:0b:ca:
6e:82:b9:6f:cd:22:cd:8a:cf:ee:a4:2e:c6:a3:73:
1c:27:b9:96:b7:2e:7f:67:a2:4c:fe:8a:17:96:74:
e0:f9:3a:53:aa:c8:c8:4c:ea:a8:89:2c:e7:57:6c:
fb:83:b7:b1:e0:68:fe:03:d8:91:a6:37:71:43:ed:
a1:79:7d:cb:2d:d7:7a:25:fe:66:6f:d4:0a:ed:aa:
3a:d6:32:10:b3:eb:e8:4d:db:f1:7d:20:8c:2f:f7:
23:ce:02:e4:47:6b:b3:e2:3a:df:1f:89:e6:ee:56:
20:ff:54:c2:1d:7f:4e:c2:54:36:2b:f6:34:04:56:
5d:f4:b9:76:d4:23:d4:9b:fd:d6:32:53:1b:8f:c7:
33:91:13:3f:fe:b8:aa:6f:03:bc:fb:8a:83:11:14:
85:14:dd:a6:05:02:c4:df:b8:ef:c6:26:55:10:eb:
2f:d3:01:23:2b:32:52:9d:0e:fc:54:3f:5c:ef:d6:
99:3e:cf:35:03:38:f2:07:c7:d1:9a:ea:fb:cd:a7:
01:35:bd:de:f7:ca:41:93:ca:a8:ff:05:1c:6e:fb:
a1:1f:6a:19:f0:10:17:79:82:74:b1:97:a2:4d:db:
e7:de:a5:21:a0:7e:03:18:c3:90:99:a1:fc:82:3c:
69:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:25:A6:76:7E:97:4C:BC:44:77:4B:A7:0A:AC:6D:6D:32:61:53:6B
X509v3 Authority Key Identifier:
keyid:8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3e:ae:12:24:78:ef:0a:36:fd:ce:c3:b0:b9:25:ef:66:01:
82:a0:29:4b:bf:ad:65:84:9c:61:95:95:6b:5a:46:df:91:d6:
e6:9c:c7:46:1d:ae:3e:ee:e5:fa:6a:0f:22:5c:20:15:3b:66:
0d:1e:a0:3c:52:32:ae:01:44:61:81:b1:97:75:69:21:4b:a8:
1c:47:f1:d8:af:de:ef:72:bb:f8:32:08:f7:dc:bc:53:d3:8b:
87:79:97:bf:8b:ec:dc:37:97:58:ce:3f:5f:61:2a:ad:4a:97:
bc:81:e2:5d:c0:80:40:f5:fd:4e:06:a5:85:71:90:82:fa:84:
2f:0f:83:a7:8c:b8:2b:d7:ed:23:5c:00:da:05:33:f7:c5:4e:
54:73:0b:40:e5:e3:f4:7a:f9:19:2a:19:c3:c4:18:67:64:f3:
54:1a:38:f2:39:11:0f:7d:b2:c9:b7:ed:2d:b7:3b:5d:7d:f5:
59:41:f0:c6:c7:db:a6:1b:df:57:b9:aa:50:52:ec:ec:80:57:
8c:c1:b3:6b:1c:e6:b1:65:38:50:7f:66:f2:0c:6d:ab:3a:72:
d8:af:c7:a5:88:72:45:df:d7:15:eb:8e:a3:b0:95:8a:ff:b7:
1a:3a:22:1d:42:bd:ba:78:e0:ea:fb:e6:46:f5:40:01:4d:2f:
cd:43:58:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:40:48 2026 by rpki-client