Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
File: jjvz0Ldl8upCRh0SN85-reQ7aK8.mft (raw, json)
Hash identifier: I7gWvA8sv53RvwWQPITJ7h4+SGB2T56h75hjp0xKOeQ=
Subject key identifier: 40:80:E1:A9:67:2C:31:0A:A7:69:E5:80:11:B3:D8:03:E2:66:EB:AD
Authority key identifier: 8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
Certificate issuer: /CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Certificate serial: 01A12B448980647EA687752C43B955AA842D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
Manifest number: 10C3
Signing time: Sun 11 Oct 2026 14:01:14 +0000
Manifest this update: Sun 11 Oct 2026 14:01:14 +0000
Manifest next update: Mon 12 Oct 2026 14:01:14 +0000
Files and hashes: 1: K4KaGgPmLYRO5soG4eqjbkAncaI.roa (hash: +VJK/j11hj/8ZaPbxR19b24TkZkYatUXvpZgb0IWSzc=)
2: jjvz0Ldl8upCRh0SN85-reQ7aK8.crl (hash: /tdkmkx5po8SRcvURv+YOO4SqrUg0esgoB+xPAVOVR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:89:80:64:7e:a6:87:75:2c:43:b9:55:aa:84:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Validity
Not Before: Oct 11 14:01:14 2026 GMT
Not After : Oct 12 14:01:14 2026 GMT
Subject: CN=4080e1a9672c310aa769e58011b3d803e266ebad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e1:ae:99:2f:e6:31:95:33:0d:47:8a:0a:2f:
d4:84:2b:f4:90:ea:c9:af:d1:3e:14:d2:24:31:50:
68:23:e4:65:ea:53:79:a3:74:20:2d:38:02:5b:d6:
54:79:4c:70:75:6b:f5:c8:a9:0c:ad:e9:e6:4a:e7:
f4:a8:bb:aa:96:61:71:42:b4:f9:b2:60:eb:b5:5b:
80:9c:d0:bc:b5:d5:a0:b9:64:bb:b4:07:94:1b:1b:
e8:a1:03:51:65:79:ef:20:65:f2:e7:c9:b1:84:21:
d6:79:16:31:68:b1:d8:02:1d:f9:bf:d3:88:09:69:
cb:92:01:a3:70:da:54:ca:c2:1b:89:e6:96:ce:78:
78:a9:60:ed:86:98:93:7e:3b:94:ae:3f:37:b1:b9:
51:6a:12:56:0b:58:0e:95:ab:59:3e:46:1f:37:b5:
b5:24:8e:a8:bb:0b:ec:9f:c7:80:54:0d:50:bf:11:
5c:f8:78:6d:4e:06:ae:18:ac:ba:73:06:98:47:08:
22:a9:96:08:cb:48:51:58:b5:81:82:83:ef:29:91:
aa:a2:49:3a:db:67:b5:33:ab:5c:cb:14:f1:55:48:
f9:df:10:92:9d:99:52:d2:8a:b0:aa:d8:bd:1f:43:
42:a0:ce:b3:a9:9d:b2:f6:98:99:e2:0b:3c:9f:a8:
2b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:80:E1:A9:67:2C:31:0A:A7:69:E5:80:11:B3:D8:03:E2:66:EB:AD
X509v3 Authority Key Identifier:
keyid:8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9b:6a:46:f5:51:b1:48:35:db:1e:d8:74:07:8b:29:85:b2:
17:6c:56:f1:25:81:6b:6e:c7:07:96:65:1a:78:6e:2a:16:4a:
58:95:5b:95:44:49:34:69:2e:1a:45:b1:ca:43:73:c0:9a:11:
27:fd:21:16:35:5e:5e:d1:65:66:48:cf:81:4b:6d:74:6e:ca:
5e:98:97:19:67:42:95:fa:94:7a:9d:8f:ca:4f:ac:15:21:ad:
8f:14:df:ad:d0:29:00:ef:75:77:77:d6:f3:6b:50:5c:c6:3e:
79:d1:37:df:e9:54:24:2c:c0:fb:8f:53:c1:9f:37:27:5c:29:
bd:e2:68:2c:d9:90:8b:d2:c7:c6:fe:5b:76:6c:ba:a7:6c:81:
74:98:02:13:b0:84:74:ac:1a:cd:6e:35:7f:19:11:79:ac:cc:
a2:2b:cf:e6:ec:57:b2:e9:13:ea:22:4b:c0:60:b5:ec:30:26:
63:0c:1b:c9:16:37:9c:3d:56:ef:0a:ec:54:4f:79:67:f6:29:
f7:1f:70:d2:9c:d3:ae:d5:69:10:83:9c:01:ba:09:61:d5:35:
73:1b:39:14:91:9f:32:97:78:87:d7:46:cd:07:37:4d:c1:29:
39:a5:4e:29:00:72:1e:7d:38:26:81:2a:f5:db:5e:10:07:7b:
34:22:f7:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErRImAZH6mh3UsQ7lVqoQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlM2JmM2QwYjc2NWYyZWE0MjQ2MWQxMjM3Y2U3ZWFkZTQz
YjY4YWYwHhcNMjYxMDExMTQwMTE0WhcNMjYxMDEyMTQwMTE0WjAzMTEwLwYDVQQD
Eyg0MDgwZTFhOTY3MmMzMTBhYTc2OWU1ODAxMWIzZDgwM2UyNjZlYmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OGumS/mMZUzDUeKCi/UhCv0kOrJ
r9E+FNIkMVBoI+Rl6lN5o3QgLTgCW9ZUeUxwdWv1yKkMrenmSuf0qLuqlmFxQrT5
smDrtVuAnNC8tdWguWS7tAeUGxvooQNRZXnvIGXy58mxhCHWeRYxaLHYAh35v9OI
CWnLkgGjcNpUysIbieaWznh4qWDthpiTfjuUrj83sblRahJWC1gOlatZPkYfN7W1
JI6ouwvsn8eAVA1QvxFc+HhtTgauGKy6cwaYRwgiqZYIy0hRWLWBgoPvKZGqokk6
22e1M6tcyxTxVUj53xCSnZlS0oqwqti9H0NCoM6zqZ2y9piZ4gs8n6grnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECA4alnLDEKp2nlgBGz2APiZuutMB8GA1UdIwQY
MBaAFI4789C3ZfLqQkYdEjfOfq3kO2ivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamp2ejBMZGw4dXBDUmgwU044NS1yZVE3YUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82MTkyNTAtMTJlNy00ZWExLTkzOWMt
NTE3NjZiOWNhODZmLzEvamp2ejBMZGw4dXBDUmgwU044NS1yZVE3YUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82MTkyNTAtMTJlNy00ZWExLTkzOWMtNTE3NjZiOWNhODZm
LzEvamp2ejBMZGw4dXBDUmgwU044NS1yZVE3YUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJtqRvVR
sUg12x7YdAeLKYWyF2xW8SWBa27HB5ZlGnhuKhZKWJVblURJNGkuGkWxykNzwJoR
J/0hFjVeXtFlZkjPgUttdG7KXpiXGWdClfqUep2Pyk+sFSGtjxTfrdApAO91d3fW
82tQXMY+edE33+lUJCzA+49TwZ83J1wpveJoLNmQi9LHxv5bdmy6p2yBdJgCE7CE
dKwazW41fxkReazMoivP5uxXsukT6iJLwGC17DAmYwwbyRY3nD1W7wrsVE95Z/Yp
9x9w0pzTrtVpEIOcAboJYdU1cxs5FJGfMpd4h9dGzQc3TcEpOaVOKQByHn04JoEq
9dteEAd7NCL3Qw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:45:19 2026 by rpki-client