Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
File: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft (raw, json)
Hash identifier: XGBuxeCfA4uoKWvoXJjYyeYmljtcgpqlwKisd/tPry8=
Subject key identifier: 6F:99:48:8A:F8:93:86:02:33:C4:A9:0B:FE:AC:C0:32:7A:F2:CD:C4
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial: 01A1822C15A77631E3907AC4DA510186966D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
Manifest number: 1995
Signing time: Wed 28 Oct 2026 11:01:29 +0000
Manifest this update: Wed 28 Oct 2026 11:01:29 +0000
Manifest next update: Thu 29 Oct 2026 11:01:29 +0000
Files and hashes: 1: 7HIOB7eoRAyG0ZPEZvvAbpswFrY.roa (hash: Es8A+6R1MLYeRZW+tk5RBf/7aXDiiAHZ+/2nLZtggb4=)
2: MCbnv8KJAY7dWm0UH6ulCMh-Zxc.roa (hash: 0xuvAxTJi/9kYRQK87s4orh7y9pLCa7vkuXPG3p7G24=)
3: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl (hash: nthBl4l27CnV2k79EBm2H9ZIAqFHaa2q5cOMaBg6v5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2c:15:a7:76:31:e3:90:7a:c4:da:51:01:86:96:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Validity
Not Before: Oct 28 11:01:29 2026 GMT
Not After : Oct 29 11:01:29 2026 GMT
Subject: CN=6f99488af893860233c4a90bfeacc0327af2cdc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d6:fe:d4:86:b3:e0:1b:8c:5c:bf:b6:3a:55:
1c:eb:34:83:61:5f:58:41:fc:9d:87:ee:48:2c:d5:
0e:e9:7b:67:26:58:cc:4f:24:46:a7:df:e9:d2:e7:
aa:94:c2:54:d8:24:c9:d6:61:04:2f:d1:65:91:6d:
e9:7e:28:6a:cd:77:d4:3b:2a:5b:53:29:f4:2f:b8:
8f:4a:a2:7a:95:89:43:d9:a9:ca:7b:b4:0a:45:0a:
13:c8:7c:a7:05:b5:f4:00:89:8f:e4:f7:af:af:19:
77:75:14:c3:d5:74:73:d1:23:ab:3d:28:74:b6:83:
6e:ea:12:cc:ca:2d:5d:88:99:ce:ef:ad:30:ba:07:
52:c7:76:ad:21:f1:15:9b:34:07:ca:16:0b:db:9a:
a5:f4:66:99:9f:1d:26:0f:7f:78:95:78:7d:6c:86:
27:dd:9b:09:c1:4a:c1:23:50:da:81:76:8b:74:22:
1b:ab:a8:32:8b:0b:c7:3b:cb:77:be:94:d9:60:48:
fa:9f:ee:6d:57:c2:38:76:f4:2b:77:08:6a:f4:d7:
05:75:f3:bd:23:97:e5:ab:d2:b6:cf:12:4b:e7:22:
e2:df:8c:b4:02:f2:62:0d:61:3b:9d:3e:12:32:ef:
3e:40:2d:f5:e4:73:a8:1f:7d:ad:6f:1e:86:1f:f3:
cd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:99:48:8A:F8:93:86:02:33:C4:A9:0B:FE:AC:C0:32:7A:F2:CD:C4
X509v3 Authority Key Identifier:
keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:bd:a7:8b:70:66:a2:2b:8f:33:00:95:5a:ac:1a:c1:1c:69:
7c:f2:bb:58:ec:a2:d1:ac:db:3d:58:cd:88:33:e5:e1:bf:b5:
61:3d:23:cb:f6:40:7a:17:8e:fb:83:77:4d:eb:c9:22:ff:56:
3e:8f:db:4c:ad:a5:69:3d:d1:bb:40:6f:81:48:ed:54:21:06:
0a:bb:9e:15:c3:6f:8b:21:a5:39:07:7b:80:34:2b:c8:bf:02:
3b:e6:74:9e:35:ed:ad:49:85:b0:85:7f:98:60:34:2b:8e:10:
0d:ad:f7:47:a0:52:a5:ed:66:af:2d:21:c9:13:fe:0e:a5:ec:
9a:71:22:aa:e4:a3:c6:c0:70:c2:d3:d2:1a:fa:15:40:4f:9a:
20:45:4b:b9:95:87:cd:7c:ea:2b:6f:94:f2:06:a5:a5:0c:2f:
f6:f0:fb:10:ee:04:09:c4:e5:bc:5b:b8:b7:bd:05:22:ef:77:
37:57:90:a2:d7:a5:f5:bb:c6:5a:80:f3:c0:df:ba:ba:67:bc:
e6:3b:24:ef:f1:21:76:13:99:4f:15:19:07:f7:e3:6e:29:77:
c3:83:56:98:e8:e6:f0:50:30:70:66:5c:58:65:ea:1e:ec:91:
32:cf:28:bc:03:3c:30:71:b1:29:44:de:27:de:7a:f5:0a:e3:
0a:8f:77:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:51:20 2026 by rpki-client