Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
File: JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft (raw, json)
Hash identifier: jvStIWnUu96RviIhXE9n469XOWboDtUUkPcTCkYII7E=
Subject key identifier: 86:E2:7F:E5:D7:5B:CE:EA:1A:A9:E2:46:52:50:EC:49:F1:12:BF:DE
Authority key identifier: 24:7C:DB:5E:A8:2E:03:33:36:64:0E:9E:EC:8E:A0:98:CA:C8:61:80
Certificate issuer: /CN=247cdb5ea82e033336640e9eec8ea098cac86180
Certificate serial: 01A128B18B8ED00CDEF9D2B1F8C5844D0F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
Manifest number: 01FE
Signing time: Sun 11 Oct 2026 02:01:26 +0000
Manifest this update: Sun 11 Oct 2026 02:01:26 +0000
Manifest next update: Mon 12 Oct 2026 02:01:26 +0000
Files and hashes: 1: JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl (hash: 2LRXdP4/Bu5DUOG6QnkJnULZLv3BK0H/wPSn3itUILQ=)
2: sr5kiWaUNJb3k53oHKiE3zAeNCc.roa (hash: 4lKEnHHPq8ieSuUmi9tpKwDYW28NC9iz/gZMj6c8NHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:b1:8b:8e:d0:0c:de:f9:d2:b1:f8:c5:84:4d:0f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247cdb5ea82e033336640e9eec8ea098cac86180
Validity
Not Before: Oct 11 02:01:26 2026 GMT
Not After : Oct 12 02:01:26 2026 GMT
Subject: CN=86e27fe5d75bceea1aa9e2465250ec49f112bfde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:13:4f:4d:96:e1:b1:cb:f7:b5:3a:f1:06:75:
f4:d0:cd:e4:b4:27:1a:7f:5b:13:da:00:74:ed:44:
48:3b:f4:55:84:fe:b9:5f:7a:29:66:93:1d:e8:0b:
df:1b:a4:b0:6e:5b:98:e3:a6:3a:d9:e4:7e:28:a9:
3e:34:63:07:4b:90:f4:da:9d:90:e4:b3:27:12:5e:
0a:48:15:ac:ec:31:47:ba:41:a1:59:10:c7:a5:1d:
7d:fa:60:22:72:f6:5b:00:0c:cf:e4:84:6f:5f:e3:
59:f1:78:7a:cf:f5:51:d7:16:ad:5c:2e:b8:cb:f5:
67:51:b9:3a:80:66:51:13:ad:3d:a9:c1:a2:20:0a:
e3:53:5a:c1:59:55:8f:83:db:07:88:a8:3b:b4:b9:
e7:9a:cf:7d:9f:8b:d7:9c:39:e3:6a:eb:b8:f2:12:
08:b9:8b:09:5d:23:60:5a:3e:b2:72:81:7d:af:4a:
f9:51:0c:f4:f4:56:40:1f:d7:41:56:cb:eb:fd:08:
e3:89:60:a0:e1:e4:29:75:6a:f3:6f:9a:b7:98:3a:
44:6b:90:3e:5b:94:48:f9:30:6e:92:e5:b1:d2:02:
bd:77:3f:fc:ea:c2:d7:f1:89:b5:8c:41:1c:6e:1a:
24:a0:89:53:14:89:9f:22:a0:83:fc:58:df:08:16:
de:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E2:7F:E5:D7:5B:CE:EA:1A:A9:E2:46:52:50:EC:49:F1:12:BF:DE
X509v3 Authority Key Identifier:
keyid:24:7C:DB:5E:A8:2E:03:33:36:64:0E:9E:EC:8E:A0:98:CA:C8:61:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a1:19:25:0c:35:7e:98:63:e8:fe:cd:5f:93:8f:b5:88:de:
ea:be:8a:2c:a8:3f:69:8e:7a:03:15:e8:35:e8:b1:6a:6f:68:
e3:e5:82:a7:14:4a:ab:77:f1:a9:77:75:46:70:63:e1:24:a3:
0c:fc:b1:6c:6b:86:65:0b:2f:2d:cc:8c:74:4b:af:af:14:c8:
be:dd:2a:f7:df:aa:75:5e:c0:89:61:51:69:7b:ec:b6:6e:25:
01:85:ee:7e:cf:f3:a2:21:42:a9:57:ad:59:3f:af:71:29:8d:
32:60:a2:03:a6:a2:8d:bb:4f:a6:d8:32:f4:4d:ef:ec:af:bd:
7c:36:5c:26:a4:5e:8d:08:0d:16:4e:e3:80:92:b8:9f:5a:37:
5d:fa:f6:ac:ec:a0:e5:a8:62:c8:4e:d3:4c:08:1b:01:12:82:
19:ee:6b:7e:48:21:1d:08:ee:70:d2:82:03:27:60:7c:f7:4d:
51:64:23:69:d2:d6:ae:0c:2a:2f:d1:43:e0:36:95:db:4a:43:
9a:18:5b:70:99:0c:26:ab:33:1f:d2:02:36:b3:c2:05:69:1f:
35:42:d2:39:64:a0:c3:bb:33:9b:f7:1b:93:ad:50:1e:06:43:
02:88:d9:0a:fd:50:84:6a:53:6f:92:41:a1:7b:82:61:d4:2d:
53:a3:c3:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEosYuO0Aze+dKx+MWETQ8BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0N2NkYjVlYTgyZTAzMzMzNjY0MGU5ZWVjOGVhMDk4Y2Fj
ODYxODAwHhcNMjYxMDExMDIwMTI2WhcNMjYxMDEyMDIwMTI2WjAzMTEwLwYDVQQD
Eyg4NmUyN2ZlNWQ3NWJjZWVhMWFhOWUyNDY1MjUwZWM0OWYxMTJiZmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RNPTZbhscv3tTrxBnX00M3ktCca
f1sT2gB07URIO/RVhP65X3opZpMd6AvfG6SwbluY46Y62eR+KKk+NGMHS5D02p2Q
5LMnEl4KSBWs7DFHukGhWRDHpR19+mAicvZbAAzP5IRvX+NZ8Xh6z/VR1xatXC64
y/VnUbk6gGZRE609qcGiIArjU1rBWVWPg9sHiKg7tLnnms99n4vXnDnjauu48hII
uYsJXSNgWj6ycoF9r0r5UQz09FZAH9dBVsvr/QjjiWCg4eQpdWrzb5q3mDpEa5A+
W5RI+TBukuWx0gK9dz/86sLX8Ym1jEEcbhokoIlTFImfIqCD/FjfCBbecQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbif+XXW87qGqniRlJQ7EnxEr/eMB8GA1UdIwQY
MBaAFCR8216oLgMzNmQOnuyOoJjKyGGAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkh6YlhxZ3VBek0yWkE2ZTdJNmdtTXJJWVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMTU0MWItY2ExMC00MGY3LWIzZWQt
YjMyMTA1NWNmYTJmLzEvSkh6YlhxZ3VBek0yWkE2ZTdJNmdtTXJJWVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iMTU0MWItY2ExMC00MGY3LWIzZWQtYjMyMTA1NWNmYTJm
LzEvSkh6YlhxZ3VBek0yWkE2ZTdJNmdtTXJJWVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqEZJQw1
fphj6P7NX5OPtYje6r6KLKg/aY56AxXoNeixam9o4+WCpxRKq3fxqXd1RnBj4SSj
DPyxbGuGZQsvLcyMdEuvrxTIvt0q99+qdV7AiWFRaXvstm4lAYXufs/zoiFCqVet
WT+vcSmNMmCiA6aijbtPptgy9E3v7K+9fDZcJqRejQgNFk7jgJK4n1o3Xfr2rOyg
5ahiyE7TTAgbARKCGe5rfkghHQjucNKCAydgfPdNUWQjadLWrgwqL9FD4DaV20pD
mhhbcJkMJqszH9ICNrPCBWkfNULSOWSgw7szm/cbk61QHgZDAojZCv1QhGpTb5JB
oXuCYdQtU6PDGQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:12:40 2026 by rpki-client