Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
File: JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft (raw, json)
Hash identifier: gC22weDhh35qEmKa7QadMePaXWbv0whQ6zoxv3HbFvE=
Subject key identifier: 53:F8:FD:55:36:0B:63:8C:BE:BA:6A:15:1B:48:EC:6B:14:19:D0:FC
Authority key identifier: 25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
Certificate issuer: /CN=255633182ddd558b41ba16c519ee461450ddddd9
Certificate serial: 01A0DEE110AD4BC179CBE1DB09886A23449A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
Manifest number: 049E
Signing time: Sat 26 Sep 2026 18:01:26 +0000
Manifest this update: Sat 26 Sep 2026 18:01:26 +0000
Manifest next update: Sun 27 Sep 2026 18:01:26 +0000
Files and hashes: 1: 0B6H5zkrFMKoeXCuwx2WOB_Z6tU.roa (hash: AMOeY2WBqIDOZyan24GKWqLsMD/oVDxNwHTF+9g2L3g=)
2: JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl (hash: mcpizGIQI4r5SPxh7tqWxZwoM0QfuKJ0H6iqZ2LN3eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:e1:10:ad:4b:c1:79:cb:e1:db:09:88:6a:23:44:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255633182ddd558b41ba16c519ee461450ddddd9
Validity
Not Before: Sep 26 18:01:26 2026 GMT
Not After : Sep 27 18:01:26 2026 GMT
Subject: CN=53f8fd55360b638cbeba6a151b48ec6b1419d0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:3b:a1:f1:5b:45:cb:64:74:47:bb:1d:7e:
19:60:e1:b6:48:96:5a:51:e4:83:e6:df:49:60:f9:
0b:51:c6:59:24:ba:a0:92:73:de:86:8f:50:1a:89:
22:bf:23:77:86:dc:e9:ef:3e:55:91:10:bb:6e:15:
20:51:e3:ea:a2:28:04:e9:e1:74:ee:04:02:a0:c9:
69:a3:e7:41:2c:f4:08:0e:4b:63:dd:8b:c7:0a:0a:
fd:6c:2e:d5:29:72:46:43:b4:08:a2:19:d1:bd:fd:
dd:ba:eb:2a:c2:2f:83:f9:c5:87:c5:69:79:05:91:
7d:8c:9d:f2:70:79:bd:92:f2:75:8c:bf:bb:a8:1c:
f2:b1:90:d2:de:8f:47:93:04:26:51:44:8e:f3:c6:
60:7f:13:e3:d4:8b:1c:60:80:50:7a:38:de:25:18:
3d:38:e3:6e:7d:c6:b2:91:3e:1b:25:1b:18:30:60:
6c:5c:44:a1:44:8c:47:8a:5d:b6:93:88:ac:83:6d:
36:9c:6b:da:f4:c3:df:23:80:54:70:c7:9b:47:01:
6e:04:37:56:5d:83:03:40:79:a3:22:f8:a7:5e:c3:
f3:26:2e:ac:24:03:e4:98:5d:1f:19:27:90:2e:fe:
ed:a7:99:b4:f6:ba:f9:a9:3b:19:f6:3e:13:95:31:
cd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F8:FD:55:36:0B:63:8C:BE:BA:6A:15:1B:48:EC:6B:14:19:D0:FC
X509v3 Authority Key Identifier:
keyid:25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b1:38:4f:30:51:04:ca:70:e7:0f:b0:78:28:e5:fd:33:29:
f1:9d:f9:cd:fc:da:25:fd:a0:df:5d:b1:e6:41:d1:8e:1d:38:
c9:f6:85:cf:56:eb:0b:31:d5:8e:1e:c5:72:35:94:22:9c:85:
af:b6:8a:0e:5c:34:81:58:7a:56:89:20:34:4a:4a:97:17:a4:
dd:29:74:3d:ff:d3:bd:32:54:2c:24:05:81:5c:99:60:50:ce:
ea:a7:f9:5f:6f:35:01:f0:a2:60:ad:05:12:10:af:57:64:65:
cf:73:0d:02:7b:7d:b5:f3:c1:0e:bd:1d:cc:87:8c:17:1d:fc:
bf:39:0a:2c:a9:73:a3:07:4b:b8:a0:31:3f:23:be:cc:d2:b8:
c5:2d:d3:b8:63:bd:8f:3c:34:5a:21:16:68:d9:ff:00:fa:38:
fd:c5:18:78:72:2f:72:ef:07:5d:d4:a9:84:a1:d9:6d:b2:65:
07:96:9b:67:6e:a1:fa:6d:4d:6a:ed:81:69:69:f9:7f:68:c5:
dc:39:a8:48:a3:d3:ca:55:c9:61:7c:7d:f7:22:c5:8e:48:e0:
72:90:b9:0a:3f:96:8b:5a:a9:be:39:7f:d8:ef:93:02:d1:0e:
6c:66:92:c3:fc:3c:bf:61:4a:30:99:80:0d:cc:d5:69:46:93:
ad:89:d7:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDe4RCtS8F5y+HbCYhqI0SaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NTYzMzE4MmRkZDU1OGI0MWJhMTZjNTE5ZWU0NjE0NTBk
ZGRkZDkwHhcNMjYwOTI2MTgwMTI2WhcNMjYwOTI3MTgwMTI2WjAzMTEwLwYDVQQD
Eyg1M2Y4ZmQ1NTM2MGI2MzhjYmViYTZhMTUxYjQ4ZWM2YjE0MTlkMGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB07ofFbRctkdEe7HX4ZYOG2SJZa
UeSD5t9JYPkLUcZZJLqgknPeho9QGokivyN3htzp7z5VkRC7bhUgUePqoigE6eF0
7gQCoMlpo+dBLPQIDktj3YvHCgr9bC7VKXJGQ7QIohnRvf3duusqwi+D+cWHxWl5
BZF9jJ3ycHm9kvJ1jL+7qBzysZDS3o9HkwQmUUSO88ZgfxPj1IscYIBQejjeJRg9
OONufcaykT4bJRsYMGBsXEShRIxHil22k4isg202nGva9MPfI4BUcMebRwFuBDdW
XYMDQHmjIvinXsPzJi6sJAPkmF0fGSeQLv7tp5m09rr5qTsZ9j4TlTHNcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFP4/VU2C2OMvrpqFRtI7GsUGdD8MB8GA1UdIwQY
MBaAFCVWMxgt3VWLQboWxRnuRhRQ3d3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lZmViMWEtMjliNS00NGE2LTkyZWEt
NWI1NDFmMzQ3MzJlLzEvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lZmViMWEtMjliNS00NGE2LTkyZWEtNWI1NDFmMzQ3MzJl
LzEvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrE4TzBR
BMpw5w+weCjl/TMp8Z35zfzaJf2g312x5kHRjh04yfaFz1brCzHVjh7FcjWUIpyF
r7aKDlw0gVh6VokgNEpKlxek3Sl0Pf/TvTJULCQFgVyZYFDO6qf5X281AfCiYK0F
EhCvV2Rlz3MNAnt9tfPBDr0dzIeMFx38vzkKLKlzowdLuKAxPyO+zNK4xS3TuGO9
jzw0WiEWaNn/APo4/cUYeHIvcu8HXdSphKHZbbJlB5abZ26h+m1Nau2BaWn5f2jF
3DmoSKPTylXJYXx99yLFjkjgcpC5Cj+Wi1qpvjl/2O+TAtEObGaSw/w8v2FKMJmA
DczVaUaTrYnXxg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 04:35:46 2026 by rpki-client