Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
File: jFh6LAkWf52nMnTSmPmf210od3s.mft (raw, json)
Hash identifier: tsaI1u1obK1gPE/WpN44OEaz1Pg496u1L7ROacYTCac=
Subject key identifier: 9A:5E:75:B8:1F:6E:68:44:83:B0:10:06:5E:C8:D4:21:97:0E:BC:C4
Authority key identifier: 8C:58:7A:2C:09:16:7F:9D:A7:32:74:D2:98:F9:9F:DB:5D:28:77:7B
Certificate issuer: /CN=8c587a2c09167f9da73274d298f99fdb5d28777b
Certificate serial: 01A0C9344EA256B31E1A401A284838E2A79E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
Manifest number: 0119
Signing time: Tue 22 Sep 2026 13:00:43 +0000
Manifest this update: Tue 22 Sep 2026 13:00:43 +0000
Manifest next update: Wed 23 Sep 2026 13:00:43 +0000
Files and hashes: 1: IeUZpA_cRarzmmAKl1mTNeS2w6Q.roa (hash: Zxv/aB//3mF6nuzItLAr8aMXf7kFc9bokYqKElvga2c=)
2: jFh6LAkWf52nMnTSmPmf210od3s.crl (hash: AbLedoZ/6w5DclcIUpmBmZsWzHe4NaoiYgsuoAvdCzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:4e:a2:56:b3:1e:1a:40:1a:28:48:38:e2:a7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c587a2c09167f9da73274d298f99fdb5d28777b
Validity
Not Before: Sep 22 13:00:43 2026 GMT
Not After : Sep 23 13:00:43 2026 GMT
Subject: CN=9a5e75b81f6e684483b010065ec8d421970ebcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:a3:05:d8:d1:9d:4d:36:35:f0:93:9a:3d:
c8:51:3a:78:94:f9:3c:cb:76:7b:9b:81:c5:e9:ba:
76:b5:53:39:1f:e5:23:13:b2:87:d4:89:7b:d8:41:
2b:b6:72:c1:d1:92:f1:11:91:bc:03:4d:e3:18:83:
31:7c:d6:a7:01:b1:9f:6d:2a:de:53:10:a0:1d:af:
73:24:a8:7b:86:75:00:0f:d3:d8:e7:57:38:29:fb:
38:e0:40:60:54:47:4e:7b:e1:af:82:89:70:3c:12:
2f:57:dd:26:47:66:75:28:12:12:cb:2d:be:1b:ae:
55:1e:f9:ca:ae:d1:09:ac:13:9d:5d:fa:8e:27:d4:
97:3b:cf:91:3e:23:e5:30:98:21:72:c1:5f:84:69:
8e:4b:3e:83:e9:f3:ad:ac:8b:f9:9a:c7:41:cf:06:
85:62:76:66:d6:5b:37:35:e3:93:61:25:e9:11:df:
c2:1f:37:62:6a:ff:45:d4:a8:c4:89:b9:3f:90:3b:
34:d8:00:94:50:ae:a6:07:fc:a8:54:df:a9:1b:d8:
68:56:22:57:36:c5:2c:b9:bd:44:57:11:be:05:19:
e2:49:bd:43:90:5e:4c:42:d8:a8:83:88:07:75:e2:
ce:de:7c:df:23:e5:2f:90:87:70:1a:dc:da:fe:8f:
7d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5E:75:B8:1F:6E:68:44:83:B0:10:06:5E:C8:D4:21:97:0E:BC:C4
X509v3 Authority Key Identifier:
keyid:8C:58:7A:2C:09:16:7F:9D:A7:32:74:D2:98:F9:9F:DB:5D:28:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d6:17:50:67:65:56:6c:53:84:59:d8:cb:53:91:0f:42:9b:
8e:37:79:1b:5f:bf:e0:0a:67:f9:4f:6b:15:58:29:57:d5:d7:
ce:e7:82:5e:6e:47:92:d8:21:ec:b8:b8:23:f4:73:54:c9:0d:
dc:b7:9b:20:02:73:ef:ea:ba:e6:77:cb:ff:68:7a:39:d6:24:
ab:2d:12:78:d6:f1:dd:23:94:d5:29:5f:a8:51:9f:d7:26:cd:
d3:e8:d3:a7:13:4b:75:26:bc:a0:8a:2f:dd:c4:ce:dd:79:f2:
8d:79:30:8e:4a:ba:78:40:d1:14:f9:41:88:cc:9b:af:27:95:
f8:19:43:31:76:a6:2d:b5:4b:aa:e3:ce:22:42:dc:20:1b:48:
aa:f2:a8:20:af:81:b6:45:cd:48:47:36:31:ee:7c:98:e0:f2:
50:de:18:a2:6e:8f:15:dc:c1:b6:e5:a0:4b:45:0c:a8:d6:ff:
39:e2:45:a0:24:4e:a2:a6:3b:57:6f:8c:96:be:23:37:4a:a7:
55:99:34:2b:7b:1c:75:7c:0a:e3:87:8e:db:22:0b:2c:6c:b8:
55:57:51:93:ae:24:b7:9e:97:23:36:59:28:e9:67:7b:51:f4:
6d:ec:c1:d4:be:f7:42:35:d9:49:fc:03:1c:e2:5d:b2:78:b7:
bd:a1:e5:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJNE6iVrMeGkAaKEg44qeeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNTg3YTJjMDkxNjdmOWRhNzMyNzRkMjk4Zjk5ZmRiNWQy
ODc3N2IwHhcNMjYwOTIyMTMwMDQzWhcNMjYwOTIzMTMwMDQzWjAzMTEwLwYDVQQD
Eyg5YTVlNzViODFmNmU2ODQ0ODNiMDEwMDY1ZWM4ZDQyMTk3MGViY2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaujBdjRnU02NfCTmj3IUTp4lPk8
y3Z7m4HF6bp2tVM5H+UjE7KH1Il72EErtnLB0ZLxEZG8A03jGIMxfNanAbGfbSre
UxCgHa9zJKh7hnUAD9PY51c4Kfs44EBgVEdOe+GvgolwPBIvV90mR2Z1KBISyy2+
G65VHvnKrtEJrBOdXfqOJ9SXO8+RPiPlMJghcsFfhGmOSz6D6fOtrIv5msdBzwaF
YnZm1ls3NeOTYSXpEd/CHzdiav9F1KjEibk/kDs02ACUUK6mB/yoVN+pG9hoViJX
NsUsub1EVxG+BRniSb1DkF5MQtiog4gHdeLO3nzfI+UvkIdwGtza/o994wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpedbgfbmhEg7AQBl7I1CGXDrzEMB8GA1UdIwQY
MBaAFIxYeiwJFn+dpzJ00pj5n9tdKHd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakZoNkxBa1dmNTJuTW5UU21QbWYyMTBvZDNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9hMmMyYjQtMmZjOS00NWQ3LWFmNDgt
MzU2NGJhYjIyMGVhLzEvakZoNkxBa1dmNTJuTW5UU21QbWYyMTBvZDNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9hMmMyYjQtMmZjOS00NWQ3LWFmNDgtMzU2NGJhYjIyMGVh
LzEvakZoNkxBa1dmNTJuTW5UU21QbWYyMTBvZDNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9YXUGdl
VmxThFnYy1ORD0Kbjjd5G1+/4Apn+U9rFVgpV9XXzueCXm5Hktgh7Li4I/RzVMkN
3LebIAJz7+q65nfL/2h6OdYkqy0SeNbx3SOU1SlfqFGf1ybN0+jTpxNLdSa8oIov
3cTO3XnyjXkwjkq6eEDRFPlBiMybryeV+BlDMXamLbVLquPOIkLcIBtIqvKoIK+B
tkXNSEc2Me58mODyUN4Yom6PFdzBtuWgS0UMqNb/OeJFoCROoqY7V2+Mlr4jN0qn
VZk0K3scdXwK44eO2yILLGy4VVdRk64kt56XIzZZKOlne1H0bezB1L73QjXZSfwD
HOJdsni3vaHlWw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:11:12 2026 by rpki-client