Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: 2A33KV1mYiOTbrrYOJsFkucwUgV/irl7HQ0cQYUoxRA=
Subject key identifier: 51:F6:28:4F:D9:65:E8:BF:68:F4:56:8A:97:EF:B7:F0:85:F2:93:38
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 01A0C934F8988E81B48330B38A599A4B7804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 1377
Signing time: Tue 22 Sep 2026 13:01:26 +0000
Manifest this update: Tue 22 Sep 2026 13:01:26 +0000
Manifest next update: Wed 23 Sep 2026 13:01:26 +0000
Files and hashes: 1: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: gFsvW97aiTePPPinkpVzMoKIMQgKxqCiosDQvIljJsQ=)
2: nb4M4Vs_oRCpP6av5yHYY7ajtGs.roa (hash: cPr0jW1v5b3Y4dRV/He/q4udsj1U7jqFBGqtSVxJD3c=)
3: qz5i0x4xJkfmTe6dozsZBG3TPU0.roa (hash: ooUbJjUT5M24S8q2RLHISS9XM6QlSckyAXcafyUdbOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:f8:98:8e:81:b4:83:30:b3:8a:59:9a:4b:78:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Sep 22 13:01:26 2026 GMT
Not After : Sep 23 13:01:26 2026 GMT
Subject: CN=51f6284fd965e8bf68f4568a97efb7f085f29338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3e:e7:36:32:6c:34:42:f5:22:c6:f4:60:61:
b5:e3:47:a3:6e:8b:97:db:e3:1b:85:8d:9c:c5:95:
a5:ee:32:e6:55:7c:b5:e8:6e:d1:47:4c:0d:98:31:
69:49:24:f0:72:23:d0:57:cb:a6:d0:69:04:02:7d:
4b:3e:c5:c8:1b:3c:f5:eb:b0:c3:65:1d:67:28:c2:
c2:26:63:fc:ad:5b:79:8b:5b:f2:37:0b:7a:f6:5c:
b2:b2:49:ee:73:98:35:a5:b9:3d:e5:07:ab:fa:52:
11:6a:f1:fb:e0:fa:f7:f3:36:16:4a:60:e3:0a:8c:
63:57:67:02:ed:ef:f5:87:b8:e0:72:17:38:82:3f:
84:0a:a8:50:cc:d4:0a:07:69:b9:42:f3:71:eb:40:
54:ca:f6:c7:60:ba:11:a3:b6:a6:64:70:5f:3f:46:
52:a5:17:0f:59:5f:57:ba:96:8c:b4:ce:93:af:ad:
8d:f0:93:a7:98:0f:32:d5:34:20:d2:51:34:90:4d:
45:4a:17:dc:ba:77:6c:83:c2:33:33:51:56:ff:4d:
ef:a4:b8:3e:f3:18:f9:9c:ee:e5:d1:1f:15:ef:d1:
e3:d3:d7:dd:95:68:da:96:a0:3e:18:88:d9:dd:a0:
64:b8:b0:ef:5a:ed:9a:de:c4:95:2e:96:36:e1:62:
24:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F6:28:4F:D9:65:E8:BF:68:F4:56:8A:97:EF:B7:F0:85:F2:93:38
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:cb:64:d5:9e:1c:04:61:d9:7d:61:9b:87:7f:85:24:0d:eb:
49:48:64:b7:26:27:0c:37:b6:76:71:9f:b8:d9:84:41:0a:9c:
85:d2:48:7f:9c:85:3c:88:a1:a6:8a:89:20:11:9e:88:62:1d:
e9:83:49:7f:31:59:94:44:f5:a2:e3:db:e6:35:7a:84:77:06:
c2:62:43:44:0a:20:da:cf:f2:61:0b:a1:6b:91:5a:f8:9d:aa:
a6:e0:fc:9f:c6:42:f5:4f:98:b3:ac:8d:96:84:c9:dc:51:4b:
c5:29:2f:e8:c2:da:07:66:b8:fd:de:1b:bd:ca:ff:3f:48:80:
86:d4:1d:fe:bd:6c:e0:93:21:09:6b:a1:7c:3b:c5:77:15:64:
a2:12:c1:90:28:f1:f9:1e:80:d3:7b:8c:f0:12:d8:4b:4b:c2:
cd:3c:f9:73:7d:6e:1a:d7:1c:eb:08:a8:09:12:1e:44:63:90:
dd:c8:82:a3:21:be:83:d3:92:fa:0c:52:9c:62:89:48:14:b2:
ce:75:ff:25:2c:f3:dd:0f:4e:08:27:a6:3a:b0:fc:b8:2f:e1:
41:5e:c0:29:75:cc:5e:4f:7a:32:02:10:e8:fb:33:89:c9:da:
d0:72:15:d0:41:bc:91:4d:84:4f:79:a2:a4:33:a7:a1:35:a4:
33:50:79:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJNPiYjoG0gzCzilmaS3gEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNGRkMmQwNmQ5MjBlNDAzOTMzZmRiMmNkMTk4NDg5MzU1
MjU3OWMwHhcNMjYwOTIyMTMwMTI2WhcNMjYwOTIzMTMwMTI2WjAzMTEwLwYDVQQD
Eyg1MWY2Mjg0ZmQ5NjVlOGJmNjhmNDU2OGE5N2VmYjdmMDg1ZjI5MzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT7nNjJsNEL1Isb0YGG140ejbouX
2+MbhY2cxZWl7jLmVXy16G7RR0wNmDFpSSTwciPQV8um0GkEAn1LPsXIGzz167DD
ZR1nKMLCJmP8rVt5i1vyNwt69lyysknuc5g1pbk95Qer+lIRavH74Pr38zYWSmDj
CoxjV2cC7e/1h7jgchc4gj+ECqhQzNQKB2m5QvNx60BUyvbHYLoRo7amZHBfP0ZS
pRcPWV9XupaMtM6Tr62N8JOnmA8y1TQg0lE0kE1FShfcundsg8IzM1FW/03vpLg+
8xj5nO7l0R8V79Hj09fdlWjalqA+GIjZ3aBkuLDvWu2a3sSVLpY24WIkYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFH2KE/ZZei/aPRWipfvt/CF8pM4MB8GA1UdIwQY
MBaAFI1N0tBtkg5AOTP9ss0ZhIk1UlecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mNjIxYTctZTA4MC00MjU1LTkyNmQt
MzJmZjMxY2VlYzhiLzEvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mNjIxYTctZTA4MC00MjU1LTkyNmQtMzJmZjMxY2VlYzhi
LzEvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhstk1Z4c
BGHZfWGbh3+FJA3rSUhktyYnDDe2dnGfuNmEQQqchdJIf5yFPIihpoqJIBGeiGId
6YNJfzFZlET1ouPb5jV6hHcGwmJDRAog2s/yYQuha5Fa+J2qpuD8n8ZC9U+Ys6yN
loTJ3FFLxSkv6MLaB2a4/d4bvcr/P0iAhtQd/r1s4JMhCWuhfDvFdxVkohLBkCjx
+R6A03uM8BLYS0vCzTz5c31uGtcc6wioCRIeRGOQ3ciCoyG+g9OS+gxSnGKJSBSy
znX/JSzz3Q9OCCemOrD8uC/hQV7AKXXMXk96MgIQ6Pszicna0HIV0EG8kU2ET3mi
pDOnoTWkM1B51Q==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:22:26 2026 by rpki-client