Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: 7GDx/thHZUJYEFcU5UdleXO7emhEzRxtMBvjr6EVoq8=
Subject key identifier: 5A:A2:4A:32:C0:C4:9A:D0:6B:80:42:79:55:A4:18:00:90:FE:66:BF
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 019DB2EB8F71106B971B4A2B89901056ABA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 0BCA
Signing time: Wed 22 Apr 2026 02:01:15 +0000
Manifest this update: Wed 22 Apr 2026 02:01:15 +0000
Manifest next update: Thu 23 Apr 2026 02:01:15 +0000
Files and hashes: 1: BK3tpKOSTXCxYKkOe13Q63MJb9I.roa (hash: z9SYgCP3ZiLQk0vjMcoJ4vujaJvpOaOHnYotNVtHhjQ=)
2: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: aOgeeZqVglGlNgqwuVg/OwqPj7aypiYzFIxjpQN0SYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:eb:8f:71:10:6b:97:1b:4a:2b:89:90:10:56:ab:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Apr 22 02:01:15 2026 GMT
Not After : Apr 23 02:01:15 2026 GMT
Subject: CN=5aa24a32c0c49ad06b80427955a4180090fe66bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:75:0d:f9:93:c5:d1:1f:09:8d:9d:6c:dd:
c3:45:25:5e:22:d1:3f:3f:00:31:58:8a:90:d1:18:
88:ba:bd:89:3b:d7:6b:58:bf:6f:cc:95:b5:aa:88:
6d:67:fb:99:0c:10:a5:f6:5c:0f:b7:1d:86:1a:c1:
11:ef:04:52:7f:40:70:91:91:3e:72:89:93:4e:62:
ae:19:46:83:1a:53:ab:8c:9e:50:43:7b:7b:93:51:
d8:06:9d:63:b8:8d:b1:d5:cb:75:59:e3:35:b9:02:
f0:79:e5:6f:4c:d4:5a:58:e6:1f:d9:c1:d6:d5:d8:
a2:2c:0f:0f:24:76:a9:4c:1e:eb:28:f8:1f:7d:53:
f3:12:1d:55:d3:58:a7:77:19:64:99:69:69:6e:f7:
34:07:5b:af:66:4e:11:9c:57:5a:06:a0:dc:cf:4c:
ef:e5:64:90:44:64:25:1d:3f:a7:9b:a0:e1:dd:63:
3b:ec:c9:2a:e7:cc:ec:ce:09:b0:91:94:a0:ab:c9:
fb:c8:c7:37:cb:3a:41:74:3a:ce:49:67:34:f9:17:
5d:3f:09:50:d0:83:8b:b3:ac:5a:96:2b:2e:83:ff:
50:0c:ee:91:61:e2:a2:47:84:51:0f:57:3e:82:fc:
1c:89:75:1e:62:e8:58:40:78:28:ef:e7:d6:99:19:
4b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A2:4A:32:C0:C4:9A:D0:6B:80:42:79:55:A4:18:00:90:FE:66:BF
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:03:e1:d2:ae:9d:c0:2a:7e:80:31:1d:08:6d:c4:63:c0:9b:
96:b9:7f:8b:fa:12:ea:06:27:6f:eb:a9:01:45:af:5d:01:75:
46:83:97:c4:e0:12:f4:3c:4e:11:6b:39:2f:8c:0e:ea:45:96:
3d:d2:75:3d:ff:ad:b7:23:4b:78:04:67:61:42:30:df:6f:3e:
0c:ae:c1:f2:aa:5d:7a:0b:4c:e3:45:0a:8e:4a:0e:76:b8:f4:
26:9a:86:cc:96:8f:bc:8d:50:fb:bc:c6:9e:67:40:8b:ff:67:
74:a5:c2:01:e4:ee:83:68:57:19:8e:3b:c8:4f:99:ef:38:f2:
c8:15:7a:18:66:3b:30:25:cb:00:f1:8d:8f:cd:19:77:18:16:
e0:bf:ac:da:cd:b8:31:2f:69:5b:17:8e:3d:5e:fd:9f:b1:51:
f6:03:9a:4c:0e:fe:24:fd:96:db:06:51:3e:27:58:e9:a3:e9:
9c:f9:5c:45:30:e0:b9:58:d9:28:eb:ec:e2:07:86:1c:e4:cf:
73:2b:87:ca:3c:7d:f3:28:8a:b6:65:29:2b:ac:39:71:99:fe:
70:73:c6:8c:7b:42:7a:b3:31:0b:2a:8e:1a:31:89:94:c8:57:
d1:cd:ae:c6:f6:94:eb:08:bc:77:f2:84:7b:97:fa:5a:f5:c3:
3e:38:70:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:24:19 2026 by rpki-client