Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: nbwC5xc5JPPH/TP8eJoCZ2yl2fM+UbBh/wbVb+jZjac=
Subject key identifier: 5B:C7:C6:57:1D:B2:EB:6E:3D:40:50:44:76:36:F9:93:C5:CE:9E:E8
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 01A1385C06154EAECCE9447A1A11E0AFE950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0F9F
Signing time: Wed 14 Oct 2026 03:01:57 +0000
Manifest this update: Wed 14 Oct 2026 03:01:57 +0000
Manifest next update: Thu 15 Oct 2026 03:01:57 +0000
Files and hashes: 1: KyIkZp5v8qniJmGJJW64WpulkNA.roa (hash: 1AsKxqyIstssG9Pu2llDF8+d4jVczV5NqO2oa4GLJAk=)
2: bMwuPcwxqY9GWDGFGxnpBignWiw.roa (hash: 6jn0f3vV9KnwoCtSt2OI78m/Tno09+LsXBuJK2Ylj8E=)
3: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: bXxw3jViVJr2N/lP8gSHESwzjeIBcMpgOHdC8G1LHww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 03:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:5c:06:15:4e:ae:cc:e9:44:7a:1a:11:e0:af:e9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Oct 14 03:01:57 2026 GMT
Not After : Oct 15 03:01:57 2026 GMT
Subject: CN=5bc7c6571db2eb6e3d4050447636f993c5ce9ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:6f:29:24:a1:b6:d5:7a:ff:6c:c8:fc:01:
63:c7:85:7d:6c:a8:d8:82:b5:e7:39:64:92:f3:a2:
3e:e6:84:93:f0:9e:8b:b5:e6:78:58:b6:f5:66:23:
82:6e:d2:05:56:92:eb:ab:db:94:b3:e7:2c:c2:bd:
29:89:54:c2:5c:df:09:11:f8:99:ff:f6:48:31:2e:
ca:5f:71:9c:c1:be:0d:fc:9f:28:75:d2:fa:11:fc:
7f:3d:5c:40:73:57:c4:47:ad:3e:d1:84:b9:ad:d1:
8c:13:f5:a9:ac:3d:92:bf:80:aa:e0:ef:1f:fc:7b:
8e:b9:c8:53:70:6d:5b:5a:ee:d6:d2:f3:67:b0:44:
79:4f:03:21:f5:cf:c0:6c:d5:76:c3:34:0b:8d:58:
6c:26:d1:05:7a:0e:fb:86:bc:f0:7a:53:c4:1b:93:
aa:ae:11:7f:4b:21:78:3c:7a:27:7a:22:c3:00:ed:
f8:37:72:6d:87:a7:ce:c1:a9:c5:52:92:38:cc:18:
98:7d:31:4a:e9:10:86:13:d0:aa:5e:d7:19:cc:ad:
27:3c:51:ae:74:bd:54:03:b5:81:67:b8:69:76:fa:
22:e6:b2:e4:3e:a8:33:5a:fb:9c:bc:4a:cc:ba:e1:
03:9a:73:8e:95:56:af:d4:82:c6:7c:20:a3:a6:7f:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C7:C6:57:1D:B2:EB:6E:3D:40:50:44:76:36:F9:93:C5:CE:9E:E8
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6c:b2:8c:29:c4:2f:0e:dc:9d:e6:fb:21:fc:f8:2a:77:90:
4b:cb:63:0f:f1:66:7d:27:49:23:71:3a:51:a2:b9:72:b8:f2:
a4:4c:d8:da:07:e9:d8:98:47:df:24:88:75:95:ce:8a:b6:5a:
f4:c8:02:14:23:c1:03:60:80:d0:53:fc:0d:2b:56:02:14:90:
80:75:d3:b9:33:f8:dd:73:4c:87:dd:e7:56:04:09:3b:1b:3e:
3f:f7:5e:62:75:b4:6f:98:7e:14:be:db:74:5c:08:1a:e4:c2:
c8:3c:27:2a:43:e0:84:aa:37:d4:86:48:9f:9e:42:52:4f:07:
06:9c:ed:a6:e9:48:c1:b4:ff:c5:5f:2d:e2:4d:28:56:1d:6f:
a3:11:f6:0d:30:a5:13:40:6f:95:c9:bb:24:b5:b2:88:df:06:
12:fd:86:10:b7:f0:54:4d:5c:7d:29:4d:e5:f6:08:d6:18:d7:
e7:79:69:d2:0e:d1:ee:6a:6b:52:80:80:b1:2a:2d:0b:c5:c5:
e3:4e:b4:be:4f:a7:95:97:78:25:fd:57:5f:7b:aa:74:be:d2:
e6:66:a4:bf:a0:84:b2:a3:3d:bd:fc:22:a1:73:75:84:9c:39:
ff:d2:29:33:18:c6:ad:b6:c3:99:18:1d:2c:0d:54:71:39:43:
25:05:08:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE4XAYVTq7M6UR6GhHgr+lQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZjg5M2VkZjMzMjA4ZDdhMmNmNjIyNjg2MTM3NjlmYjQ5
NjdjNjYwHhcNMjYxMDE0MDMwMTU3WhcNMjYxMDE1MDMwMTU3WjAzMTEwLwYDVQQD
Eyg1YmM3YzY1NzFkYjJlYjZlM2Q0MDUwNDQ3NjM2Zjk5M2M1Y2U5ZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq55vKSShttV6/2zI/AFjx4V9bKjY
grXnOWSS86I+5oST8J6LteZ4WLb1ZiOCbtIFVpLrq9uUs+cswr0piVTCXN8JEfiZ
//ZIMS7KX3Gcwb4N/J8oddL6Efx/PVxAc1fER60+0YS5rdGME/WprD2Sv4Cq4O8f
/HuOuchTcG1bWu7W0vNnsER5TwMh9c/AbNV2wzQLjVhsJtEFeg77hrzwelPEG5Oq
rhF/SyF4PHoneiLDAO34N3Jth6fOwanFUpI4zBiYfTFK6RCGE9CqXtcZzK0nPFGu
dL1UA7WBZ7hpdvoi5rLkPqgzWvucvErMuuEDmnOOlVav1ILGfCCjpn+8kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvHxlcdsutuPUBQRHY2+ZPFzp7oMB8GA1UdIwQY
MBaAFI34k+3zMgjXos9iJoYTdp+0lnxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYt
Zjg3Nzg3YjFkMDNjLzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYtZjg3Nzg3YjFkMDNj
LzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWyyjCnE
Lw7cneb7Ifz4KneQS8tjD/FmfSdJI3E6UaK5crjypEzY2gfp2JhH3ySIdZXOirZa
9MgCFCPBA2CA0FP8DStWAhSQgHXTuTP43XNMh93nVgQJOxs+P/deYnW0b5h+FL7b
dFwIGuTCyDwnKkPghKo31IZIn55CUk8HBpztpulIwbT/xV8t4k0oVh1voxH2DTCl
E0Bvlcm7JLWyiN8GEv2GELfwVE1cfSlN5fYI1hjX53lp0g7R7mprUoCAsSotC8XF
4060vk+nlZd4Jf1XX3uqdL7S5makv6CEsqM9vfwioXN1hJw5/9IpMxjGrbbDmRgd
LA1UcTlDJQUI/w==
-----END CERTIFICATE-----
Generated at Wed Oct 14 11:51:13 2026 by rpki-client