
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
File: jcayOVFjzkewNvrgKnH5SIBL9V8.mft (raw, json)
Hash identifier: I/YO7qhjfd6gjovDh0s+XmHQVpkBZwXVO6uf4XqJph4=
Subject key identifier: 50:D1:04:76:EA:F7:F5:C8:3D:2A:3D:11:E2:9B:3E:2B:EF:56:54:FC
Authority key identifier: 8D:C6:B2:39:51:63:CE:47:B0:36:FA:E0:2A:71:F9:48:80:4B:F5:5F
Certificate issuer: /CN=8dc6b2395163ce47b036fae02a71f948804bf55f
Certificate serial: 01A0C58EB15CCB05E9378CF7B3AC2AFCCA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
Manifest number: 01D1
Signing time: Mon 21 Sep 2026 20:00:58 +0000
Manifest this update: Mon 21 Sep 2026 20:00:58 +0000
Manifest next update: Tue 22 Sep 2026 20:00:58 +0000
Files and hashes: 1: UqSLybQPqtyf12w058GGJrCrwlE.roa (hash: ay496TJzckN/WV79yGM4pv+K/GRv47GhhBgHEduwC9o=)
2: jcayOVFjzkewNvrgKnH5SIBL9V8.crl (hash: DCGIL25UEv7uKBVu/xW4QkSUZH80nHBormaIQrDxlhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:b1:5c:cb:05:e9:37:8c:f7:b3:ac:2a:fc:ca:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc6b2395163ce47b036fae02a71f948804bf55f
Validity
Not Before: Sep 21 20:00:58 2026 GMT
Not After : Sep 22 20:00:58 2026 GMT
Subject: CN=50d10476eaf7f5c83d2a3d11e29b3e2bef5654fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:9a:60:8d:ed:ff:7c:e5:10:96:fd:12:7d:
f5:86:ea:4a:4b:fc:87:0e:97:c6:bf:b4:3f:5a:7b:
9c:a1:bd:59:49:5b:06:0f:0b:85:15:fd:52:88:49:
63:3b:33:e2:ed:63:f0:1b:56:9a:e3:7c:cb:af:e5:
d9:0e:1c:70:9d:1e:16:f2:02:6d:18:f3:fd:9f:76:
ec:3b:94:6e:81:e3:a3:16:70:e0:ac:6f:17:8e:43:
04:0e:94:81:b4:75:42:e3:30:b7:8c:b9:b8:c0:c8:
df:15:5a:db:c6:e7:cf:ee:0a:9b:01:f2:88:48:54:
63:e8:a5:01:20:75:30:f0:29:61:c3:15:73:86:fd:
66:8b:16:fa:73:d5:90:1b:49:dc:d0:70:1c:6d:a9:
9b:66:7b:e2:1f:39:2e:b2:cb:69:6a:7e:17:3b:77:
21:e1:96:49:de:b9:4b:9c:28:11:0d:13:d3:2e:1f:
2e:4e:40:34:1d:67:21:38:ac:b2:00:d2:cc:f5:0c:
0c:17:3d:fb:b5:e8:80:aa:a0:89:3c:d9:3b:16:a3:
a1:ce:87:68:99:65:3c:63:7e:32:a6:3c:ae:0d:6a:
e3:71:ad:91:66:d5:0d:50:d0:5f:a9:a5:ac:2f:9e:
d6:66:d2:40:3b:85:ed:29:e1:5d:de:5c:fb:0a:40:
f3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D1:04:76:EA:F7:F5:C8:3D:2A:3D:11:E2:9B:3E:2B:EF:56:54:FC
X509v3 Authority Key Identifier:
keyid:8D:C6:B2:39:51:63:CE:47:B0:36:FA:E0:2A:71:F9:48:80:4B:F5:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:73:47:23:1e:8d:fc:5a:32:f8:29:49:da:27:b0:f8:4e:b4:
1d:2b:1b:2b:80:7b:c6:70:58:3a:55:18:52:bf:de:18:13:6c:
ea:f4:2e:28:a3:a5:9c:0c:8f:72:34:b9:15:7d:05:39:d6:1b:
0c:07:af:7b:b4:26:2e:e9:8a:5e:a7:d7:41:a7:3e:28:87:5b:
62:46:a4:5b:a5:7a:1f:b9:97:1a:d1:18:ea:87:15:3c:18:39:
e7:85:ce:47:0a:cd:8a:1a:3f:0e:ad:69:11:a7:8e:86:43:6b:
41:0e:5b:76:63:27:4f:ae:d4:0e:4a:82:1b:95:df:3c:c8:09:
a3:14:99:e4:48:14:dc:ff:d9:90:08:9c:22:3f:a7:25:63:2f:
48:93:fc:85:12:d1:99:22:c9:1f:d1:19:a0:87:63:a2:3d:47:
8e:51:e7:5e:09:ae:46:e1:0c:2f:0d:25:b5:53:f3:ec:71:03:
e7:ab:7e:db:b3:12:50:46:1e:61:9a:12:d8:6f:17:2f:40:17:
52:13:3d:9a:a5:a3:26:52:f1:f7:9d:9c:36:74:e9:31:18:3e:
c8:df:fa:8e:3e:d0:d4:23:2d:b2:20:96:8f:f0:a8:13:85:68:
ab:b8:33:eb:f6:ce:e9:0e:c6:ae:37:8a:ea:ff:54:fd:d2:36:
29:7d:90:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFjrFcywXpN4z3s6wq/MqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzZiMjM5NTE2M2NlNDdiMDM2ZmFlMDJhNzFmOTQ4ODA0
YmY1NWYwHhcNMjYwOTIxMjAwMDU4WhcNMjYwOTIyMjAwMDU4WjAzMTEwLwYDVQQD
Eyg1MGQxMDQ3NmVhZjdmNWM4M2QyYTNkMTFlMjliM2UyYmVmNTY1NGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdKaYI3t/3zlEJb9En31hupKS/yH
DpfGv7Q/Wnucob1ZSVsGDwuFFf1SiEljOzPi7WPwG1aa43zLr+XZDhxwnR4W8gJt
GPP9n3bsO5RugeOjFnDgrG8XjkMEDpSBtHVC4zC3jLm4wMjfFVrbxufP7gqbAfKI
SFRj6KUBIHUw8ClhwxVzhv1mixb6c9WQG0nc0HAcbambZnviHzkusstpan4XO3ch
4ZZJ3rlLnCgRDRPTLh8uTkA0HWchOKyyANLM9QwMFz37teiAqqCJPNk7FqOhzodo
mWU8Y34ypjyuDWrjca2RZtUNUNBfqaWsL57WZtJAO4XtKeFd3lz7CkDzNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDRBHbq9/XIPSo9EeKbPivvVlT8MB8GA1UdIwQY
MBaAFI3GsjlRY85HsDb64Cpx+UiAS/VfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNheU9WRmp6a2V3TnZyZ0tuSDVTSUJMOVY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YTRiZDItZmQwYi00ZjJlLWFmZGIt
OWY4ZjgzZjgyMjI4LzEvamNheU9WRmp6a2V3TnZyZ0tuSDVTSUJMOVY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YTRiZDItZmQwYi00ZjJlLWFmZGItOWY4ZjgzZjgyMjI4
LzEvamNheU9WRmp6a2V3TnZyZ0tuSDVTSUJMOVY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnNHIx6N
/Foy+ClJ2iew+E60HSsbK4B7xnBYOlUYUr/eGBNs6vQuKKOlnAyPcjS5FX0FOdYb
DAeve7QmLumKXqfXQac+KIdbYkakW6V6H7mXGtEY6ocVPBg554XORwrNiho/Dq1p
EaeOhkNrQQ5bdmMnT67UDkqCG5XfPMgJoxSZ5EgU3P/ZkAicIj+nJWMvSJP8hRLR
mSLJH9EZoIdjoj1HjlHnXgmuRuEMLw0ltVPz7HED56t+27MSUEYeYZoS2G8XL0AX
UhM9mqWjJlLx952cNnTpMRg+yN/6jj7Q1CMtsiCWj/CoE4Voq7gz6/bO6Q7GrjeK
6v9U/dI2KX2QwQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:42:36 2026 by rpki-client