Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
File: jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft (raw, json)
Hash identifier: W3lEsDYHH0t3qWzeCR/4DqjBs/ADeNeZu4SbKrQTGq8=
Subject key identifier: B0:05:E4:57:96:62:B3:45:D5:4F:4A:17:30:D6:E0:BE:B9:08:A2:C3
Authority key identifier: 8C:30:D8:96:F2:C5:D0:77:0F:B8:D1:C9:14:0B:05:9F:19:FF:6C:E9
Certificate issuer: /CN=8c30d896f2c5d0770fb8d1c9140b059f19ff6ce9
Certificate serial: 01A180AB985CC6BCF3819F309BD46D88AA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
Manifest number: 02DC
Signing time: Wed 28 Oct 2026 04:01:31 +0000
Manifest this update: Wed 28 Oct 2026 04:01:31 +0000
Manifest next update: Thu 29 Oct 2026 04:01:31 +0000
Files and hashes: 1: gBhIlR2Vy9wZybBnJlISzDPwKZ8.roa (hash: 1heXPqmld/OvbyWoLXACStGWieBaqsBslRtSrtYIOUw=)
2: jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl (hash: HQLoPZ4jFowfUHWOpp+cXmImRj9NEw5pcesk7/zbb8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:98:5c:c6:bc:f3:81:9f:30:9b:d4:6d:88:aa:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c30d896f2c5d0770fb8d1c9140b059f19ff6ce9
Validity
Not Before: Oct 28 04:01:31 2026 GMT
Not After : Oct 29 04:01:31 2026 GMT
Subject: CN=b005e4579662b345d54f4a1730d6e0beb908a2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:5a:6d:63:01:62:39:f6:cc:90:fb:e9:bd:
33:d5:e1:4b:49:88:7b:54:22:71:3c:fc:20:eb:51:
a1:3d:7c:a2:fe:da:94:05:69:c3:c9:22:4e:6a:03:
a3:05:c8:1d:28:3c:93:5d:57:f5:ee:58:d6:2c:f8:
72:a6:8f:4b:80:81:7f:5c:00:82:2f:c8:a8:37:33:
15:6d:cc:ed:80:7c:eb:39:65:bf:94:06:4e:96:90:
56:64:0e:e0:55:43:5f:f8:2c:f2:7a:51:32:e0:9d:
1c:5f:bc:67:30:59:a4:22:85:64:f7:d0:16:8c:77:
4c:1f:13:81:b3:f4:aa:44:ca:0b:df:f9:3a:d5:da:
b3:4d:0b:61:82:8e:0e:99:38:53:1f:bc:65:11:86:
6a:60:d6:3c:d8:e4:aa:8f:2d:0b:1f:aa:b5:79:00:
fb:19:65:60:3d:d0:26:5d:5d:97:b2:0f:6d:75:c2:
d1:af:e2:59:70:50:4b:e3:b6:ac:9a:f3:7f:23:bf:
7c:d1:18:e6:a6:8d:fb:6a:8d:8a:f7:4f:d3:fe:8f:
5e:7c:73:34:4b:f0:db:65:ad:60:78:65:a0:fc:b5:
cf:97:11:14:ea:9c:83:a9:5f:88:bb:9a:65:46:f0:
bd:82:65:05:4b:a7:76:1a:6b:ce:ce:ef:fb:d7:64:
ce:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:05:E4:57:96:62:B3:45:D5:4F:4A:17:30:D6:E0:BE:B9:08:A2:C3
X509v3 Authority Key Identifier:
keyid:8C:30:D8:96:F2:C5:D0:77:0F:B8:D1:C9:14:0B:05:9F:19:FF:6C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDDYlvLF0HcPuNHJFAsFnxn_bOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d68f7b-2df7-4aff-bd16-7624dd6d7d30/1/jDDYlvLF0HcPuNHJFAsFnxn_bOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5b:0d:18:5b:95:39:e2:ae:2a:87:8d:c9:3e:04:53:1f:5f:
9d:da:50:43:49:eb:5b:10:a3:a9:f5:29:e1:ff:50:c9:05:92:
48:f2:04:c6:df:6d:23:31:b4:a1:04:83:08:a6:5d:f6:57:fb:
57:fb:c4:fd:22:84:60:58:71:ac:8f:00:ee:fa:75:bf:89:23:
c3:f1:54:1d:0d:99:c3:68:d3:e7:6f:55:8f:66:a6:15:a2:dc:
78:26:79:f1:8b:db:63:08:42:1d:32:58:d4:9c:84:a0:af:13:
e4:0b:56:1e:06:2a:12:f7:80:8d:24:6f:0f:9f:e5:8e:e6:77:
86:49:0b:b5:d2:eb:1e:b1:f7:1f:23:ab:cb:62:5b:7a:97:8e:
1c:ba:13:42:6a:4a:97:ed:11:e9:42:55:d0:76:94:3a:98:96:
4b:11:0a:9c:17:93:55:84:6f:6b:47:4b:51:aa:de:58:43:48:
fb:2f:60:e0:91:12:1c:fb:36:18:49:69:6d:44:6c:c6:18:79:
17:73:fa:7d:9f:b8:d1:6f:99:d8:25:a4:5e:a9:a5:61:23:23:
36:bb:eb:a2:75:a3:f6:4b:37:4c:12:61:c6:aa:51:6e:2d:7c:
1f:4e:6f:df:11:99:08:c5:9e:f5:78:5d:93:bd:c3:52:3e:6d:
5a:74:dc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:32:22 2026 by rpki-client