Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
File: jFh6LAkWf52nMnTSmPmf210od3s.mft (raw, json)
Hash identifier: Bnl9/BE7HqNFNDYLIe50ACVdEoi3B5YnZjaC2wuTiY0=
Subject key identifier: 42:A1:8A:2C:63:5F:49:21:D3:CD:E6:D3:03:35:C5:80:EC:9D:E0:DC
Authority key identifier: 8C:58:7A:2C:09:16:7F:9D:A7:32:74:D2:98:F9:9F:DB:5D:28:77:7B
Certificate issuer: /CN=8c587a2c09167f9da73274d298f99fdb5d28777b
Certificate serial: 019EC1B75C855F28CAA1A88E8FA0165C6A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
Manifest number: 0C
Signing time: Sat 13 Jun 2026 16:01:19 +0000
Manifest this update: Sat 13 Jun 2026 16:01:19 +0000
Manifest next update: Sun 14 Jun 2026 16:01:19 +0000
Files and hashes: 1: IeUZpA_cRarzmmAKl1mTNeS2w6Q.roa (hash: Zxv/aB//3mF6nuzItLAr8aMXf7kFc9bokYqKElvga2c=)
2: jFh6LAkWf52nMnTSmPmf210od3s.crl (hash: 18s5G2KYSJLjPSouNmwISL8f3HLPhfbp98QrNKfnIgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:5c:85:5f:28:ca:a1:a8:8e:8f:a0:16:5c:6a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c587a2c09167f9da73274d298f99fdb5d28777b
Validity
Not Before: Jun 13 16:01:19 2026 GMT
Not After : Jun 14 16:01:19 2026 GMT
Subject: CN=42a18a2c635f4921d3cde6d30335c580ec9de0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a6:cb:9b:de:2f:03:64:03:29:c5:0b:df:8f:
30:6f:c2:26:90:96:c8:aa:6f:7f:ae:10:a7:fe:62:
51:03:31:05:c6:96:50:67:3b:c1:f7:1f:2a:b3:3b:
64:bb:ca:59:15:df:e9:1e:44:0c:ff:68:f5:f5:38:
55:46:fa:c6:48:25:14:e9:44:c5:0b:03:6a:e6:83:
a6:d8:09:df:5a:02:cc:1a:b7:fc:bd:17:33:7a:1f:
1f:1a:7e:51:ee:89:8a:cb:69:3b:1f:a9:13:0a:f6:
e6:95:f0:d1:be:24:1d:32:a6:f4:5a:93:2c:4f:ef:
9f:1f:eb:d0:8d:0c:ec:97:16:3b:a6:d9:e0:a5:20:
52:28:07:f7:08:5d:fc:ed:c5:4c:51:a8:b2:74:ff:
8d:25:8b:d5:38:56:63:41:b3:99:88:ad:64:ab:b3:
45:36:7d:a1:f6:dc:e5:84:0e:95:24:6b:12:f6:e0:
5c:7d:ca:5e:94:ab:49:6c:d4:db:de:66:28:fd:1a:
3d:43:e2:5c:7a:27:d6:f0:24:0e:df:0e:c8:06:56:
29:09:5c:4e:74:58:c2:01:59:c7:2e:25:33:3d:e7:
10:66:77:96:04:03:ab:31:04:02:0c:c9:d8:9b:4d:
9d:d0:41:8b:83:34:bb:5e:1f:3d:e3:5c:22:fd:0d:
0a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A1:8A:2C:63:5F:49:21:D3:CD:E6:D3:03:35:C5:80:EC:9D:E0:DC
X509v3 Authority Key Identifier:
keyid:8C:58:7A:2C:09:16:7F:9D:A7:32:74:D2:98:F9:9F:DB:5D:28:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:37:43:bd:4a:f5:8c:cb:f6:fa:68:45:2e:54:83:16:1c:fb:
df:af:85:df:81:82:84:a3:40:9b:09:a4:35:b5:0c:ef:cc:a1:
44:a8:78:61:11:2a:15:fc:a4:c1:23:55:c4:55:f8:46:23:fd:
e6:47:23:8d:4b:0a:8a:22:dc:f6:bf:00:9c:5c:b5:ea:64:bc:
75:45:be:96:1d:08:c1:2c:bb:ad:b0:86:b8:17:66:8b:e4:92:
ed:06:94:b4:88:84:f3:c1:36:ef:62:93:67:41:6f:1d:51:3a:
d2:9d:09:81:75:95:f5:86:80:99:a8:2c:5f:89:07:3d:07:fe:
08:b7:e3:8b:07:be:d4:bb:9d:6d:ab:87:2e:c4:82:e8:4b:6c:
08:ef:e8:7e:d2:b9:30:2e:83:00:08:1d:6e:b7:90:77:61:bd:
98:af:16:a7:6a:17:d6:5f:2e:9d:1a:64:2b:f6:cc:8e:05:02:
b8:53:97:a2:fc:50:21:40:f4:2f:9a:22:30:f3:fd:21:c6:82:
0b:0e:15:9c:a9:ce:a0:b2:dd:cc:50:6f:de:01:ad:ec:b0:42:
32:1f:11:07:27:3f:9a:dd:9c:35:fd:15:bf:ca:b4:7c:b1:0b:
c8:c9:51:4b:9b:05:04:e8:7d:c3:35:1f:de:5c:2a:70:c0:87:
14:f4:32:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bt1yFXyjKoaiOj6AWXGpeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNTg3YTJjMDkxNjdmOWRhNzMyNzRkMjk4Zjk5ZmRiNWQy
ODc3N2IwHhcNMjYwNjEzMTYwMTE5WhcNMjYwNjE0MTYwMTE5WjAzMTEwLwYDVQQD
Eyg0MmExOGEyYzYzNWY0OTIxZDNjZGU2ZDMwMzM1YzU4MGVjOWRlMGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwabLm94vA2QDKcUL348wb8ImkJbI
qm9/rhCn/mJRAzEFxpZQZzvB9x8qsztku8pZFd/pHkQM/2j19ThVRvrGSCUU6UTF
CwNq5oOm2AnfWgLMGrf8vRczeh8fGn5R7omKy2k7H6kTCvbmlfDRviQdMqb0WpMs
T++fH+vQjQzslxY7ptngpSBSKAf3CF387cVMUaiydP+NJYvVOFZjQbOZiK1kq7NF
Nn2h9tzlhA6VJGsS9uBcfcpelKtJbNTb3mYo/Ro9Q+JceifW8CQO3w7IBlYpCVxO
dFjCAVnHLiUzPecQZneWBAOrMQQCDMnYm02d0EGLgzS7Xh8941wi/Q0KhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKhiixjX0kh083m0wM1xYDsneDcMB8GA1UdIwQY
MBaAFIxYeiwJFn+dpzJ00pj5n9tdKHd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakZoNkxBa1dmNTJuTW5UU21QbWYyMTBvZDNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9hMmMyYjQtMmZjOS00NWQ3LWFmNDgt
MzU2NGJhYjIyMGVhLzEvakZoNkxBa1dmNTJuTW5UU21QbWYyMTBvZDNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9hMmMyYjQtMmZjOS00NWQ3LWFmNDgtMzU2NGJhYjIyMGVh
LzEvakZoNkxBa1dmNTJuTW5UU21QbWYyMTBvZDNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwDdDvUr1
jMv2+mhFLlSDFhz736+F34GChKNAmwmkNbUM78yhRKh4YREqFfykwSNVxFX4RiP9
5kcjjUsKiiLc9r8AnFy16mS8dUW+lh0IwSy7rbCGuBdmi+SS7QaUtIiE88E272KT
Z0FvHVE60p0JgXWV9YaAmagsX4kHPQf+CLfjiwe+1LudbauHLsSC6EtsCO/oftK5
MC6DAAgdbreQd2G9mK8Wp2oX1l8unRpkK/bMjgUCuFOXovxQIUD0L5oiMPP9IcaC
Cw4VnKnOoLLdzFBv3gGt7LBCMh8RByc/mt2cNf0Vv8q0fLELyMlRS5sFBOh9wzUf
3lwqcMCHFPQyxg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:39:40 2026 by rpki-client