Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: FVAvXnrsjux5ixFunoCjCDd3cxn7B2QPesw6oXgSmLU=
Subject key identifier: 48:AA:61:89:EF:BD:40:25:A4:5C:DE:AF:96:C0:8D:75:19:4A:48:26
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 01A12A68BAA4AD60D8E576B593EB201C2FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 1A80
Signing time: Sun 11 Oct 2026 10:01:08 +0000
Manifest this update: Sun 11 Oct 2026 10:01:08 +0000
Manifest next update: Mon 12 Oct 2026 10:01:08 +0000
Files and hashes: 1: 4qJQVO5xGJM4Hwo9a4t-72WANJk.roa (hash: ktLSVwEG6cBJVzhe6kIb459fjppN/37esTFhqreayZU=)
2: DIaQR8xGk_YiX6t4cr3tzmYixRI.roa (hash: P3ZeVKS0G+aV/yqQz7wSRAftClIeEK0UWSeMLvlDPyU=)
3: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: Um4w6KSipv97M4D+jH3H2Gs4/OiGT/Cl+0ajJbPVJCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:68:ba:a4:ad:60:d8:e5:76:b5:93:eb:20:1c:2f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Oct 11 10:01:08 2026 GMT
Not After : Oct 12 10:01:08 2026 GMT
Subject: CN=48aa6189efbd4025a45cdeaf96c08d75194a4826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:d1:cc:91:f6:53:5b:1e:f5:40:fa:d6:a0:
2e:fe:1b:4f:ca:f4:00:26:82:02:00:14:8b:38:44:
b8:ac:7e:00:c6:2b:91:9d:ba:a2:6b:8e:52:d2:a3:
a3:cc:eb:df:9a:76:46:f0:55:2f:e4:1f:40:5f:3c:
e6:08:5e:09:6b:8f:47:1d:0c:9b:d1:39:cf:08:b6:
70:78:70:b5:2a:44:09:28:1b:92:b5:71:62:2b:b4:
91:f9:71:b9:ce:92:57:89:55:c6:de:b2:91:1a:6c:
8b:4a:47:fc:be:6d:89:56:a2:4a:ab:00:6c:94:36:
82:33:86:07:bf:b4:c9:d9:99:3c:cd:4f:3a:23:3d:
15:90:fb:5f:66:7b:28:15:d0:ef:7e:c0:8d:e1:f9:
54:8b:46:ed:07:9f:25:ba:d0:81:32:08:d5:8a:ee:
79:81:99:62:29:ef:37:50:36:19:bb:08:35:85:28:
b0:be:ce:d0:21:4f:94:19:00:ce:cb:fc:48:ce:75:
6a:8c:77:6a:f4:27:ff:6d:a8:71:ae:1e:c6:cb:09:
03:6d:5c:cf:a3:46:f1:93:9e:d6:45:85:59:ab:2d:
f1:3c:a2:ac:5b:f9:78:f7:ae:14:5a:fb:a6:61:9f:
0f:50:94:e9:f0:50:06:a5:da:09:74:fd:7a:2e:0c:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AA:61:89:EF:BD:40:25:A4:5C:DE:AF:96:C0:8D:75:19:4A:48:26
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:07:d8:4b:e4:7e:12:cc:e6:f0:a5:0b:6b:80:89:ab:52:f1:
7a:28:e0:90:74:fb:f2:0e:73:4e:20:07:82:53:a1:fe:6b:d7:
45:24:f9:42:66:be:f1:d0:85:99:c5:a4:b5:63:93:28:12:ff:
ec:f7:74:ed:a6:bb:39:72:cb:ba:10:fc:51:a6:7a:f7:8d:3a:
83:82:16:04:7b:9d:81:05:eb:86:de:ce:e0:c3:8c:c1:a5:24:
89:79:90:a2:0a:ca:89:19:6a:76:6d:1c:be:32:4e:9f:b7:3d:
ce:34:c6:a6:b2:55:23:4e:a2:0e:17:b7:a1:42:c5:23:b8:f6:
2c:08:b0:35:56:85:44:09:14:05:54:25:bf:9d:27:71:7c:d2:
1c:31:5f:82:cd:54:c4:42:ac:7e:5f:64:b9:c8:78:23:98:08:
a5:14:76:10:65:01:58:f8:ae:79:08:8b:b1:fd:24:ab:7b:98:
d2:b3:be:9d:be:83:50:66:0a:f7:17:7f:f3:31:a1:48:8e:81:
e6:9a:a7:9e:49:98:d7:f1:27:34:8e:e2:6d:78:c7:e1:43:c1:
62:14:8d:65:02:18:14:8a:e2:28:3f:61:bf:98:46:17:5b:90:
23:ee:18:5a:81:10:20:65:79:ad:5a:16:ff:76:bb:ed:a8:43:
bc:19:23:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEqaLqkrWDY5Xa1k+sgHC/0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjOTZjNjZhZjMzMWM5ODViODU5ZDQwM2IzNjk3NGMwNjMy
ZTFlZjIwHhcNMjYxMDExMTAwMTA4WhcNMjYxMDEyMTAwMTA4WjAzMTEwLwYDVQQD
Eyg0OGFhNjE4OWVmYmQ0MDI1YTQ1Y2RlYWY5NmMwOGQ3NTE5NGE0ODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYzRzJH2U1se9UD61qAu/htPyvQA
JoICABSLOES4rH4AxiuRnbqia45S0qOjzOvfmnZG8FUv5B9AXzzmCF4Ja49HHQyb
0TnPCLZweHC1KkQJKBuStXFiK7SR+XG5zpJXiVXG3rKRGmyLSkf8vm2JVqJKqwBs
lDaCM4YHv7TJ2Zk8zU86Iz0VkPtfZnsoFdDvfsCN4flUi0btB58lutCBMgjViu55
gZliKe83UDYZuwg1hSiwvs7QIU+UGQDOy/xIznVqjHdq9Cf/bahxrh7GywkDbVzP
o0bxk57WRYVZqy3xPKKsW/l4964UWvumYZ8PUJTp8FAGpdoJdP16Lgx2SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiqYYnvvUAlpFzer5bAjXUZSkgmMB8GA1UdIwQY
MBaAFIyWxmrzMcmFuFnUA7NpdMBjLh7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85N2UwNTctMGY2MC00YWFmLTlhNDgt
ODNhNDQzMTBhOTY0LzEvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85N2UwNTctMGY2MC00YWFmLTlhNDgtODNhNDQzMTBhOTY0
LzEvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQfYS+R+
Eszm8KULa4CJq1LxeijgkHT78g5zTiAHglOh/mvXRST5Qma+8dCFmcWktWOTKBL/
7Pd07aa7OXLLuhD8UaZ69406g4IWBHudgQXrht7O4MOMwaUkiXmQogrKiRlqdm0c
vjJOn7c9zjTGprJVI06iDhe3oULFI7j2LAiwNVaFRAkUBVQlv50ncXzSHDFfgs1U
xEKsfl9kuch4I5gIpRR2EGUBWPiueQiLsf0kq3uY0rO+nb6DUGYK9xd/8zGhSI6B
5pqnnkmY1/EnNI7ibXjH4UPBYhSNZQIYFIriKD9hv5hGF1uQI+4YWoEQIGV5rVoW
/3a77ahDvBkjpA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:46:10 2026 by rpki-client