Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
File: jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json)
Hash identifier: G3dEvmwIWsg2pt8X85WlzmQWqCjv5ED0/7/7T5zXLi4=
Subject key identifier: 09:26:32:B0:CC:1A:F9:43:34:C1:8E:F8:AB:AF:6E:3A:FC:DA:41:22
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial: 01A174A70384703271ADD8D6732F6957BABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
Manifest number: 1AC3
Signing time: Sun 25 Oct 2026 20:01:04 +0000
Manifest this update: Sun 25 Oct 2026 20:01:04 +0000
Manifest next update: Mon 26 Oct 2026 20:01:04 +0000
Files and hashes: 1: D8C_fac31Ie3Mlmm0iY26zsUpPQ.roa (hash: aXM4Hau7o88WQaKHyho1aeWalezo3Xwt0vRqN6L/8TQ=)
2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: +cgEfjF+6se7diP24ZRAnD5TBzKW26Md5NCRLa2eUJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:a7:03:84:70:32:71:ad:d8:d6:73:2f:69:57:ba:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Validity
Not Before: Oct 25 20:01:04 2026 GMT
Not After : Oct 26 20:01:04 2026 GMT
Subject: CN=092632b0cc1af94334c18ef8abaf6e3afcda4122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:75:32:b2:57:d7:30:a8:ca:c7:15:39:8c:
da:c0:c2:75:fe:60:e7:90:a6:a2:14:ad:55:04:98:
aa:a0:fe:72:63:32:04:d4:a8:d7:c8:c1:60:a6:24:
4a:e7:d4:7b:01:eb:5a:28:97:a0:1b:4d:ca:33:6a:
29:a7:0a:3e:79:6f:c1:84:53:2e:25:d5:c4:c0:db:
5c:52:46:c6:b9:52:23:c0:bd:e7:41:0a:66:a3:66:
d8:c5:1b:c5:d1:dd:08:7f:9d:15:04:e2:da:bc:c6:
e9:90:7d:4b:66:a2:47:a9:96:5b:75:44:05:8e:9b:
fd:8d:7a:6e:6e:9d:86:47:d4:a6:1d:31:3a:f1:e0:
b9:1e:e2:9f:a6:36:3d:d7:dd:b0:f1:02:b5:51:09:
a7:d5:12:aa:53:bd:e8:2c:c5:d2:b8:4e:3f:bd:61:
bc:15:75:46:51:e9:5b:99:86:b6:17:74:a9:aa:7b:
dd:ff:00:4d:13:91:29:60:da:a7:55:7f:ad:b9:61:
0f:bc:af:92:45:23:4d:a5:72:af:a7:42:53:57:50:
da:54:4b:1c:ca:85:9e:5c:93:eb:0c:cc:23:d8:f7:
17:9c:03:6e:21:aa:04:e2:52:e2:ac:5f:76:ab:e7:
f8:98:0e:2d:33:ac:19:65:2c:dc:06:38:ee:ac:83:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:26:32:B0:CC:1A:F9:43:34:C1:8E:F8:AB:AF:6E:3A:FC:DA:41:22
X509v3 Authority Key Identifier:
keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:05:1a:5d:3c:a7:db:4b:0f:c7:07:cd:1d:54:2c:de:60:6f:
f8:20:57:b5:29:3d:16:8b:1c:9f:88:d2:0a:c6:e5:7e:52:34:
79:28:dc:3d:59:5d:26:09:d8:8a:8c:59:5e:0d:c9:ce:c7:a7:
2c:1b:ad:e5:65:d2:63:9b:e8:f9:81:4a:ba:8c:56:64:9d:f3:
3b:7b:62:b6:42:69:9d:29:6e:8b:d0:df:90:9d:96:ac:e9:17:
51:00:4d:45:17:ae:bc:13:6d:2c:8b:9d:ec:3b:d3:b3:45:bb:
78:7d:30:13:2f:f4:02:f3:9e:56:1f:7a:bd:4a:16:bf:07:d8:
82:50:8b:8f:8f:20:e8:86:5f:0b:89:5f:6b:b7:87:2c:6d:dc:
c0:2a:ba:82:50:c1:1c:3a:e4:69:79:2a:26:2d:0c:d0:87:34:
c5:7e:6e:a5:93:8e:df:bd:1f:5e:8e:9a:4f:90:47:ef:23:62:
46:4a:00:a8:1c:c7:4a:51:40:b1:cf:21:30:13:30:4a:78:0a:
d9:11:aa:d6:b7:3c:62:2e:9b:02:38:ca:07:bb:1e:64:fd:53:
93:ba:a8:33:76:fb:2b:8d:a7:9a:70:38:f4:3b:12:ae:c5:59:
7e:43:60:88:c4:21:82:d3:71:7a:dd:3e:1d:47:e0:8e:00:68:
7c:d0:df:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF0pwOEcDJxrdjWcy9pV7q6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMzRlMjkzOGRkNjg4NDliYjQwNmU5ZWI3OWM4OTNlNmMx
MmM3OGEwHhcNMjYxMDI1MjAwMTA0WhcNMjYxMDI2MjAwMTA0WjAzMTEwLwYDVQQD
EygwOTI2MzJiMGNjMWFmOTQzMzRjMThlZjhhYmFmNmUzYWZjZGE0MTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud11MrJX1zCoyscVOYzawMJ1/mDn
kKaiFK1VBJiqoP5yYzIE1KjXyMFgpiRK59R7AetaKJegG03KM2oppwo+eW/BhFMu
JdXEwNtcUkbGuVIjwL3nQQpmo2bYxRvF0d0If50VBOLavMbpkH1LZqJHqZZbdUQF
jpv9jXpubp2GR9SmHTE68eC5HuKfpjY9192w8QK1UQmn1RKqU73oLMXSuE4/vWG8
FXVGUelbmYa2F3Spqnvd/wBNE5EpYNqnVX+tuWEPvK+SRSNNpXKvp0JTV1DaVEsc
yoWeXJPrDMwj2PcXnANuIaoE4lLirF92q+f4mA4tM6wZZSzcBjjurIOaXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkmMrDMGvlDNMGO+Kuvbjr82kEiMB8GA1UdIwQY
MBaAFIw04pON1ohJu0BunreciT5sEseKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zMjA3OTctYjgxMC00ZjhlLThlN2Mt
ODNjMzhiNzc3NDc4LzEvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8zMjA3OTctYjgxMC00ZjhlLThlN2MtODNjMzhiNzc3NDc4
LzEvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQUaXTyn
20sPxwfNHVQs3mBv+CBXtSk9Foscn4jSCsblflI0eSjcPVldJgnYioxZXg3Jzsen
LBut5WXSY5vo+YFKuoxWZJ3zO3titkJpnSlui9DfkJ2WrOkXUQBNRReuvBNtLIud
7DvTs0W7eH0wEy/0AvOeVh96vUoWvwfYglCLj48g6IZfC4lfa7eHLG3cwCq6glDB
HDrkaXkqJi0M0Ic0xX5upZOO370fXo6aT5BH7yNiRkoAqBzHSlFAsc8hMBMwSngK
2RGq1rc8Yi6bAjjKB7seZP1Tk7qoM3b7K42nmnA49DsSrsVZfkNgiMQhgtNxet0+
HUfgjgBofNDfxw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 07:11:47 2026 by rpki-client