Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
File: jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json)
Hash identifier: Mt206N8Dd87m6YAgwzI2klhcYgG4u5h5D/fNmcMvTzY=
Subject key identifier: 51:9D:74:C8:19:3F:31:92:65:40:90:8D:F1:09:3C:64:8E:47:B5:4B
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial: 01A17883C3343D53FE7A66E5AA765E92F6C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
Manifest number: 1AC5
Signing time: Mon 26 Oct 2026 14:01:03 +0000
Manifest this update: Mon 26 Oct 2026 14:01:03 +0000
Manifest next update: Tue 27 Oct 2026 14:01:03 +0000
Files and hashes: 1: D8C_fac31Ie3Mlmm0iY26zsUpPQ.roa (hash: aXM4Hau7o88WQaKHyho1aeWalezo3Xwt0vRqN6L/8TQ=)
2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: UKYHyIXJ6wui0PBh5LyvzcZY6Tu6D1igfd6NCZfnAuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:83:c3:34:3d:53:fe:7a:66:e5:aa:76:5e:92:f6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Validity
Not Before: Oct 26 14:01:03 2026 GMT
Not After : Oct 27 14:01:03 2026 GMT
Subject: CN=519d74c8193f31926540908df1093c648e47b54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:8e:a3:8f:9b:e0:7b:27:4b:bd:81:ec:59:
6e:2a:0b:f4:ac:8f:3c:e5:d6:58:ac:21:50:49:d4:
37:7e:55:39:2e:ef:68:f5:6a:47:11:3e:a0:9f:f5:
73:c8:05:a8:56:53:e6:a8:31:ec:ab:d3:63:36:44:
24:af:a3:f1:a9:1f:b2:e8:98:9b:04:ca:77:e0:52:
a4:21:26:68:31:cd:64:2f:c7:df:53:8c:ef:be:66:
40:78:69:76:b8:88:a0:dc:f2:0c:90:ec:d6:e2:19:
7e:fa:12:d3:7d:cb:7b:c2:8d:b5:88:87:72:dd:95:
c6:2c:0e:55:5b:bf:d8:39:0a:d2:66:d9:57:c1:60:
35:6c:bb:a4:22:c5:68:9c:93:f7:b2:19:72:5e:5f:
1e:b4:96:58:ae:1a:16:43:ec:0b:ad:f2:25:f1:b9:
97:ea:3b:b2:c9:d8:ed:36:c3:55:60:71:d8:31:c5:
37:b6:2f:fa:04:27:1c:c7:eb:3a:59:c5:40:b6:f8:
41:98:30:3d:7c:ab:fe:64:52:0f:37:b9:96:9a:2b:
f4:b6:3f:e5:94:b2:3c:0f:8d:17:55:d5:39:e1:d1:
54:ef:8f:55:f1:a6:8f:ff:ec:fb:72:90:38:47:a4:
f3:90:03:a1:d0:fb:06:d1:25:e3:f9:c6:5a:15:29:
fb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9D:74:C8:19:3F:31:92:65:40:90:8D:F1:09:3C:64:8E:47:B5:4B
X509v3 Authority Key Identifier:
keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a1:fb:d7:6c:73:56:4e:d4:08:2a:d9:55:6f:56:e9:d0:77:
c6:52:53:51:9f:68:a2:36:b8:db:1e:66:79:c8:3f:79:1d:ca:
95:f0:77:4d:35:65:05:0a:f3:88:ef:24:ce:bb:51:d9:b7:8a:
14:e7:00:a2:1b:c1:c8:89:7f:ee:42:d3:91:0a:5d:77:05:78:
54:fb:8c:2e:aa:d5:05:34:52:71:be:fa:78:56:8f:d9:44:96:
19:9d:73:4a:9c:54:24:1d:b2:3a:13:5c:02:d2:30:6f:63:49:
35:b5:14:72:b9:b5:fd:8e:f9:fe:90:96:62:94:d4:20:23:72:
d6:06:9c:ee:84:57:bb:00:00:5a:d4:64:cb:79:19:1a:90:b9:
09:f8:63:9b:9c:2f:c7:d7:0c:1e:b7:38:8a:b8:88:36:e2:0e:
46:bb:81:62:ed:16:1a:2a:0c:af:1f:7f:0a:67:ae:c3:07:cd:
f4:90:15:4e:8f:3e:d9:4f:6e:3f:c3:3b:0e:9c:04:74:61:cd:
50:9d:a0:05:a1:00:c7:69:c1:ea:10:90:6e:39:2d:41:72:95:
b8:80:b3:59:05:47:5f:13:80:d8:38:cf:4e:69:4c:d7:fb:54:
0d:08:a8:34:ab:46:fb:9c:8b:3a:fb:c2:0b:9f:a9:5b:8b:d6:
08:25:ae:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:27:34 2026 by rpki-client