
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File: J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier: PSr2fYad1siZ4FqyN9TlNQK1+2RYVpx7Uu43iv/tg1g=
Subject key identifier: F2:08:9E:EC:F7:E1:C9:6B:05:4F:26:8A:82:63:A4:34:2D:8F:C5:F6
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 01A0C067E88EB5865BE6BEFBF7A042305859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number: 1A6C
Signing time: Sun 20 Sep 2026 20:00:30 +0000
Manifest this update: Sun 20 Sep 2026 20:00:30 +0000
Manifest next update: Mon 21 Sep 2026 20:00:30 +0000
Files and hashes: 1: 1-eXk56W1WcQXJBaon4jYvPO5XKk.asa (hash: 4kMcrktNRWgxl6BULeDgtu/gbF/92oPuNyR3Tirvwvs=)
2: 1KQsz8EMeMqO7bc9e9NUCyualHA.asa (hash: K+ABwTOia6am6qcpzwES7lTBokcCgw4GgL9iAZqzKrs=)
3: EaAMsvwoHBe4yq1jbHkVSMOCcms.roa (hash: tCewwDnNFA4yqzd0eb5IKas5uAfl5Rr1tmwDJ4VUURI=)
4: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: /V25zMq9gpCGuCYESKzR2Uy9xRRUQXO/3h+2ApoiPes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:67:e8:8e:b5:86:5b:e6:be:fb:f7:a0:42:30:58:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: Sep 20 20:00:30 2026 GMT
Not After : Sep 21 20:00:30 2026 GMT
Subject: CN=f2089eecf7e1c96b054f268a8263a4342d8fc5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2b:ad:37:53:13:ce:dc:99:3b:73:71:1d:ae:
e5:d4:9d:ef:92:75:3e:4a:70:a0:42:c2:bb:7a:a9:
59:30:69:2b:9d:40:94:56:bd:12:96:3f:57:36:d7:
3a:28:c7:57:ca:07:b1:50:13:86:02:7c:01:19:35:
25:06:9a:e3:87:94:a4:08:2f:dc:7a:65:18:43:c0:
cf:73:76:08:42:7d:79:a1:da:74:16:5f:f5:06:23:
94:ac:a1:09:9b:af:d1:9b:98:b1:74:70:2a:3f:bc:
0c:db:9f:07:1e:89:8b:a2:35:9c:26:97:f0:ba:9e:
bd:92:ee:3d:02:04:28:20:92:b7:ee:53:00:97:c3:
6f:30:a0:3c:a5:a7:eb:c1:25:81:60:eb:bc:1c:c1:
bd:22:6a:75:7f:9b:bb:59:9b:52:9a:94:fa:2c:f2:
f9:d1:8a:8b:08:75:8d:3d:1a:9b:ea:78:08:96:29:
26:47:18:6e:3a:04:a2:45:02:0b:2d:e9:48:e4:f5:
0d:e6:78:1f:7b:22:bf:2d:ca:1c:65:f1:6d:c3:78:
67:c4:4d:34:14:16:bb:6f:60:44:9a:27:52:13:25:
bb:8d:32:b7:b1:e3:7f:9e:f4:d6:2e:e6:57:f4:4e:
1f:a7:86:c2:d3:87:68:da:6a:77:72:a9:91:b0:2a:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:08:9E:EC:F7:E1:C9:6B:05:4F:26:8A:82:63:A4:34:2D:8F:C5:F6
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a6:17:81:4c:fb:4b:1a:65:5e:fd:d5:8f:7d:3b:2e:a0:37:
c6:04:5a:e0:cc:92:13:d5:89:9b:77:00:b7:57:53:b7:ef:85:
f1:70:b1:93:d6:80:7c:02:87:90:c6:d7:2b:55:c0:bb:2e:9a:
24:c5:ef:2f:7f:1a:95:3b:6b:9b:80:b2:2b:5f:9d:ba:36:01:
9d:47:9f:52:1b:4e:b9:0c:de:a6:67:80:06:22:30:9b:0c:ab:
62:23:31:c3:4a:44:cc:3d:93:5d:b4:76:6f:55:68:9a:87:b2:
b0:02:f6:10:e3:b0:d0:cd:b4:d4:25:7d:2c:0e:92:b0:47:24:
18:fe:1e:19:80:b9:f0:ea:1c:82:be:0c:76:68:64:bd:04:58:
06:43:ce:02:72:24:0d:a1:c3:e5:c3:5a:b3:dd:f2:15:8b:71:
72:b6:7a:48:eb:24:c0:55:89:e6:ea:25:39:2e:5f:51:39:61:
2e:3f:0e:a9:7d:aa:22:07:2a:ba:85:58:3b:db:76:84:72:df:
e8:1d:76:b9:24:c2:a2:c1:28:7a:74:71:e2:b8:fd:ad:29:a3:
a0:1e:cf:4d:2d:e6:16:af:5a:fa:51:bc:05:79:8c:0e:b8:79:
a8:88:c4:08:25:1e:6a:c9:81:7a:e3:42:50:6e:6c:85:e4:a7:
b6:dc:8e:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDAZ+iOtYZb5r7796BCMFhZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZGYwNDI4MjQyNzNmY2ZmM2YwOTNkMGY5YjFkZWM2OTYw
YmFlNmEwHhcNMjYwOTIwMjAwMDMwWhcNMjYwOTIxMjAwMDMwWjAzMTEwLwYDVQQD
EyhmMjA4OWVlY2Y3ZTFjOTZiMDU0ZjI2OGE4MjYzYTQzNDJkOGZjNWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiutN1MTztyZO3NxHa7l1J3vknU+
SnCgQsK7eqlZMGkrnUCUVr0Slj9XNtc6KMdXygexUBOGAnwBGTUlBprjh5SkCC/c
emUYQ8DPc3YIQn15odp0Fl/1BiOUrKEJm6/Rm5ixdHAqP7wM258HHomLojWcJpfw
up69ku49AgQoIJK37lMAl8NvMKA8pafrwSWBYOu8HMG9Imp1f5u7WZtSmpT6LPL5
0YqLCHWNPRqb6ngIlikmRxhuOgSiRQILLelI5PUN5ngfeyK/LcocZfFtw3hnxE00
FBa7b2BEmidSEyW7jTK3seN/nvTWLuZX9E4fp4bC04do2mp3cqmRsCrJYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIInuz34clrBU8mioJjpDQtj8X2MB8GA1UdIwQY
MBaAFCffBCgkJz/P8/CT0Pmx3saWC65qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hY2ZmZDYtZGMxZS00ZTBkLThkMjUt
Y2UyMmQ1ZWFiODJmLzEvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hY2ZmZDYtZGMxZS00ZTBkLThkMjUtY2UyMmQ1ZWFiODJm
LzEvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6YXgUz7
SxplXv3Vj307LqA3xgRa4MySE9WJm3cAt1dTt++F8XCxk9aAfAKHkMbXK1XAuy6a
JMXvL38alTtrm4CyK1+dujYBnUefUhtOuQzepmeABiIwmwyrYiMxw0pEzD2TXbR2
b1VomoeysAL2EOOw0M201CV9LA6SsEckGP4eGYC58Oocgr4MdmhkvQRYBkPOAnIk
DaHD5cNas93yFYtxcrZ6SOskwFWJ5uolOS5fUTlhLj8OqX2qIgcquoVYO9t2hHLf
6B12uSTCosEoenRx4rj9rSmjoB7PTS3mFq9a+lG8BXmMDrh5qIjECCUeasmBeuNC
UG5sheSnttyORA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 01:40:40 2026 by rpki-client