Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: SGbDJEkc/eHKRkZ83NTH72B684Cw9pEdlRZ0d8umzmc=
Subject key identifier: 03:5A:05:7B:B5:99:9D:FC:7C:0E:3E:12:61:C6:E5:AE:6D:26:A4:87
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 01A162A0CADB79E6A9A19BAB7E09541B9411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 06CE
Signing time: Thu 22 Oct 2026 08:01:07 +0000
Manifest this update: Thu 22 Oct 2026 08:01:07 +0000
Manifest next update: Fri 23 Oct 2026 08:01:07 +0000
Files and hashes: 1: OTzOq7SDpRdksgl_zYPgtdePfLI.roa (hash: D6qdGzPzEfS+jEvVQOP5Z3G0DkCqmvwi/YwWrt4+qgc=)
2: Uxk1FwItIfltxuYz2o9bKLPYoqw.roa (hash: 00PfsX6vRTHIMTxBup/P+JPXMFRRdRTXxG1QyBpuPMY=)
3: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: 1z1y7Mc8MwOlcWp/VXODVrwRBolg9m7NaI+iGvkKuUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:a0:ca:db:79:e6:a9:a1:9b:ab:7e:09:54:1b:94:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Oct 22 08:01:07 2026 GMT
Not After : Oct 23 08:01:07 2026 GMT
Subject: CN=035a057bb5999dfc7c0e3e1261c6e5ae6d26a487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:6c:8a:9d:28:bc:8c:92:39:a5:e6:8b:bf:
40:00:39:90:ef:ba:49:85:3a:99:4e:34:24:cb:ae:
4f:3b:fd:0b:de:b8:0c:69:b2:e1:e2:0a:76:2f:59:
79:b0:d4:4e:6a:1a:94:fb:76:4d:a0:91:cf:cc:81:
58:90:67:f3:2c:10:88:f6:50:83:fb:c2:71:a7:f6:
55:93:58:c8:08:97:97:a8:f8:36:e9:f4:32:f8:2a:
a5:0a:1f:a4:d8:8c:01:7f:95:69:db:8a:e3:eb:28:
88:53:e0:f1:b3:ad:ec:d8:99:03:01:04:cf:92:35:
55:6a:fe:02:77:87:05:e8:e6:f3:c0:45:e2:bf:d4:
79:26:3e:bd:38:63:1a:7c:7d:e2:aa:f6:1a:80:88:
ae:47:c2:26:f8:1f:ef:7f:cc:29:f9:10:ef:a2:ac:
19:fb:fd:43:4b:4d:ee:59:92:a7:32:fa:6f:6a:84:
8e:03:32:a3:ca:b7:4e:a5:6f:27:b9:fc:a6:35:2d:
b4:b4:7f:a0:43:ae:9a:ce:41:b5:9a:6a:93:57:ba:
ae:ad:cf:a6:66:ba:6f:0d:57:76:27:69:d4:cc:cf:
9c:9b:e3:d8:fb:1f:6e:f0:40:0c:5e:6e:2a:74:0d:
13:68:d7:79:6d:0c:6b:8e:f1:2c:2b:28:cd:0e:ac:
ac:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5A:05:7B:B5:99:9D:FC:7C:0E:3E:12:61:C6:E5:AE:6D:26:A4:87
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5f:ae:1e:ec:ad:04:7a:2a:c5:1d:48:92:70:2a:b3:0f:b7:
a1:cb:d7:2f:4a:a9:0f:83:b6:44:f6:6b:a6:a1:a3:6b:94:8e:
ca:41:5c:00:46:c2:9f:e2:88:d2:72:68:e1:a5:5c:e7:09:b4:
6b:9f:a4:90:f9:a6:70:8c:c2:72:ab:a7:d8:6c:a6:e9:ef:a8:
4b:17:8e:d7:9c:75:da:3a:13:2a:44:54:7a:c7:31:33:14:49:
82:44:20:09:5a:96:fb:28:8c:42:5f:38:74:4c:39:be:35:0e:
55:f2:dc:b1:ef:31:24:4b:c4:1f:50:40:ea:4b:ca:ce:54:46:
6c:55:6c:3f:d6:e8:7b:e2:85:4b:4d:49:3d:84:2b:3a:1a:5b:
f2:c8:ab:32:62:2c:c3:46:72:fa:82:6d:9b:7b:68:36:44:37:
0c:eb:7f:d4:c2:72:80:75:a1:6e:a5:a8:a0:f0:d7:15:2e:e1:
f9:45:9d:d6:69:19:6d:24:ce:50:e7:fd:38:62:25:c5:15:9a:
9b:46:ce:f9:9b:79:96:32:3f:c3:78:d7:f6:b2:00:6a:37:65:
14:87:37:8e:9c:e7:70:12:53:d5:cb:c9:a2:55:79:a3:a6:e8:
34:ac:82:39:1e:ef:f1:6a:6e:cd:cc:c4:f1:f4:f4:26:3a:d6:
dd:d8:04:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:36:19 2026 by rpki-client