Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
File: jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft (raw, json)
Hash identifier: pGSNYw+byk3rFZ0ZrwmlJAvbqTYVucj5wP1/E86X8Oc=
Subject key identifier: 98:00:43:D5:5E:2E:16:5A:F0:C9:DD:92:3A:17:06:84:44:05:EE:75
Authority key identifier: 8C:30:D8:96:F2:C5:D0:77:0F:B8:D1:C9:14:0B:05:9F:19:FF:6C:E9
Certificate issuer: /CN=8c30d896f2c5d0770fb8d1c9140b059f19ff6ce9
Certificate serial: 01A1829A022708BFF8C59027B0B51A777731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
Manifest number: 02DD
Signing time: Wed 28 Oct 2026 13:01:33 +0000
Manifest this update: Wed 28 Oct 2026 13:01:33 +0000
Manifest next update: Thu 29 Oct 2026 13:01:33 +0000
Files and hashes: 1: gBhIlR2Vy9wZybBnJlISzDPwKZ8.roa (hash: 1heXPqmld/OvbyWoLXACStGWieBaqsBslRtSrtYIOUw=)
2: jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl (hash: Db7uRD1wnI2DqBSZJrHecDwsUr2QqT0w4ardefYAyiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:9a:02:27:08:bf:f8:c5:90:27:b0:b5:1a:77:77:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c30d896f2c5d0770fb8d1c9140b059f19ff6ce9
Validity
Not Before: Oct 28 13:01:33 2026 GMT
Not After : Oct 29 13:01:33 2026 GMT
Subject: CN=980043d55e2e165af0c9dd923a1706844405ee75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:55:03:a9:6d:7c:7e:eb:a9:d7:c0:5e:12:
df:2e:aa:36:1b:14:e6:75:fd:b0:5c:4a:64:a4:08:
7d:ce:98:7f:8a:d4:a5:c8:c3:d1:73:95:46:71:fe:
5b:78:07:8e:2d:6e:8f:fe:1c:d4:42:b2:dc:32:58:
c4:8a:90:93:8b:df:71:bc:ba:68:90:24:71:7c:87:
58:4f:06:61:82:df:72:b4:a6:29:f9:df:04:e5:62:
93:b1:42:8e:d3:ff:d2:3e:12:08:12:7a:36:7b:65:
70:da:85:70:fa:8d:01:f6:3a:eb:fe:fe:89:ac:99:
08:e5:af:ad:10:c7:c4:47:29:40:69:9e:24:42:67:
66:30:de:0a:b4:cd:73:f9:10:46:4f:fc:a4:98:f3:
4b:ce:b7:cf:f5:59:6e:d0:02:85:cb:eb:0b:80:bb:
a7:a5:0f:75:14:90:8c:2e:69:71:06:ac:58:a1:d5:
48:1f:be:3d:67:fc:bc:8b:bb:35:86:26:d9:13:3e:
44:58:e9:fe:a0:d8:43:6f:e8:50:80:22:d6:bb:77:
7d:53:f5:24:0b:49:d9:47:1e:6b:e9:f8:9b:05:49:
9e:a9:2f:be:ff:a0:e1:6a:9b:bb:67:ae:53:21:54:
13:a2:b8:4d:6e:05:80:8d:41:8b:5e:24:f9:9d:f4:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:00:43:D5:5E:2E:16:5A:F0:C9:DD:92:3A:17:06:84:44:05:EE:75
X509v3 Authority Key Identifier:
keyid:8C:30:D8:96:F2:C5:D0:77:0F:B8:D1:C9:14:0B:05:9F:19:FF:6C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f0:69:b6:7e:0d:31:2b:ff:34:20:3d:6f:16:7f:d1:80:df:
8b:21:42:b4:92:36:ed:98:fa:1b:f8:90:7e:a3:04:41:fc:a8:
e4:c7:7d:fa:26:c1:91:73:a4:89:e5:68:1a:e3:9d:3d:8e:3c:
ef:24:58:77:28:f2:90:ca:96:8d:ee:11:dc:63:96:01:91:20:
0f:73:ae:4c:05:ed:43:93:17:65:e4:20:6f:66:f4:c4:3d:10:
3f:92:59:ff:da:61:0a:90:77:d9:a2:43:e6:38:00:2c:16:eb:
4d:2e:7c:33:39:9a:37:95:db:2e:51:07:d5:8a:8f:2a:57:e0:
f7:95:63:97:0f:71:1d:d9:6c:e6:9f:45:48:b6:13:37:a8:f8:
ee:88:22:68:73:4a:89:28:63:52:38:7b:d8:cd:07:0e:21:dd:
de:bc:8f:f9:fe:aa:7a:98:45:0d:ac:d0:1c:2e:91:de:46:0b:
3c:16:59:c9:fd:13:ab:8c:80:f0:20:c7:b2:cd:83:b3:86:a2:
18:97:97:50:43:c8:2c:98:be:3d:d2:c8:fe:c3:0c:21:cb:ac:
44:40:25:97:f6:63:2b:09:7b:ab:58:c7:6c:55:6b:28:98:09:
3b:30:1e:a7:48:3b:cd:59:a4:0c:66:b4:fc:26:06:13:b9:bc:
ac:e7:02:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:29:32 2026 by rpki-client