Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
File: jmOEMlhq5gL_Datn0JsZUVJOggU.mft (raw, json)
Hash identifier: o4LE/VOp3o+W8VvtR1/batt4YFueIKssA+hG7rk9MD0=
Subject key identifier: 21:C7:69:68:21:26:BE:66:D4:1D:69:F3:28:C9:15:BE:3A:A1:5E:B8
Authority key identifier: 8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
Certificate issuer: /CN=8e638432586ae602ff0dab67d09b1951524e8205
Certificate serial: 01A0C745EAE5EDD779AF8664DBBA631E8C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
Manifest number: 048A
Signing time: Tue 22 Sep 2026 04:00:43 +0000
Manifest this update: Tue 22 Sep 2026 04:00:43 +0000
Manifest next update: Wed 23 Sep 2026 04:00:43 +0000
Files and hashes: 1: U6fyPIg5ovdf3i2qfPC2WuuXRmU.roa (hash: 51JfirD5ph0Mlaqz0ZFat9LDvr0NCB5fGDpKtCYppz0=)
2: jmOEMlhq5gL_Datn0JsZUVJOggU.crl (hash: JguteItmDe3+3wW5n1/X7N2445ZqPcutM2FV3K72xZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:45:ea:e5:ed:d7:79:af:86:64:db:ba:63:1e:8c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e638432586ae602ff0dab67d09b1951524e8205
Validity
Not Before: Sep 22 04:00:43 2026 GMT
Not After : Sep 23 04:00:43 2026 GMT
Subject: CN=21c769682126be66d41d69f328c915be3aa15eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b9:c6:90:bd:8c:ac:7e:5a:87:9a:a3:b0:ce:
01:c3:d5:a5:59:bc:93:db:7a:6c:57:e1:10:ef:1a:
fe:4a:47:2e:94:5f:2e:ff:c4:70:91:cc:77:80:d4:
6e:5b:94:64:bd:95:37:1b:a5:68:51:55:d3:25:df:
50:ce:29:79:74:d2:7d:9e:be:5f:3a:44:54:2c:1f:
36:62:5b:b5:14:95:5a:ac:5f:13:7c:ff:a9:e3:3a:
f2:48:b0:22:3a:29:de:a2:aa:9e:b5:38:e1:a5:f4:
bf:6c:a2:2d:60:db:70:c3:60:6f:6b:21:b6:ab:b7:
91:17:83:37:1c:ce:33:11:a8:4f:27:de:ac:f3:23:
75:17:c0:72:c4:15:35:47:a6:40:de:03:cf:5e:1e:
c0:27:b1:4f:51:15:9a:53:f1:b5:57:af:81:48:81:
c5:5e:5f:6d:fc:b2:e4:24:3e:37:62:88:a2:f5:d3:
23:82:fd:74:0f:f2:c4:12:e4:db:a6:76:cb:ac:54:
0a:91:21:f6:25:6d:1f:46:64:12:2d:ee:02:eb:48:
89:25:d0:7f:f4:de:2c:e2:db:92:66:e3:31:56:28:
43:87:c6:53:9a:1d:0f:67:05:bb:34:69:18:b8:4d:
3c:3b:d7:88:0f:36:4a:44:15:87:a5:c3:0e:1d:76:
80:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C7:69:68:21:26:BE:66:D4:1D:69:F3:28:C9:15:BE:3A:A1:5E:B8
X509v3 Authority Key Identifier:
keyid:8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ab:d7:fc:27:30:5b:3e:17:7e:65:17:9e:e7:56:7e:8b:ae:
a7:04:fa:f6:b6:42:b9:ab:95:2c:bf:b5:8a:e3:e5:60:6e:5b:
82:46:a0:67:ff:0c:55:a2:26:15:f4:01:52:dd:19:c9:9b:0a:
60:c9:33:aa:74:03:74:29:d5:69:fe:80:60:3d:69:0c:84:f0:
70:5d:96:77:54:27:47:03:e3:cf:7d:19:51:74:31:04:3c:c1:
1e:0d:24:66:9e:14:b0:63:cb:bc:2c:47:2f:f1:e9:1b:37:1e:
a6:d1:34:fd:d3:9a:36:f4:d2:c6:51:32:4a:a2:50:fe:a3:f4:
3e:82:ad:eb:55:a9:0f:a6:77:7f:0a:3a:0a:c8:d0:16:6c:1b:
3f:61:04:bc:e2:5a:37:4e:23:07:c2:d3:dc:24:43:f7:e3:cc:
8a:34:4e:18:76:64:15:44:3b:23:00:7c:c0:ad:b8:4f:b1:c1:
bb:79:cb:0c:3b:ce:ab:a3:8a:c2:7b:b7:3a:c0:bb:f3:95:f9:
4e:6e:a1:ad:b0:b3:e1:55:d4:49:9b:99:b2:a6:d3:4d:12:6c:
56:52:b2:16:33:40:1a:fa:bc:1e:51:e3:fd:45:c4:55:90:5d:
5c:16:6d:23:ba:05:4b:52:a9:f6:c5:39:73:b3:72:9c:45:45:
61:91:92:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHRerl7dd5r4Zk27pjHow1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjM4NDMyNTg2YWU2MDJmZjBkYWI2N2QwOWIxOTUxNTI0
ZTgyMDUwHhcNMjYwOTIyMDQwMDQzWhcNMjYwOTIzMDQwMDQzWjAzMTEwLwYDVQQD
EygyMWM3Njk2ODIxMjZiZTY2ZDQxZDY5ZjMyOGM5MTViZTNhYTE1ZWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rnGkL2MrH5ah5qjsM4Bw9WlWbyT
23psV+EQ7xr+SkculF8u/8Rwkcx3gNRuW5RkvZU3G6VoUVXTJd9Qzil5dNJ9nr5f
OkRULB82Ylu1FJVarF8TfP+p4zrySLAiOineoqqetTjhpfS/bKItYNtww2BvayG2
q7eRF4M3HM4zEahPJ96s8yN1F8ByxBU1R6ZA3gPPXh7AJ7FPURWaU/G1V6+BSIHF
Xl9t/LLkJD43Yoii9dMjgv10D/LEEuTbpnbLrFQKkSH2JW0fRmQSLe4C60iJJdB/
9N4s4tuSZuMxVihDh8ZTmh0PZwW7NGkYuE08O9eIDzZKRBWHpcMOHXaAkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHHaWghJr5m1B1p8yjJFb46oV64MB8GA1UdIwQY
MBaAFI5jhDJYauYC/w2rZ9CbGVFSToIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wM2M5OWQtOTNjNS00NTA4LWI1NGEt
ZWQzOGM0N2ZiYWM2LzEvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wM2M5OWQtOTNjNS00NTA4LWI1NGEtZWQzOGM0N2ZiYWM2
LzEvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKvX/Ccw
Wz4XfmUXnudWfouupwT69rZCuauVLL+1iuPlYG5bgkagZ/8MVaImFfQBUt0ZyZsK
YMkzqnQDdCnVaf6AYD1pDITwcF2Wd1QnRwPjz30ZUXQxBDzBHg0kZp4UsGPLvCxH
L/HpGzceptE0/dOaNvTSxlEySqJQ/qP0PoKt61WpD6Z3fwo6CsjQFmwbP2EEvOJa
N04jB8LT3CRD9+PMijROGHZkFUQ7IwB8wK24T7HBu3nLDDvOq6OKwnu3OsC785X5
Tm6hrbCz4VXUSZuZsqbTTRJsVlKyFjNAGvq8HlHj/UXEVZBdXBZtI7oFS1Kp9sU5
c7NynEVFYZGSLQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:36:46 2026 by rpki-client