Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: ESKMrzTd4h5BRQqT2s8lFBA/IYCmvmFBV2SRrELXub8=
Subject key identifier: 9D:82:97:14:E8:51:26:61:30:69:04:D0:4F:26:8E:F3:F0:A5:7E:97
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 01A1860885D5F5B6D79B9FB1EA1B0E7DE758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 0DC5
Signing time: Thu 29 Oct 2026 05:01:07 +0000
Manifest this update: Thu 29 Oct 2026 05:01:07 +0000
Manifest next update: Fri 30 Oct 2026 05:01:07 +0000
Files and hashes: 1: BK3tpKOSTXCxYKkOe13Q63MJb9I.roa (hash: z9SYgCP3ZiLQk0vjMcoJ4vujaJvpOaOHnYotNVtHhjQ=)
2: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: MbRWNbzBazU22ogrRgopaXrSJPR3P5tlSqvukRwnUm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:08:85:d5:f5:b6:d7:9b:9f:b1:ea:1b:0e:7d:e7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Oct 29 05:01:07 2026 GMT
Not After : Oct 30 05:01:07 2026 GMT
Subject: CN=9d829714e8512661306904d04f268ef3f0a57e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:47:3e:e0:a0:78:e4:4c:97:52:cd:1d:72:
d2:27:77:fe:21:a1:80:f9:03:d8:d9:43:70:7b:64:
10:bc:3b:26:76:3c:89:14:b8:a4:9f:16:bb:27:52:
eb:cc:69:cc:d9:be:ab:83:80:c8:d6:6e:5a:c3:22:
21:e9:f0:ef:81:2c:be:5f:42:48:af:08:9e:41:db:
29:73:06:14:fa:ed:f3:74:0d:3f:34:78:ce:a7:7b:
d1:39:21:ce:82:71:54:93:71:4f:e8:6f:c3:a1:e0:
47:46:38:7c:8d:12:90:48:5b:85:81:6e:ec:82:b5:
99:4d:79:fc:3d:6d:46:fd:04:bb:2a:1c:a2:12:2a:
0f:50:5e:12:e6:1f:90:c2:a8:11:34:34:1c:d6:0a:
9f:fa:37:94:07:17:a4:43:c1:08:04:e2:f6:a0:99:
4c:a4:b7:4c:8b:83:ad:78:ef:9b:7c:91:74:cf:c3:
89:9b:ad:e6:7b:26:c4:4d:a1:ed:dd:7a:30:00:47:
9f:73:d9:e5:f3:25:66:86:cf:0e:28:be:ce:a2:5d:
73:3c:5b:51:a4:f1:ae:07:03:da:6d:74:ec:67:9b:
77:03:60:6f:39:1f:95:5a:14:d5:e3:82:f5:ca:54:
ca:00:f1:32:cc:08:55:9a:4d:be:5e:04:29:68:7a:
79:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:82:97:14:E8:51:26:61:30:69:04:D0:4F:26:8E:F3:F0:A5:7E:97
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ae:4d:0f:0d:d8:f5:81:39:10:97:49:5b:aa:4d:23:ae:b3:
49:56:98:54:87:61:bb:8f:ff:1d:a2:3b:c3:42:5f:6e:d4:2f:
2c:de:bf:0d:3e:54:7a:84:4c:a1:db:cf:54:0d:21:a5:54:51:
7f:29:2d:ce:ae:20:65:a6:56:dc:21:30:44:29:bd:1c:67:9e:
d2:69:09:05:f7:28:e0:05:8b:2a:79:04:b3:d5:a8:1e:c0:f2:
36:4e:ca:36:7a:52:9c:8f:c5:20:39:9c:f6:a4:9b:86:c7:3a:
2a:32:e5:83:a0:14:d2:92:86:62:f8:1b:fe:42:49:e1:bb:d3:
7b:e4:4a:eb:2e:87:a0:a9:3c:ff:9e:b0:76:13:06:6c:a9:78:
98:3c:a4:d9:3a:e7:56:a5:3a:f3:22:b5:03:ee:4c:b5:56:b6:
74:53:93:ee:6b:07:93:34:43:35:f0:f7:5a:ec:d6:b6:4c:67:
b7:a6:b5:df:5a:af:d3:3b:5c:69:31:aa:f8:cb:c0:a3:24:8e:
95:4e:d9:fb:0e:89:a9:92:18:86:bf:2d:e0:25:6a:af:4c:54:
37:57:85:e6:6f:1e:e7:62:42:c6:63:43:06:cf:7a:10:f8:54:
22:0e:73:76:e9:01:9a:3b:bd:7c:f8:86:fb:29:5c:8e:29:67:
a5:9b:b0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 11:48:09 2026 by rpki-client