Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/109d53-4164-4168-afb6-08076924777d/1/tJO1k3xjfsJP-fvrQ61YjNTIzr8.mft
File: tJO1k3xjfsJP-fvrQ61YjNTIzr8.mft (raw, json)
Hash identifier: JxHezo2wdums342+ZS9JM2nTWJmxPfPjqJ1WgiGXf2Q=
Subject key identifier: 57:95:C2:A7:B0:C7:64:05:05:8A:25:1C:FC:8F:95:34:2D:4C:F3:48
Authority key identifier: B4:93:B5:93:7C:63:7E:C2:4F:F9:FB:EB:43:AD:58:8C:D4:C8:CE:BF
Certificate issuer: /CN=b493b5937c637ec24ff9fbeb43ad588cd4c8cebf
Certificate serial: 01A1784C79C10CFC8D54E4BA2DE16102ABCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJO1k3xjfsJP-fvrQ61YjNTIzr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/109d53-4164-4168-afb6-08076924777d/1/tJO1k3xjfsJP-fvrQ61YjNTIzr8.mft
Manifest number: 8D
Signing time: Mon 26 Oct 2026 13:00:40 +0000
Manifest this update: Mon 26 Oct 2026 13:00:40 +0000
Manifest next update: Tue 27 Oct 2026 13:00:40 +0000
Files and hashes: 1: tJO1k3xjfsJP-fvrQ61YjNTIzr8.crl (hash: /kwjCW1wXt2qB01O6KneWnK14Iah+uOzPG1GWC0KSgU=)
2: zuGcw_WT5p62xS2JE_SiF3vkRtY.roa (hash: 2EMrZPbz80p0xTGA51Sh6lHd46B1fhzDFjo+P/eDtD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/109d53-4164-4168-afb6-08076924777d/1/tJO1k3xjfsJP-fvrQ61YjNTIzr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/109d53-4164-4168-afb6-08076924777d/1/tJO1k3xjfsJP-fvrQ61YjNTIzr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJO1k3xjfsJP-fvrQ61YjNTIzr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:4c:79:c1:0c:fc:8d:54:e4:ba:2d:e1:61:02:ab:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b493b5937c637ec24ff9fbeb43ad588cd4c8cebf
Validity
Not Before: Oct 26 13:00:40 2026 GMT
Not After : Oct 27 13:00:40 2026 GMT
Subject: CN=5795c2a7b0c76405058a251cfc8f95342d4cf348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:fa:95:c2:1f:6c:10:58:12:12:ac:6c:bd:
83:37:94:33:4a:2d:8a:a7:d1:25:9a:89:a0:31:6b:
eb:f6:42:60:b7:93:67:39:df:ee:a5:c6:89:e4:fc:
42:20:55:70:e9:d8:99:48:de:70:bf:98:fb:68:24:
8b:9d:90:f4:d4:e0:0f:77:de:92:2f:09:56:e8:39:
46:a8:ef:73:16:bd:c8:86:86:cf:9e:b4:4f:0e:6b:
92:9a:24:d5:b5:bf:d6:0c:07:03:23:9a:6f:43:88:
0d:3d:5c:1b:fc:ae:65:e1:97:c9:f5:97:22:c1:4b:
b7:d5:d4:e2:1c:ab:ff:72:b8:20:30:b4:82:b9:32:
74:0a:7a:08:37:4a:ea:8c:18:e4:48:a7:a3:38:44:
d0:5b:a7:54:e0:63:e9:db:6f:92:5d:d3:78:ca:d3:
c2:6a:05:1c:d7:6f:46:d8:6a:68:08:4d:49:50:e4:
ea:51:9c:1e:a9:65:34:f3:0b:5a:22:29:8d:95:35:
69:6d:d0:19:c0:26:8d:bc:77:72:80:36:11:4b:d7:
86:6d:c2:71:0a:72:4a:f1:c7:2f:a2:a6:2b:0e:d5:
a6:3f:c6:ae:fd:4c:ad:a5:22:7d:7d:38:c9:76:6c:
e0:1e:80:ae:23:cb:44:f0:aa:9f:dc:b4:83:23:91:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:95:C2:A7:B0:C7:64:05:05:8A:25:1C:FC:8F:95:34:2D:4C:F3:48
X509v3 Authority Key Identifier:
keyid:B4:93:B5:93:7C:63:7E:C2:4F:F9:FB:EB:43:AD:58:8C:D4:C8:CE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJO1k3xjfsJP-fvrQ61YjNTIzr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/109d53-4164-4168-afb6-08076924777d/1/tJO1k3xjfsJP-fvrQ61YjNTIzr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/109d53-4164-4168-afb6-08076924777d/1/tJO1k3xjfsJP-fvrQ61YjNTIzr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bc:b1:e3:9b:4f:e1:2f:c3:52:e0:38:e3:3c:e6:3c:5c:a2:
10:53:88:0e:4d:f1:45:56:c6:e8:64:5a:54:cc:79:4e:89:bd:
a9:28:e0:fe:6c:ef:4f:17:66:58:17:c3:24:e0:81:a2:26:a9:
6f:7a:a8:e6:aa:20:0c:7c:48:77:2a:a4:59:8f:f2:a6:7e:46:
ec:dc:4e:fa:bd:a6:ea:a8:9f:4e:18:dc:aa:f5:95:f1:a8:60:
4b:16:b8:cb:32:b5:02:c0:ed:17:e2:83:b6:03:f6:51:35:27:
49:30:54:78:21:e8:6e:35:e9:0f:0e:53:c5:fe:b0:72:5c:11:
8d:ef:bc:3e:2f:d5:fd:cc:58:81:31:a5:eb:b8:63:4b:47:cb:
56:bf:08:14:1c:90:1c:67:87:b7:89:b7:f5:24:e5:90:e8:dc:
e1:b8:9a:72:01:42:24:9d:51:2a:c8:1a:65:57:3a:4f:4a:84:
b4:ca:da:11:70:8b:63:5f:38:cb:b0:aa:e0:c3:8a:ce:de:e2:
80:1c:cf:5d:50:30:69:48:b9:db:c8:7c:41:83:ad:4c:64:0e:
49:a6:71:4b:87:8e:ac:3d:c8:21:92:43:60:e0:8b:e9:e0:b1:
54:ca:d6:75:d8:8d:20:b4:56:f0:d0:53:49:32:66:77:5a:14:
55:c1:09:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:13:39 2026 by rpki-client