Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier: cjf2p9nzGv9bsNELS0Tz0b28JxU/r+Yjz7OF0QgcQhY=
Subject key identifier: 55:FA:3D:4F:2C:BE:EC:3D:77:86:87:85:52:9E:B0:F3:E2:AB:D1:6E
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 01A1242FC0B1BD47E5DA4961BAC5D3BC53F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number: 1A9E
Signing time: Sat 10 Oct 2026 05:01:11 +0000
Manifest this update: Sat 10 Oct 2026 05:01:11 +0000
Manifest next update: Sun 11 Oct 2026 05:01:11 +0000
Files and hashes: 1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: I/ruQkaBHaJQfEHEcUXkfLdkCMfNLxoeIg0SOU0cGXM=)
2: lSlG7rI2eJuiPKf-HzKcyhBPp1g.roa (hash: 53i2XoHaeuLLxKqYVRpE4lR9h2EBCgSQcRQiDH1i//M=)
3: scC5gNxexOD9_MYBJVYJT8pP6Ag.roa (hash: yC68S8mkaapsGvYB3k9kgiLL9Ie9a4V0LG7QX9QvJvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:2f:c0:b1:bd:47:e5:da:49:61:ba:c5:d3:bc:53:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Oct 10 05:01:11 2026 GMT
Not After : Oct 11 05:01:11 2026 GMT
Subject: CN=55fa3d4f2cbeec3d77868785529eb0f3e2abd16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ee:3f:0b:78:50:3f:93:f4:62:5d:f4:9e:7c:
78:fc:43:f6:ef:86:24:60:5f:ce:5f:a1:05:7e:cb:
68:ee:17:30:87:c7:a7:24:63:a4:bc:c1:94:37:58:
8e:fa:5e:2b:b1:5d:a2:fa:95:c9:0c:b8:32:d4:90:
50:41:61:78:06:57:3c:5f:34:3f:db:5e:79:31:f9:
68:75:33:aa:da:2c:6e:26:b6:8b:48:2e:16:9f:82:
84:cc:0d:32:9e:a1:f1:4e:f4:91:31:f0:11:86:22:
8f:27:a2:b6:7c:38:82:b1:6a:fa:e4:93:72:2f:1a:
47:62:c9:f4:3c:d4:d6:90:4e:02:0b:39:38:fe:26:
2e:96:73:2c:0a:9b:1b:66:55:fa:b4:cf:53:2c:f3:
57:9b:e1:a8:91:db:fa:09:76:ff:7d:dc:76:27:4c:
25:d9:c3:8f:29:0e:5e:24:38:f4:78:9d:73:96:a5:
82:48:5e:54:7e:03:fe:a8:61:11:da:7f:18:3e:83:
51:68:62:05:89:de:33:22:a2:85:42:6f:3c:d0:52:
b7:97:1e:76:2d:7e:71:63:ba:d2:a3:db:c6:5a:f5:
2d:a0:22:7d:16:4a:da:b6:db:af:90:e7:6a:ee:e5:
07:6d:52:b6:f0:26:47:42:5c:b4:94:35:b9:78:31:
98:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FA:3D:4F:2C:BE:EC:3D:77:86:87:85:52:9E:B0:F3:E2:AB:D1:6E
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7c:81:66:8b:bd:e0:95:d7:ea:f9:ba:25:14:11:ce:8b:1b:
9e:c0:3d:2e:b6:84:82:b5:45:f8:3c:7f:18:66:5b:e5:87:ab:
9a:34:46:90:38:1f:35:39:a5:15:d6:fa:b1:2c:ee:f4:71:82:
a1:38:80:b6:e7:87:6d:2a:6c:83:6b:78:a0:51:45:cd:96:35:
33:ae:1d:80:b8:95:32:46:bb:12:0b:9b:2a:b8:85:f5:58:d8:
fb:6c:2d:ef:20:37:01:46:be:88:a2:ac:fc:a6:32:7e:56:bf:
43:63:dc:bc:fa:4e:14:a9:68:6b:d9:64:61:c5:f2:89:c8:69:
cf:19:16:93:8b:31:e4:e4:16:ab:68:7c:31:80:53:dd:b4:5e:
e6:33:40:cc:f5:35:0f:d3:50:dd:1a:a1:c3:44:8a:b2:bc:41:
e6:3b:a5:49:2a:6a:6e:ce:fd:2c:07:10:a3:df:d5:65:6a:4e:
b6:b4:5b:c9:96:70:2b:59:9c:c5:03:05:33:c5:09:c1:2a:a2:
b7:54:a5:bf:ad:af:04:55:4c:79:1b:76:67:58:31:fb:23:02:
64:c2:8a:17:59:66:45:13:7f:1b:53:b4:79:16:f3:33:58:32:
5b:7e:1d:2b:99:e9:04:01:6d:4b:04:26:a6:c4:b0:96:9d:ba:
0e:69:93:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEkL8CxvUfl2klhusXTvFP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZGNmMjZmNzQ4NjA1ODhjYWM2YmFlMTdmOTlkZTIyZGJj
NDlhZTYwHhcNMjYxMDEwMDUwMTExWhcNMjYxMDExMDUwMTExWjAzMTEwLwYDVQQD
Eyg1NWZhM2Q0ZjJjYmVlYzNkNzc4Njg3ODU1MjllYjBmM2UyYWJkMTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6O4/C3hQP5P0Yl30nnx4/EP274Yk
YF/OX6EFfsto7hcwh8enJGOkvMGUN1iO+l4rsV2i+pXJDLgy1JBQQWF4Blc8XzQ/
2155MflodTOq2ixuJraLSC4Wn4KEzA0ynqHxTvSRMfARhiKPJ6K2fDiCsWr65JNy
LxpHYsn0PNTWkE4CCzk4/iYulnMsCpsbZlX6tM9TLPNXm+Gokdv6CXb/fdx2J0wl
2cOPKQ5eJDj0eJ1zlqWCSF5UfgP+qGER2n8YPoNRaGIFid4zIqKFQm880FK3lx52
LX5xY7rSo9vGWvUtoCJ9FkrattuvkOdq7uUHbVK28CZHQly0lDW5eDGYLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFX6PU8svuw9d4aHhVKesPPiq9FuMB8GA1UdIwQY
MBaAFIzc8m90hgWIysa64X+Z3iLbxJrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kNWIxYTctNDY2ZC00NzFjLWE3MGMt
MmZiMjVhYmZkYzUzLzEvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9kNWIxYTctNDY2ZC00NzFjLWE3MGMtMmZiMjVhYmZkYzUz
LzEvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3yBZou9
4JXX6vm6JRQRzosbnsA9LraEgrVF+Dx/GGZb5YermjRGkDgfNTmlFdb6sSzu9HGC
oTiAtueHbSpsg2t4oFFFzZY1M64dgLiVMka7EgubKriF9VjY+2wt7yA3AUa+iKKs
/KYyfla/Q2PcvPpOFKloa9lkYcXyichpzxkWk4sx5OQWq2h8MYBT3bRe5jNAzPU1
D9NQ3Rqhw0SKsrxB5julSSpqbs79LAcQo9/VZWpOtrRbyZZwK1mcxQMFM8UJwSqi
t1Slv62vBFVMeRt2Z1gx+yMCZMKKF1lmRRN/G1O0eRbzM1gyW34dK5npBAFtSwQm
psSwlp26DmmThw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 11:12:39 2026 by rpki-client