Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
File: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft (raw, json)
Hash identifier: tUVRf+tfbeBagwT4/D8QD2tQFANz9Qz4bNyClL9RqGU=
Subject key identifier: 66:E5:5F:B1:4F:5A:59:EC:07:BA:FC:45:24:99:8D:EC:40:64:E9:35
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial: 01A1841A686B57D5FE8CC9207FB412ED9B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
Manifest number: 1996
Signing time: Wed 28 Oct 2026 20:01:25 +0000
Manifest this update: Wed 28 Oct 2026 20:01:25 +0000
Manifest next update: Thu 29 Oct 2026 20:01:25 +0000
Files and hashes: 1: 7HIOB7eoRAyG0ZPEZvvAbpswFrY.roa (hash: Es8A+6R1MLYeRZW+tk5RBf/7aXDiiAHZ+/2nLZtggb4=)
2: MCbnv8KJAY7dWm0UH6ulCMh-Zxc.roa (hash: 0xuvAxTJi/9kYRQK87s4orh7y9pLCa7vkuXPG3p7G24=)
3: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl (hash: ta4m6ST9kccSWEFwdc5TJwm+xMkgqIpnOtc7NAcvxYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:1a:68:6b:57:d5:fe:8c:c9:20:7f:b4:12:ed:9b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Validity
Not Before: Oct 28 20:01:25 2026 GMT
Not After : Oct 29 20:01:25 2026 GMT
Subject: CN=66e55fb14f5a59ec07bafc4524998dec4064e935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:96:f7:78:02:bb:cf:17:51:4d:66:a1:c5:
06:0d:82:be:30:4f:ce:7e:61:ae:1f:70:ec:c1:63:
11:4d:7f:b9:22:de:b8:36:06:b4:b8:a4:da:9e:86:
3d:eb:c8:2f:f1:81:9a:06:81:00:6e:45:5a:a1:dc:
fd:9f:81:8d:18:88:17:ef:45:47:11:f1:bd:98:40:
06:d9:3c:2c:74:63:e0:4b:48:8b:fd:71:ad:5e:be:
e4:58:42:a0:35:9d:8f:28:e8:46:40:5e:74:03:5c:
fe:ea:d8:0b:43:34:42:5f:d0:9b:e6:12:aa:b2:1b:
41:e1:74:1e:62:6b:b7:04:0e:53:25:d9:23:f4:dc:
77:13:23:be:34:8e:ef:ba:d9:dd:7c:e4:74:af:9e:
dc:be:09:01:f9:58:31:3e:c5:a2:6d:8f:c0:1c:3e:
95:79:e5:76:26:61:e8:84:ce:81:d2:29:32:1b:42:
22:68:cd:50:05:42:b1:b9:88:50:5d:8a:9a:9c:5a:
bc:51:14:f1:6a:73:04:74:55:71:a9:60:a3:24:a8:
5f:81:98:86:71:ea:02:b7:51:d9:c8:9c:6c:b3:51:
b9:50:b8:43:09:1f:3b:a3:bc:38:46:a1:02:d2:d3:
62:81:f7:d1:0b:89:c5:6c:bb:b1:50:54:05:95:04:
6b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E5:5F:B1:4F:5A:59:EC:07:BA:FC:45:24:99:8D:EC:40:64:E9:35
X509v3 Authority Key Identifier:
keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:94:17:71:db:07:ae:ba:26:c9:09:c4:32:59:17:b6:38:3d:
2f:dd:64:de:73:56:cc:6c:22:0b:41:ae:7f:e8:95:7c:d0:db:
ac:77:9b:be:9b:b7:1b:3d:97:2e:28:05:7d:15:c0:65:ef:8a:
e9:6c:a5:d6:29:5f:09:18:ba:fa:55:8f:97:cd:9d:d1:8b:71:
04:19:a3:8f:29:fb:aa:18:94:fb:9f:ab:c2:45:10:bb:d7:f3:
be:98:eb:7c:ed:51:f3:08:73:b6:76:39:b5:fa:79:e3:27:38:
3c:c0:0b:9c:65:71:fb:22:4e:f5:d9:b8:8b:b8:60:bf:01:42:
03:7a:60:42:d0:e4:f3:6a:18:86:97:68:91:ea:60:40:f0:c6:
71:71:79:0b:f6:43:3f:56:23:8b:9e:7e:00:b4:7c:e8:a2:c2:
fa:39:24:3b:4b:00:ef:1e:36:dd:91:5c:12:4b:74:48:d3:4b:
2d:f4:8d:24:15:90:88:f3:37:9b:a4:bd:da:8f:c9:db:06:5c:
ae:59:48:a5:3d:48:bb:1e:d7:a9:a7:e0:26:0a:81:d8:f5:68:
67:dc:3d:3e:72:4b:ca:4b:6a:76:dc:bd:75:39:b0:74:4f:04:
2b:f5:d5:19:50:a2:ac:f8:0d:3d:0d:08:ee:23:84:48:00:98:
c0:3c:c3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:14:14 2026 by rpki-client