Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.mft
File: JftDG4tBR2PuM_rfKY5GoHjjJDI.mft (raw, json)
Hash identifier: k6xatFzw7tzcmuQPNIy46zM2USmQ4975Ze8PIYuxdjU=
Subject key identifier: 11:1F:F3:77:4C:C3:FE:BA:0F:DD:C6:B8:7D:7A:39:BA:DB:30:70:4F
Authority key identifier: 25:FB:43:1B:8B:41:47:63:EE:33:FA:DF:29:8E:46:A0:78:E3:24:32
Certificate issuer: /CN=25fb431b8b414763ee33fadf298e46a078e32432
Certificate serial: 01A0C669BEDA0317C60A1FD453481E61416E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JftDG4tBR2PuM_rfKY5GoHjjJDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:00:13 +0000
Manifest this update: Tue 22 Sep 2026 00:00:13 +0000
Manifest next update: Wed 23 Sep 2026 00:00:13 +0000
Files and hashes: 1: 1-8zDLGIBUdttuzongUFSJyrBHyI.roa (hash: NA/2OMk9mJUUPDfOuqk/HqeM1Jw1QwBMqIBpT7majag=)
2: JftDG4tBR2PuM_rfKY5GoHjjJDI.crl (hash: iCy/DubNvmAQuvs1BDxhZrz1i1vAgR+9ZzLvYsNtFtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JftDG4tBR2PuM_rfKY5GoHjjJDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:69:be:da:03:17:c6:0a:1f:d4:53:48:1e:61:41:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fb431b8b414763ee33fadf298e46a078e32432
Validity
Not Before: Sep 22 00:00:13 2026 GMT
Not After : Sep 23 00:00:13 2026 GMT
Subject: CN=111ff3774cc3feba0fddc6b87d7a39badb30704f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:9c:63:96:1a:80:f4:c7:3a:d0:03:7f:4a:
db:99:fc:de:42:7c:64:28:ce:1f:ea:40:68:54:e1:
7f:f7:fd:b7:29:35:a9:4d:d7:aa:92:41:5a:e0:89:
dc:0d:a2:80:ea:73:26:21:2e:f3:55:70:ca:fb:7a:
38:a5:44:23:42:53:fa:12:70:72:09:8a:72:0a:3c:
a5:1a:c0:a2:2a:58:eb:41:f2:5a:4f:11:1d:24:3d:
02:fb:e5:03:dd:48:db:ba:e8:76:51:76:5a:f0:d5:
9f:0d:c5:14:03:ca:15:b9:54:d1:27:5b:5e:53:42:
0e:ee:ce:fb:03:f3:87:48:d4:9e:53:2d:a2:46:e6:
b6:af:5c:43:77:42:92:06:38:fb:e8:f0:13:2b:40:
0b:82:a7:1d:01:0f:00:5f:57:e2:b4:c9:38:dd:bb:
92:c5:86:e0:d6:24:2a:b4:ed:6e:a1:f4:ad:73:07:
9c:1d:72:c0:f4:39:9d:06:6b:52:46:1a:82:71:76:
5b:9d:79:c7:4a:d2:7a:4e:a0:70:ca:ea:5b:7c:7c:
4b:95:24:5c:97:44:80:df:29:04:d0:b4:3c:01:a0:
03:ce:05:0f:b7:90:89:5c:d6:d1:fa:34:2b:2b:fd:
f6:f7:2d:6a:a0:37:bd:4b:49:96:f3:85:cd:d2:27:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1F:F3:77:4C:C3:FE:BA:0F:DD:C6:B8:7D:7A:39:BA:DB:30:70:4F
X509v3 Authority Key Identifier:
keyid:25:FB:43:1B:8B:41:47:63:EE:33:FA:DF:29:8E:46:A0:78:E3:24:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JftDG4tBR2PuM_rfKY5GoHjjJDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8a:ab:bd:1d:a4:94:ce:6c:d4:71:eb:cd:05:40:b1:6c:b2:
ed:eb:57:15:01:fd:67:92:16:f9:d1:98:0f:f8:52:e1:36:11:
36:5e:bc:76:51:d3:ed:e6:89:5f:e8:52:c0:f4:4a:9e:43:b1:
18:37:5c:68:54:17:e2:29:89:3e:81:a4:b7:6b:e3:38:4f:f2:
1a:fa:ca:8c:ff:51:af:6b:99:36:46:3d:d3:4b:77:91:14:fe:
4a:dd:13:99:64:47:7b:db:e8:f2:b7:b0:27:3e:7f:99:08:69:
10:ab:cc:df:30:6f:77:20:98:2a:6a:0e:bc:ed:4f:3d:02:04:
07:ed:6b:d4:97:bd:f4:01:85:36:a3:89:12:e0:25:82:b6:ac:
1e:34:87:5a:22:f2:4a:45:2d:67:b0:f5:e2:26:82:eb:f5:35:
64:c4:e1:e1:99:dc:b2:14:1a:e0:91:9a:68:53:e6:13:d7:6d:
6f:bf:3d:59:a9:f8:ac:ba:b7:0f:0d:2e:e5:37:e8:ac:64:96:
df:7e:34:e5:27:cb:f5:56:5a:6e:25:a2:71:78:ef:18:df:8d:
59:5a:76:1f:8c:8e:e1:b6:eb:4c:7c:63:70:17:c4:6b:a8:47:
b2:b2:03:4a:d5:6d:2a:fb:d0:22:87:99:75:79:e1:ad:fd:3c:
92:18:3a:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGab7aAxfGCh/UU0geYUFuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZmI0MzFiOGI0MTQ3NjNlZTMzZmFkZjI5OGU0NmEwNzhl
MzI0MzIwHhcNMjYwOTIyMDAwMDEzWhcNMjYwOTIzMDAwMDEzWjAzMTEwLwYDVQQD
EygxMTFmZjM3NzRjYzNmZWJhMGZkZGM2Yjg3ZDdhMzliYWRiMzA3MDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eicY5YagPTHOtADf0rbmfzeQnxk
KM4f6kBoVOF/9/23KTWpTdeqkkFa4IncDaKA6nMmIS7zVXDK+3o4pUQjQlP6EnBy
CYpyCjylGsCiKljrQfJaTxEdJD0C++UD3Ujbuuh2UXZa8NWfDcUUA8oVuVTRJ1te
U0IO7s77A/OHSNSeUy2iRua2r1xDd0KSBjj76PATK0ALgqcdAQ8AX1fitMk43buS
xYbg1iQqtO1uofStcwecHXLA9DmdBmtSRhqCcXZbnXnHStJ6TqBwyupbfHxLlSRc
l0SA3ykE0LQ8AaADzgUPt5CJXNbR+jQrK/329y1qoDe9S0mW84XN0iduFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEf83dMw/66D93GuH16ObrbMHBPMB8GA1UdIwQY
MBaAFCX7QxuLQUdj7jP63ymORqB44yQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmZ0REc0dEJSMlB1TV9yZktZNUdvSGpqSkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lNWRmYTktNTE5Ni00OGNkLTkxNzgt
NWEzMWY2MjBiMDRhLzEvSmZ0REc0dEJSMlB1TV9yZktZNUdvSGpqSkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9lNWRmYTktNTE5Ni00OGNkLTkxNzgtNWEzMWY2MjBiMDRh
LzEvSmZ0REc0dEJSMlB1TV9yZktZNUdvSGpqSkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYqrvR2k
lM5s1HHrzQVAsWyy7etXFQH9Z5IW+dGYD/hS4TYRNl68dlHT7eaJX+hSwPRKnkOx
GDdcaFQX4imJPoGkt2vjOE/yGvrKjP9Rr2uZNkY900t3kRT+St0TmWRHe9vo8rew
Jz5/mQhpEKvM3zBvdyCYKmoOvO1PPQIEB+1r1Je99AGFNqOJEuAlgrasHjSHWiLy
SkUtZ7D14iaC6/U1ZMTh4ZncshQa4JGaaFPmE9dtb789Wan4rLq3Dw0u5TforGSW
33405SfL9VZabiWicXjvGN+NWVp2H4yO4bbrTHxjcBfEa6hHsrIDStVtKvvQIoeZ
dXnhrf08khg6GQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:41:22 2026 by rpki-client