Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
File: Jm8xrRcB38ohu_SmXgfyXBzyssg.mft (raw, json)
Hash identifier: 7N5ozH7PlX7+qvgXt5YbjJ5UQ4zKQ/Uf8YOb6F13pX0=
Subject key identifier: 20:7B:FF:E3:99:B7:3B:5D:67:54:8C:A5:67:03:A9:67:69:BB:7D:93
Authority key identifier: 26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8
Certificate issuer: /CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
Certificate serial: 01A133D9B1D8C7B559DEA14D35E2DF37B53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
Manifest number: 0B1C
Signing time: Tue 13 Oct 2026 06:01:06 +0000
Manifest this update: Tue 13 Oct 2026 06:01:06 +0000
Manifest next update: Wed 14 Oct 2026 06:01:06 +0000
Files and hashes: 1: Jm8xrRcB38ohu_SmXgfyXBzyssg.crl (hash: /ZxPCwRuVQ8KdQbq1x4o7pVfeFmr1qgetRBdCZrjWAM=)
2: bZ2MoSlfcA_Bg7BrRKE2leLFknc.roa (hash: mlGeYAkzIiaMQu2uNg0bx5zSdfDctbxIGGNO6WnD0zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:d9:b1:d8:c7:b5:59:de:a1:4d:35:e2:df:37:b5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
Validity
Not Before: Oct 13 06:01:06 2026 GMT
Not After : Oct 14 06:01:06 2026 GMT
Subject: CN=207bffe399b73b5d67548ca56703a96769bb7d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:08:4a:9b:70:1d:07:a1:36:f2:a5:12:04:9f:
54:3e:74:76:c0:13:6e:42:87:95:b4:43:de:0d:65:
88:c9:0e:6a:7b:53:3f:06:5d:58:79:89:c9:1c:37:
e4:16:ef:21:4e:df:27:fd:d4:42:09:c9:a5:a6:22:
4e:de:da:61:41:bd:62:d3:d1:7b:89:39:5e:27:02:
94:10:97:2b:46:f5:5c:5a:3a:ff:19:87:54:6c:0a:
8f:81:c2:1c:d6:f3:95:59:c7:f8:bc:90:52:64:a2:
df:3d:d1:eb:02:c8:23:9d:d8:de:ab:62:e5:11:80:
3d:b3:21:96:d7:05:7a:02:c2:14:04:76:75:43:cf:
fa:ce:9e:94:c5:83:1c:31:bd:76:12:06:1c:d8:77:
40:2d:ab:90:b2:ab:51:e2:4d:ad:c4:ed:2a:17:51:
bf:51:c4:4b:78:41:e6:d6:cc:45:de:b2:d2:53:d2:
bb:95:dd:4d:4b:37:76:18:2e:df:f3:55:64:b6:af:
50:72:b5:6b:d6:7f:66:90:ef:46:86:67:74:b1:b3:
d6:2c:09:bf:67:8a:6f:77:d8:c8:6c:aa:98:3c:6e:
44:fb:f5:2c:44:b5:44:32:03:d1:ad:d6:1e:c4:26:
1e:a1:03:a4:19:df:f3:50:1c:57:13:23:8f:1d:91:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7B:FF:E3:99:B7:3B:5D:67:54:8C:A5:67:03:A9:67:69:BB:7D:93
X509v3 Authority Key Identifier:
keyid:26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1d:bf:34:d7:ce:77:a3:b0:6d:a8:57:21:0f:01:ff:1f:af:
49:8c:a0:e6:ef:1e:97:50:b6:59:a5:03:40:dd:57:ff:62:55:
33:98:1d:86:e6:ad:96:20:dc:f8:3f:b2:04:d7:5c:a3:af:0b:
ba:db:65:b5:96:49:3c:c4:53:f8:01:fc:88:24:c3:38:70:6d:
f1:55:65:d5:c4:11:bf:ac:fd:65:5f:0d:40:6f:28:87:e6:2a:
4f:94:04:40:e5:ff:04:6c:d5:e9:83:b2:40:e5:70:1d:c2:ad:
81:4f:e5:d3:17:23:ff:3c:28:5e:bc:c3:c0:de:39:c7:0f:d7:
26:87:32:31:22:7e:42:7c:82:04:c5:c1:d9:85:67:8d:79:df:
34:c0:c4:0a:a7:91:4a:ee:77:2e:53:61:90:ee:a9:fa:a9:3c:
8e:e9:1e:16:0a:a0:0f:74:5b:62:fc:8c:09:4f:2a:d1:ae:e1:
80:6d:e2:67:16:ce:79:ab:09:07:c8:ad:2a:12:87:a1:7f:e1:
e6:c1:bb:36:3d:db:f3:b7:80:00:00:c9:d4:5c:32:c9:49:41:
19:50:1f:32:52:76:3b:e7:96:82:3a:b1:64:f2:11:38:91:1b:
1b:8a:92:53:b6:54:2d:cb:ff:d9:4b:75:a3:d2:b3:46:f4:29:
36:3c:2e:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEz2bHYx7VZ3qFNNeLfN7U9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NmYzMWFkMTcwMWRmY2EyMWJiZjRhNjVlMDdmMjVjMWNm
MmIyYzgwHhcNMjYxMDEzMDYwMTA2WhcNMjYxMDE0MDYwMTA2WjAzMTEwLwYDVQQD
EygyMDdiZmZlMzk5YjczYjVkNjc1NDhjYTU2NzAzYTk2NzY5YmI3ZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkghKm3AdB6E28qUSBJ9UPnR2wBNu
QoeVtEPeDWWIyQ5qe1M/Bl1YeYnJHDfkFu8hTt8n/dRCCcmlpiJO3tphQb1i09F7
iTleJwKUEJcrRvVcWjr/GYdUbAqPgcIc1vOVWcf4vJBSZKLfPdHrAsgjndjeq2Ll
EYA9syGW1wV6AsIUBHZ1Q8/6zp6UxYMcMb12EgYc2HdALauQsqtR4k2txO0qF1G/
UcRLeEHm1sxF3rLSU9K7ld1NSzd2GC7f81Vktq9QcrVr1n9mkO9Ghmd0sbPWLAm/
Z4pvd9jIbKqYPG5E+/UsRLVEMgPRrdYexCYeoQOkGd/zUBxXEyOPHZEc+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCB7/+OZtztdZ1SMpWcDqWdpu32TMB8GA1UdIwQY
MBaAFCZvMa0XAd/KIbv0pl4H8lwc8rLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm04eHJSY0IzOG9odV9TbVhnZnlYQnp5c3NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80NDM3ZDYtMjJkOC00MDFiLTgxMzct
MTBiZjc3YjIwZGFjLzEvSm04eHJSY0IzOG9odV9TbVhnZnlYQnp5c3NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi80NDM3ZDYtMjJkOC00MDFiLTgxMzctMTBiZjc3YjIwZGFj
LzEvSm04eHJSY0IzOG9odV9TbVhnZnlYQnp5c3NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADh2/NNfO
d6OwbahXIQ8B/x+vSYyg5u8el1C2WaUDQN1X/2JVM5gdhuatliDc+D+yBNdco68L
uttltZZJPMRT+AH8iCTDOHBt8VVl1cQRv6z9ZV8NQG8oh+YqT5QEQOX/BGzV6YOy
QOVwHcKtgU/l0xcj/zwoXrzDwN45xw/XJocyMSJ+QnyCBMXB2YVnjXnfNMDECqeR
Su53LlNhkO6p+qk8jukeFgqgD3RbYvyMCU8q0a7hgG3iZxbOeasJB8itKhKHoX/h
5sG7Nj3b87eAAADJ1FwyyUlBGVAfMlJ2O+eWgjqxZPIROJEbG4qSU7ZULcv/2Ut1
o9KzRvQpNjwu7g==
-----END CERTIFICATE-----
Generated at Tue Oct 13 10:06:39 2026 by rpki-client