Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
File: jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json)
Hash identifier: MW932CDpuvGoPLKyXd3hu4RSYKwSFaQ+4+7TrqQBFT4=
Subject key identifier: 28:5B:F3:AA:08:81:74:A3:5F:AB:E7:2E:AD:39:4A:BC:A9:1E:37:31
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial: 019EB5B283AA43952F3236D66933BA2CA4C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 08:00:35 +0000
Manifest this update: Thu 11 Jun 2026 08:00:35 +0000
Manifest next update: Fri 12 Jun 2026 08:00:35 +0000
Files and hashes: 1: D8C_fac31Ie3Mlmm0iY26zsUpPQ.roa (hash: aXM4Hau7o88WQaKHyho1aeWalezo3Xwt0vRqN6L/8TQ=)
2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: pCuTeBnXAzFpVDELGpGL0hYbCX3SSOJ02JP/Kh/+Q8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:b2:83:aa:43:95:2f:32:36:d6:69:33:ba:2c:a4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Validity
Not Before: Jun 11 08:00:35 2026 GMT
Not After : Jun 12 08:00:35 2026 GMT
Subject: CN=285bf3aa088174a35fabe72ead394abca91e3731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:12:dd:f8:79:46:4b:bd:ab:b4:60:b1:91:
6c:3f:59:25:8b:0a:45:5f:5d:a0:fa:b4:69:7b:c7:
84:b9:05:63:40:8a:04:46:67:75:68:37:fa:aa:d5:
9b:86:9e:ea:7d:b1:0d:a3:99:87:14:37:a5:92:83:
b5:7d:1f:00:08:60:8b:07:fd:da:15:2d:8f:c3:18:
7a:15:18:47:b0:93:84:80:4b:de:f3:a5:41:e8:8d:
1d:e4:0d:59:3b:55:e4:d6:22:ac:c3:0c:51:90:38:
ce:87:98:fa:29:0d:d9:76:d6:09:62:32:1e:cd:61:
72:89:ef:a5:a0:6f:35:75:d0:8a:28:35:bb:d8:a5:
8d:74:e6:cd:7d:2b:d1:c8:5e:eb:83:34:d7:e0:98:
4a:1b:b8:82:eb:d8:46:33:6d:14:98:dc:d3:81:48:
f3:e4:fe:f9:1c:08:c1:21:a5:ea:24:a2:76:84:11:
db:d2:d0:3d:f4:da:dc:2f:e5:5f:7e:a8:02:47:d0:
66:40:ee:d3:e1:d6:01:21:ca:b4:36:ee:8e:43:09:
d2:4d:f2:de:27:1e:e1:b2:0c:2f:f4:2e:78:e1:48:
25:cb:ad:61:71:cb:b6:c1:14:0d:6b:c2:70:01:3f:
90:37:bb:87:72:1a:5c:f5:4d:f7:9c:27:fe:72:40:
e0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5B:F3:AA:08:81:74:A3:5F:AB:E7:2E:AD:39:4A:BC:A9:1E:37:31
X509v3 Authority Key Identifier:
keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e0:1f:3f:b3:57:70:3d:e2:f4:53:33:6f:3b:80:28:c7:3e:
2d:61:bf:83:58:03:c7:ed:96:f0:89:a6:49:cb:2a:4a:2e:78:
10:92:24:c2:98:05:a4:c9:e0:4c:b6:28:19:c5:19:37:3d:ff:
b9:64:08:4a:15:5a:96:38:bf:6f:6b:94:47:71:ff:e3:f9:df:
c3:64:89:a5:10:4e:09:0a:9e:cd:a8:6e:08:6c:c6:a5:f5:3e:
9d:94:ef:e9:a5:1a:a4:7e:20:10:77:5c:ab:6e:e7:97:9e:1b:
e8:0d:1d:9b:96:dd:9b:24:ca:85:00:c3:fa:5c:35:98:b9:1b:
69:83:fa:93:68:2a:f8:69:c4:97:22:99:4c:1b:44:4d:15:c0:
c1:37:14:c7:af:3f:e5:c2:7a:03:46:0f:ec:3d:d6:11:61:0a:
ce:b9:2e:5b:53:54:d9:4d:36:33:01:cd:3b:cc:2e:1d:cc:3d:
42:d0:8a:3d:4d:c2:58:49:73:6a:26:c9:00:f5:6c:86:43:4b:
f3:8d:72:25:15:13:7b:ff:71:58:60:29:85:51:81:50:cf:10:
97:74:1a:7c:f7:aa:bb:15:98:12:3e:90:53:ff:41:54:d4:cc:
9f:69:07:e0:a6:7c:44:4c:a6:e1:b4:42:c6:ce:7b:4b:37:af:
eb:db:94:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:10:14 2026 by rpki-client