Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: jF0iesE0y4U7f+Kq8ctnAOLzXKjxQ26IE4LyYeAlWLA=
Subject key identifier: 4C:7F:EB:78:DE:44:A5:33:8B:7D:6C:24:38:D7:41:DC:ED:BE:90:38
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 019E905C6BF78E9168DD25C33C49C1206FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 0558
Signing time: Thu 04 Jun 2026 02:00:36 +0000
Manifest this update: Thu 04 Jun 2026 02:00:36 +0000
Manifest next update: Fri 05 Jun 2026 02:00:36 +0000
Files and hashes: 1: OTzOq7SDpRdksgl_zYPgtdePfLI.roa (hash: D6qdGzPzEfS+jEvVQOP5Z3G0DkCqmvwi/YwWrt4+qgc=)
2: Uxk1FwItIfltxuYz2o9bKLPYoqw.roa (hash: 00PfsX6vRTHIMTxBup/P+JPXMFRRdRTXxG1QyBpuPMY=)
3: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: dyDwbv90RewUhfaGX636uzUx7ibvzAmVqoN5AvsHzAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:5c:6b:f7:8e:91:68:dd:25:c3:3c:49:c1:20:6f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Jun 4 02:00:36 2026 GMT
Not After : Jun 5 02:00:36 2026 GMT
Subject: CN=4c7feb78de44a5338b7d6c2438d741dcedbe9038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:46:a2:43:3c:1d:4c:a4:47:34:43:8a:5f:
61:bd:2f:61:84:24:b6:18:ab:d9:25:a9:dd:65:aa:
48:ea:7e:78:cf:0f:00:ba:c9:30:45:f1:d5:20:8c:
5f:de:2a:bc:0e:d6:57:b8:06:79:49:21:b2:f2:f3:
c7:6d:13:c6:19:9b:49:a1:4e:c9:8b:d9:e6:b7:f2:
e8:91:cf:da:6e:64:76:64:c1:bf:18:a9:f5:fb:56:
db:21:13:3e:25:27:28:98:d9:49:66:59:c8:ae:c8:
65:77:ee:4c:d1:db:25:5c:d5:9f:3d:91:81:1c:23:
91:57:a2:7a:aa:b9:e6:76:43:ef:41:83:7b:a1:11:
87:04:39:c2:2a:f0:d3:8b:30:d8:f9:81:4d:c0:45:
74:aa:19:df:18:aa:20:44:74:2d:a6:95:74:c3:55:
c0:23:33:f5:fd:b3:d6:8e:79:53:78:32:da:99:00:
d9:ab:1d:51:47:f1:f4:0b:12:e0:b8:a2:1e:84:e3:
5c:5e:64:6d:10:0c:62:5a:01:61:79:3c:80:93:9c:
bb:b4:7b:fb:e3:ec:2e:fd:8b:2e:a6:e4:ea:d7:e4:
64:c7:b0:76:5e:6c:27:27:23:fa:8d:56:e0:0e:9f:
49:42:73:b2:b1:f3:f2:16:88:e4:ce:96:b0:31:97:
b7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7F:EB:78:DE:44:A5:33:8B:7D:6C:24:38:D7:41:DC:ED:BE:90:38
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f6:71:99:b5:29:ac:f7:4c:d3:0f:65:74:da:cd:ef:e0:93:
ef:89:17:bf:7c:f3:4c:7c:f6:a0:59:1d:bc:c4:78:e5:63:16:
62:91:a0:81:c5:17:bb:09:88:29:99:cf:98:69:6b:e5:95:86:
a1:c9:90:23:7c:17:d3:2c:d4:48:53:87:18:9d:c0:09:3b:6e:
79:b1:51:ac:1c:36:d9:d4:fe:a7:34:23:f5:08:54:a9:3c:78:
75:1a:f4:f8:fa:2d:35:43:6a:ed:ef:e6:de:0d:36:b2:a0:9d:
d2:09:1f:10:b2:09:2b:02:27:20:62:e7:1d:5e:03:94:2f:b7:
96:2c:50:e7:47:6e:06:96:68:54:75:f7:d8:e7:d1:15:b1:4a:
f4:4b:aa:fb:02:93:58:37:22:c0:da:ad:11:b5:8f:09:4d:9d:
95:5f:b1:4c:5a:82:d9:e8:6d:4b:5c:d1:a9:b9:ab:07:09:13:
d8:8c:5d:61:54:bc:ab:1e:53:a5:d2:e2:83:af:cd:bf:05:00:
ab:2b:19:d5:f7:84:f9:64:53:d7:3d:98:95:f7:7d:32:11:7f:
38:b2:94:a1:2c:5a:ea:90:2a:1e:21:6a:a5:16:3a:04:f2:02:
32:69:63:65:b4:d6:91:68:70:46:5a:11:8a:ce:4c:4f:d4:14:
54:c0:59:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:24:36 2026 by rpki-client