Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
File: jTDnckXCFacL5O9X0DvR2NTbWJg.mft (raw, json)
Hash identifier: /b72fnbWCQroKp6lLj9Oslc+8oc+YEpKXtKk2DhWrV0=
Subject key identifier: F0:42:38:FE:97:6C:50:1B:76:FD:B5:67:0C:AC:D5:B6:A3:8A:AF:56
Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
Certificate issuer: /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Certificate serial: 01A0423C1D005A8538956E7838F9A8A54463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
Manifest number: 0542
Signing time: Thu 27 Aug 2026 08:00:30 +0000
Manifest this update: Thu 27 Aug 2026 08:00:30 +0000
Manifest next update: Fri 28 Aug 2026 08:00:30 +0000
Files and hashes: 1: E0AgYtmqvfWsCtuIwOtUo5wvcgU.roa (hash: w2ZEYMbSnl1r9XT320uy9sGbUhpOA37NS5yHBqC4/Fs=)
2: jTDnckXCFacL5O9X0DvR2NTbWJg.crl (hash: Js1NbBtWsl0JHdPIjFLfpFX062tQfvRLnbufIK/AylM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:3c:1d:00:5a:85:38:95:6e:78:38:f9:a8:a5:44:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Validity
Not Before: Aug 27 08:00:30 2026 GMT
Not After : Aug 28 08:00:30 2026 GMT
Subject: CN=f04238fe976c501b76fdb5670cacd5b6a38aaf56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:84:19:93:2c:ea:68:28:15:68:ea:10:c9:
1e:f1:cd:f8:72:9b:35:c4:3b:78:b8:19:65:73:73:
4c:cc:85:bb:cc:e6:12:37:80:81:c0:27:4e:76:df:
24:6f:5c:c5:ab:89:43:37:a4:62:a7:12:68:d2:55:
45:14:3e:f5:3d:2a:b1:39:f1:d4:52:66:75:65:34:
8f:6b:81:95:62:ff:9b:0d:04:ca:7f:5f:db:7b:84:
72:eb:22:4f:98:e0:dc:36:43:cf:e0:03:1c:f1:66:
85:c7:85:2c:3b:61:14:ae:26:14:69:ca:9c:0b:fd:
24:d1:3b:48:06:d9:c1:22:81:dc:51:17:8c:39:2a:
99:c8:dd:4d:77:03:5d:0a:7a:c6:ce:07:95:d2:24:
0e:f9:91:cf:cc:5f:09:d5:4f:fe:9b:38:06:73:a2:
28:fd:38:32:8d:24:39:ee:f3:30:53:aa:6c:06:2a:
bc:0d:c7:01:e0:88:ef:65:0d:88:33:99:c4:1e:34:
07:8e:d2:28:80:9a:de:00:de:0b:fe:2c:8e:63:c2:
de:9d:d6:b6:06:13:99:88:e3:e5:9d:fc:05:8c:b8:
63:2f:d5:c9:7d:ad:0a:21:af:86:d0:c3:c7:57:a1:
db:53:3a:da:d2:9f:e6:a6:d3:6b:53:d9:9c:aa:78:
72:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:42:38:FE:97:6C:50:1B:76:FD:B5:67:0C:AC:D5:B6:A3:8A:AF:56
X509v3 Authority Key Identifier:
keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:cd:b9:08:91:a3:52:8e:54:bf:8e:37:e0:91:ba:d2:22:05:
ad:0d:58:6a:9a:15:07:a9:f6:76:91:c4:e6:9e:66:1f:3e:58:
75:4d:70:cd:1d:96:70:ba:cc:ab:f2:0b:bf:3f:a6:eb:4a:de:
4e:64:fc:fd:57:f3:3c:21:03:77:b1:d4:25:55:59:ae:10:e2:
df:0a:d1:40:95:13:64:c8:71:20:b5:8d:f6:78:81:c4:b8:1c:
9c:62:7e:cc:f4:32:2e:6f:db:c8:2a:a4:f8:4a:2a:e0:2f:c3:
3e:77:f7:70:07:13:9d:05:59:eb:1a:26:9c:df:11:67:66:56:
80:9e:f3:13:8d:46:c2:9f:4a:f2:a2:ee:e7:8b:f2:2a:b1:d2:
4b:47:c6:c3:2a:b2:5d:bc:eb:b4:aa:bf:8b:bb:d7:42:ee:37:
cc:bd:20:0b:a9:ad:6a:fd:f7:e9:43:49:92:f6:8b:a8:ae:6c:
61:d4:d0:88:05:32:d4:91:fc:6a:62:60:72:e5:a7:10:0d:05:
20:44:37:17:39:1e:3f:40:05:1f:61:31:03:90:35:d2:78:fc:
fd:b4:8f:a2:80:5b:f0:41:6a:83:51:85:93:19:df:d2:77:9c:
4a:a1:33:1d:4e:4e:e7:ac:89:d1:0e:18:ae:04:23:5b:81:bd:
9a:78:0e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 13:16:55 2026 by rpki-client