
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
File: jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft (raw, json)
Hash identifier: /sh8K6sHg1eO1FJ00ppzUF5XGQS4liAzzEnMrX/Wssc=
Subject key identifier: 66:27:9C:45:5B:FA:F0:C2:A3:73:BD:69:54:FE:9C:45:1D:0F:0E:0C
Authority key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
Certificate issuer: /CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Certificate serial: 019F9F5F7F083A8EA2AC0BD3BDD5E4FD225A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
Manifest number: 0D3F
Signing time: Sun 26 Jul 2026 17:01:03 +0000
Manifest this update: Sun 26 Jul 2026 17:01:03 +0000
Manifest next update: Mon 27 Jul 2026 17:01:03 +0000
Files and hashes: 1: 402WgFEvx-MCA7DFemnXw9EsHq0.roa (hash: I1gPCHaPoQ70/m4H48LGfcyzChehib1qKqxsJxfnGkA=)
2: jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl (hash: hROUMLlUs8jxdRRiDdOzzzMuiR7ulWR2uCaEI6s+2c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:7f:08:3a:8e:a2:ac:0b:d3:bd:d5:e4:fd:22:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Validity
Not Before: Jul 26 17:01:03 2026 GMT
Not After : Jul 27 17:01:03 2026 GMT
Subject: CN=66279c455bfaf0c2a373bd6954fe9c451d0f0e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f2:e3:2f:04:3a:8e:1e:f8:ad:5b:d1:1d:a6:
54:8a:e9:bb:4a:3d:a9:db:68:d2:e4:3c:b0:60:06:
ff:a8:2b:62:92:69:6e:78:57:35:b1:00:f3:69:8d:
21:ec:9a:0a:6f:04:8b:7d:e3:49:87:d7:1a:3b:c9:
65:1a:2b:b4:09:46:b9:c4:33:85:a6:0b:18:87:ba:
34:59:ea:86:bd:83:b0:15:40:d2:2a:d0:e4:75:df:
b0:5a:fd:b9:22:f4:28:cd:b9:52:bc:4f:6b:a5:41:
07:90:86:34:93:f9:bb:b3:8f:3d:87:6a:d9:b3:2d:
e6:be:8f:dc:41:1d:c6:c7:fc:76:62:e6:ad:30:49:
f9:15:64:9a:72:36:5d:a4:34:c6:6d:1f:25:26:49:
61:af:e9:3a:3d:1b:96:e9:92:33:55:2f:e6:01:f6:
af:fe:57:f2:2e:6c:3f:7f:24:9f:03:3b:13:46:b8:
08:ba:70:6b:22:a8:46:79:b8:7e:97:54:2a:2f:ba:
35:07:f4:60:38:52:91:a0:cd:10:2c:ab:53:be:39:
b6:6d:eb:e1:3d:1b:37:e9:65:cd:8d:bd:1b:38:b9:
fd:21:5a:58:5a:08:d9:e8:39:d2:e9:c7:20:f6:9d:
be:98:5d:5d:82:8a:7b:17:e7:59:d9:db:70:00:c9:
0b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:27:9C:45:5B:FA:F0:C2:A3:73:BD:69:54:FE:9C:45:1D:0F:0E:0C
X509v3 Authority Key Identifier:
keyid:8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:53:b4:15:28:a8:14:72:fb:cb:9c:d2:19:53:77:38:3b:0c:
41:4a:79:4b:a2:3d:11:c2:53:a6:9f:ed:06:12:22:63:25:1f:
8c:69:e1:f0:d1:4c:3d:89:c2:24:98:fc:6b:d7:63:3b:61:70:
24:3f:53:84:c0:0c:09:b9:c7:63:07:be:ce:bf:fa:4c:e0:87:
4c:e4:36:7b:48:7d:a1:9e:f5:a9:62:82:f4:99:d2:24:38:79:
c2:ef:70:3f:f3:b2:8a:bc:69:64:d2:9a:e0:fe:a9:32:96:fe:
58:a0:18:25:4e:48:0d:f3:c2:d5:49:91:f9:a9:38:3f:13:34:
96:c9:12:68:49:af:45:d4:a8:d6:3e:3d:d8:cf:4a:8c:b3:c2:
f8:1c:1a:70:8f:8c:cc:35:92:e2:c0:a6:16:23:54:df:12:1c:
2f:bb:28:e2:f5:4f:08:e2:d7:27:4c:0d:bd:62:8f:11:e3:25:
8e:d2:63:8a:80:da:47:53:a7:54:52:5f:bc:c8:48:1a:3d:01:
4f:f3:fd:77:fe:0c:82:4c:35:73:03:ab:56:6c:fd:19:d7:0e:
f7:14:06:0a:5c:d4:80:1d:ee:a2:15:fb:63:66:e2:56:c0:7e:
99:37:c5:b1:a2:34:34:9f:05:00:ef:f2:d4:d7:48:26:bb:bb:
d7:43:10:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fX38IOo6irAvTvdXk/SJaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjM2Y1MzhmOGEwMWVkZDBhNzZiMDA4YjRkNDVkNDFmNjc4
MjFiZDIwHhcNMjYwNzI2MTcwMTAzWhcNMjYwNzI3MTcwMTAzWjAzMTEwLwYDVQQD
Eyg2NjI3OWM0NTViZmFmMGMyYTM3M2JkNjk1NGZlOWM0NTFkMGYwZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPLjLwQ6jh74rVvRHaZUium7Sj2p
22jS5DywYAb/qCtikmlueFc1sQDzaY0h7JoKbwSLfeNJh9caO8llGiu0CUa5xDOF
pgsYh7o0WeqGvYOwFUDSKtDkdd+wWv25IvQozblSvE9rpUEHkIY0k/m7s489h2rZ
sy3mvo/cQR3Gx/x2YuatMEn5FWSacjZdpDTGbR8lJklhr+k6PRuW6ZIzVS/mAfav
/lfyLmw/fySfAzsTRrgIunBrIqhGebh+l1QqL7o1B/RgOFKRoM0QLKtTvjm2bevh
PRs36WXNjb0bOLn9IVpYWgjZ6DnS6ccg9p2+mF1dgop7F+dZ2dtwAMkLkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYnnEVb+vDCo3O9aVT+nEUdDw4MMB8GA1UdIwQY
MBaAFIw/U4+KAe3Qp2sAi01F1B9nghvSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hMTg4MmUtMGM0Yy00Njk2LTg4NWQt
Y2Q2YTUwMzE2M2Q2LzEvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hMTg4MmUtMGM0Yy00Njk2LTg4NWQtY2Q2YTUwMzE2M2Q2
LzEvakQ5VGo0b0I3ZENuYXdDTFRVWFVIMmVDRzlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1O0FSio
FHL7y5zSGVN3ODsMQUp5S6I9EcJTpp/tBhIiYyUfjGnh8NFMPYnCJJj8a9djO2Fw
JD9ThMAMCbnHYwe+zr/6TOCHTOQ2e0h9oZ71qWKC9JnSJDh5wu9wP/OyirxpZNKa
4P6pMpb+WKAYJU5IDfPC1UmR+ak4PxM0lskSaEmvRdSo1j492M9KjLPC+BwacI+M
zDWS4sCmFiNU3xIcL7so4vVPCOLXJ0wNvWKPEeMljtJjioDaR1OnVFJfvMhIGj0B
T/P9d/4Mgkw1cwOrVmz9GdcO9xQGClzUgB3uohX7Y2biVsB+mTfFsaI0NJ8FAO/y
1NdIJru710MQHQ==
-----END CERTIFICATE-----
Generated at Sun Jul 26 22:29:31 2026 by rpki-client