Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
File: 0jtkd-HIT1KQfNYMY-qD715Kx4I.mft (raw, json)
Hash identifier: n+F0yO1b1MFAyI/EERDi3mGl1udAfr76uEDPhgqKz/Q=
Subject key identifier: BF:AB:A0:D8:2D:8D:9D:A7:A2:FA:B0:F8:F1:62:D3:94:47:68:ED:26
Authority key identifier: D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
Certificate issuer: /CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Certificate serial: 01A001DD558617E2B268CE44E69A40FC815D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
Manifest number: 0D4D
Signing time: Fri 14 Aug 2026 20:01:17 +0000
Manifest this update: Fri 14 Aug 2026 20:01:17 +0000
Manifest next update: Sat 15 Aug 2026 20:01:17 +0000
Files and hashes: 1: 0jtkd-HIT1KQfNYMY-qD715Kx4I.crl (hash: iLYbjo+nqRlQ/S5EtQxuZHgOYRtDFUTlr7BPUvNRtyQ=)
2: u74Y2DtNYCrFLzeUZsDA2ek1RJQ.roa (hash: v4D4CGF7IK7jFQI/k7wDX6FIFSnqg7cuKSN4Jo5u5mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:55:86:17:e2:b2:68:ce:44:e6:9a:40:fc:81:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Validity
Not Before: Aug 14 20:01:17 2026 GMT
Not After : Aug 15 20:01:17 2026 GMT
Subject: CN=bfaba0d82d8d9da7a2fab0f8f162d3944768ed26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:96:2e:4f:b1:2a:09:ef:12:b4:64:35:87:
4b:4d:24:f2:5b:80:a4:fe:7a:e3:23:9c:d0:f8:b6:
91:33:27:c0:4b:7c:cf:0f:04:c7:d4:8a:f3:e3:79:
ff:01:66:90:cb:bb:96:d7:ed:d3:6d:fb:aa:41:dc:
69:73:2f:dd:c9:8c:a4:5f:10:0f:36:87:ee:db:c9:
eb:4c:34:d2:8c:23:23:b2:c5:8b:3e:1c:c0:2f:50:
bb:0e:01:78:e0:81:39:56:23:bd:a0:ce:14:5c:ed:
1a:99:b6:fd:a4:70:db:2a:a5:d0:54:5f:ea:bc:bc:
fd:8d:17:3e:d0:60:bb:c4:28:3a:e6:36:4b:4f:cb:
5e:f0:a9:be:2a:08:7c:90:0a:70:51:c2:52:3c:2a:
51:0f:db:55:9b:3f:0c:bc:3c:f1:89:69:0b:f8:69:
ca:ff:ac:1a:ff:0a:65:66:22:6c:0d:6e:9c:bd:29:
33:f2:62:9e:75:74:31:46:18:05:ce:6e:4a:3f:12:
e5:a8:1d:1d:10:76:c1:83:1e:14:d6:a3:85:ec:80:
30:49:95:ba:b1:0b:ed:5d:98:7c:fd:1b:86:1c:dc:
b8:8b:15:86:b7:90:07:cd:dd:7b:c5:26:cc:a9:e8:
e3:c5:31:a2:5e:77:5e:63:3e:89:e1:a4:48:5e:0f:
d4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AB:A0:D8:2D:8D:9D:A7:A2:FA:B0:F8:F1:62:D3:94:47:68:ED:26
X509v3 Authority Key Identifier:
keyid:D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c4:01:c5:58:31:bd:df:87:18:4b:cd:ea:36:17:19:47:31:
f6:d4:05:9e:ca:dd:32:f6:a3:14:59:3b:06:dc:a5:7f:f0:b2:
cb:31:37:a5:2b:25:52:a9:59:8f:57:cf:e1:09:cf:b9:78:01:
df:25:d7:85:25:b9:1a:af:b0:9c:ee:00:f3:54:bf:3c:42:7c:
6a:b1:8e:8a:99:42:e6:5f:c1:fa:3d:44:0d:56:29:90:50:c0:
c0:bf:c2:f2:29:67:49:46:1f:3b:89:6e:0d:cc:f2:52:b9:27:
ef:68:14:5b:3d:c4:e8:4f:38:ac:4e:8f:8f:fc:23:42:4d:f5:
bb:37:a1:b3:a1:3c:a0:9b:c6:37:8e:8e:64:a4:fe:34:e1:ed:
e6:08:7c:ad:13:85:78:52:8e:41:d8:eb:47:7d:aa:05:93:73:
11:9a:fd:02:a5:60:9a:81:c2:ad:af:38:f5:62:50:d8:01:f2:
4c:8e:f6:9a:c0:3f:f1:02:12:d8:34:2b:79:ed:e5:78:68:6d:
a9:33:43:a5:ec:70:ea:65:11:77:72:6e:ac:17:c7:cf:f9:a3:
44:12:95:f5:66:e6:e0:e6:9d:24:1b:74:4a:05:24:f8:3d:1b:
f0:d7:95:d9:0b:82:5c:3e:5c:33:9a:36:dd:8c:ee:ff:fb:e5:
31:df:b8:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3VWGF+KyaM5E5ppA/IFdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyM2I2NDc3ZTFjODRmNTI5MDdjZDYwYzYzZWE4M2VmNWU0
YWM3ODIwHhcNMjYwODE0MjAwMTE3WhcNMjYwODE1MjAwMTE3WjAzMTEwLwYDVQQD
EyhiZmFiYTBkODJkOGQ5ZGE3YTJmYWIwZjhmMTYyZDM5NDQ3NjhlZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVGWLk+xKgnvErRkNYdLTSTyW4Ck
/nrjI5zQ+LaRMyfAS3zPDwTH1Irz43n/AWaQy7uW1+3TbfuqQdxpcy/dyYykXxAP
Nofu28nrTDTSjCMjssWLPhzAL1C7DgF44IE5ViO9oM4UXO0ambb9pHDbKqXQVF/q
vLz9jRc+0GC7xCg65jZLT8te8Km+Kgh8kApwUcJSPCpRD9tVmz8MvDzxiWkL+GnK
/6wa/wplZiJsDW6cvSkz8mKedXQxRhgFzm5KPxLlqB0dEHbBgx4U1qOF7IAwSZW6
sQvtXZh8/RuGHNy4ixWGt5AHzd17xSbMqejjxTGiXndeYz6J4aRIXg/UuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+roNgtjZ2novqw+PFi05RHaO0mMB8GA1UdIwQY
MBaAFNI7ZHfhyE9SkHzWDGPqg+9eSseCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGp0a2QtSElUMUtRZk5ZTVktcUQ3MTVLeDRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80NTU5ZmQtYjQwOS00NzljLWE0MGYt
MjI1NTU4NWRkZWNiLzEvMGp0a2QtSElUMUtRZk5ZTVktcUQ3MTVLeDRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS80NTU5ZmQtYjQwOS00NzljLWE0MGYtMjI1NTU4NWRkZWNi
LzEvMGp0a2QtSElUMUtRZk5ZTVktcUQ3MTVLeDRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8QBxVgx
vd+HGEvN6jYXGUcx9tQFnsrdMvajFFk7Btylf/CyyzE3pSslUqlZj1fP4QnPuXgB
3yXXhSW5Gq+wnO4A81S/PEJ8arGOiplC5l/B+j1EDVYpkFDAwL/C8ilnSUYfO4lu
DczyUrkn72gUWz3E6E84rE6Pj/wjQk31uzehs6E8oJvGN46OZKT+NOHt5gh8rROF
eFKOQdjrR32qBZNzEZr9AqVgmoHCra849WJQ2AHyTI72msA/8QIS2DQree3leGht
qTNDpexw6mURd3JurBfHz/mjRBKV9Wbm4OadJBt0SgUk+D0b8NeV2QuCXD5cM5o2
3Yzu//vlMd+49g==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:21 2026 by rpki-client