Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: GJM0rAhYaYrcE8+U7maSzoBI/ZY6aHThkzOFn4kp0u0=
Subject key identifier: DE:DB:04:68:42:0B:F1:7B:F8:73:51:F4:66:B3:F6:CA:EF:9A:CA:04
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 019E9AA973669B078F57017BBF330A0A95EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 0C42
Signing time: Sat 06 Jun 2026 02:00:56 +0000
Manifest this update: Sat 06 Jun 2026 02:00:56 +0000
Manifest next update: Sun 07 Jun 2026 02:00:56 +0000
Files and hashes: 1: BK3tpKOSTXCxYKkOe13Q63MJb9I.roa (hash: z9SYgCP3ZiLQk0vjMcoJ4vujaJvpOaOHnYotNVtHhjQ=)
2: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: jKyYCZ86Nq8kdOKN3gm/KfrpnkU8zJyTwyhIj15kTCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:a9:73:66:9b:07:8f:57:01:7b:bf:33:0a:0a:95:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Jun 6 02:00:56 2026 GMT
Not After : Jun 7 02:00:56 2026 GMT
Subject: CN=dedb0468420bf17bf87351f466b3f6caef9aca04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:4c:65:ff:59:90:05:2d:04:e3:61:7d:e7:
81:40:32:b4:04:22:c1:b9:86:34:0f:12:07:92:7e:
f5:68:1c:35:b1:7e:b9:26:df:ff:98:00:97:74:a0:
91:e1:b9:e2:04:31:40:42:a0:6d:e8:5f:76:6b:8a:
82:b5:c1:c1:9a:14:89:6c:3e:57:38:71:b7:88:f6:
04:12:54:7d:28:a2:26:96:99:29:99:ae:5a:18:95:
eb:83:f2:ba:fe:ac:5d:3c:e5:8c:31:07:26:91:ba:
85:5f:2a:3a:2e:1c:ff:08:61:f1:24:51:a8:9d:8a:
fb:a4:8f:fb:58:a2:8a:da:46:be:99:99:70:9b:3e:
1c:e9:5d:1b:9d:db:29:23:7a:6c:68:b0:23:49:35:
fb:1f:37:6c:aa:ed:74:1e:dd:16:51:aa:fc:b7:c7:
b6:b8:b0:e4:d0:94:cb:bb:77:5e:8f:3a:17:20:25:
92:15:68:07:90:05:d9:4b:6f:3b:b1:3d:61:18:d2:
b1:cd:05:21:40:a7:41:9d:1b:93:d5:eb:8f:57:39:
bc:b1:f0:e2:85:a7:b5:b9:7f:3d:b8:6b:ac:bd:84:
65:58:0a:b7:c9:74:07:8b:e3:d7:0c:99:1e:6b:cf:
80:ab:ff:7b:1b:59:6c:90:2a:1e:c7:a5:57:8c:23:
b2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DB:04:68:42:0B:F1:7B:F8:73:51:F4:66:B3:F6:CA:EF:9A:CA:04
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5d:9d:95:64:fd:da:5a:63:c7:a8:6a:d9:dc:df:7b:a6:a1:
89:e7:27:57:08:4c:dc:a6:10:f2:46:d8:b8:dd:c5:f1:b0:37:
60:a6:a0:d1:6d:d9:84:f4:87:7f:73:be:57:f7:af:37:40:06:
77:e1:d3:55:27:46:1f:bb:ba:37:81:e2:55:02:77:de:43:1b:
ff:40:4c:06:57:57:27:d2:af:c3:af:05:f2:e9:5a:39:68:9e:
35:d0:5b:3d:3a:fa:dc:9a:68:f2:2b:15:e0:2f:88:34:e6:66:
81:cb:b8:34:71:16:46:4a:80:24:be:2f:5d:c2:19:7b:0e:c4:
23:15:94:28:99:f7:fd:6b:32:6a:c8:7e:39:54:90:4a:c6:ea:
00:a2:18:07:5b:85:72:9b:d5:4a:7e:20:13:de:a1:a0:d2:44:
c9:ee:d3:44:31:93:9d:86:68:55:0e:07:e5:92:59:ee:f1:42:
cd:82:66:76:dc:aa:21:1f:b5:1a:52:ae:d0:ab:44:5b:0f:fe:
af:0f:d1:2a:3d:47:82:5e:13:a2:94:29:3b:ab:11:fc:25:3a:
df:8e:1b:23:88:e7:61:4b:58:75:4c:16:da:b9:33:28:90:c1:
af:45:be:4f:4d:55:29:af:fb:ae:77:83:37:c8:ba:58:52:c6:
56:e9:b3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:08:05 2026 by rpki-client