Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
File: jkFZeSO5geHA1Pyi_9CozcNme30.mft (raw, json)
Hash identifier: U/BY+n8bFt0YR9QqKhQpcS/4ahNEQ5lVUw47/4y7rXk=
Subject key identifier: 60:74:64:04:82:BA:5B:43:FA:53:3B:BE:1D:29:A2:93:D7:99:57:FA
Authority key identifier: 8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D
Certificate issuer: /CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
Certificate serial: 01A0E06229FED45F4BD09FB5C789A5496611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
Manifest number: 0409
Signing time: Sun 27 Sep 2026 01:02:04 +0000
Manifest this update: Sun 27 Sep 2026 01:02:04 +0000
Manifest next update: Mon 28 Sep 2026 01:02:04 +0000
Files and hashes: 1: 2QK16_GzCxStUDI0mu8WHffdpn8.roa (hash: GKlCvD0CmH/A+xQlfrKSRNG2sqH4ve1r+aoC47JjAIU=)
2: jkFZeSO5geHA1Pyi_9CozcNme30.crl (hash: U1QF67CPEwuanAK6t3ma8vByVAt5nFPC4YeDZHsfO5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:62:29:fe:d4:5f:4b:d0:9f:b5:c7:89:a5:49:66:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
Validity
Not Before: Sep 27 01:02:04 2026 GMT
Not After : Sep 28 01:02:04 2026 GMT
Subject: CN=6074640482ba5b43fa533bbe1d29a293d79957fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fa:94:fb:d6:b8:0c:03:31:47:d8:99:d1:96:
22:98:1c:ee:d9:c7:82:9f:de:f9:e2:57:9e:86:c4:
09:8f:ea:1f:c3:bb:76:8a:aa:28:dc:d2:61:43:63:
12:7d:0f:a4:db:78:96:b0:dd:1c:ac:54:f0:1a:eb:
cd:16:3d:b0:9a:73:f5:33:17:10:14:29:94:72:a9:
ec:89:54:58:0f:54:ed:74:b9:67:7f:97:50:fe:36:
11:92:c4:22:a1:28:14:ff:61:8d:d5:3e:e9:09:dc:
1d:d5:e8:62:53:6c:51:8b:c4:f5:14:5b:e6:08:85:
10:20:18:a2:23:d0:bc:48:49:34:e2:b9:7c:ef:4c:
8c:83:c2:6f:3f:16:00:f1:3f:cd:ec:e6:d3:01:d2:
31:c1:45:66:93:90:0c:3e:98:db:56:11:fe:df:fb:
9e:b7:d8:e9:cd:bd:e2:4e:a8:3e:d5:fd:5c:3b:33:
c5:ac:fc:f8:1d:9e:2e:2d:e9:9f:05:8a:82:54:56:
55:9b:fa:c5:e7:00:9e:d5:e2:04:b5:cc:1f:0e:1d:
1c:b8:fb:15:20:e5:6f:a6:18:95:9f:1c:cf:36:35:
a9:a9:bd:bd:0c:4f:ff:46:0b:d4:10:de:55:50:ef:
23:c8:de:78:3c:11:57:2a:48:62:d0:06:66:2b:ea:
76:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:74:64:04:82:BA:5B:43:FA:53:3B:BE:1D:29:A2:93:D7:99:57:FA
X509v3 Authority Key Identifier:
keyid:8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:53:97:25:61:ca:c2:0b:3b:ff:e7:b5:be:b0:20:18:79:6f:
81:40:94:12:b6:95:bd:a7:9f:36:62:69:b2:54:9e:94:e1:bb:
de:68:7c:1a:b8:cb:8f:90:5c:79:23:28:98:5b:cf:cf:52:78:
ab:00:1c:a5:36:53:f7:f0:b7:33:56:b1:6e:79:05:f5:51:e9:
df:79:7e:1f:e1:90:e6:e7:34:20:fa:a2:22:90:81:1f:d0:09:
48:6e:98:90:ea:00:24:36:54:6f:a0:ae:2d:18:ef:e3:af:c3:
a3:62:8d:61:20:c4:fd:4a:95:5b:45:7e:0d:f1:dc:6e:27:5d:
5e:06:aa:a8:b1:85:5f:f3:68:a8:46:04:0c:ce:d3:88:70:d6:
c8:86:40:00:d0:1b:ab:67:00:0d:f2:d1:c4:52:d8:d6:2b:86:
84:c7:57:f7:26:76:0e:7c:91:1d:58:04:19:b5:00:04:b3:ad:
9f:a1:68:84:55:56:c8:af:46:cc:0c:55:b1:6c:4e:40:9a:7c:
ae:2e:04:79:f6:10:09:8e:72:64:b0:8b:48:bb:9e:01:27:1f:
a9:ad:52:4f:21:23:84:85:43:66:7b:7a:be:22:73:98:8d:35:
3d:d6:9e:a3:1e:a0:a9:85:64:dd:07:6e:1a:26:47:4b:ee:40:
82:79:aa:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgYin+1F9L0J+1x4mlSWYRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNDE1OTc5MjNiOTgxZTFjMGQ0ZmNhMmZmZDBhOGNkYzM2
NjdiN2QwHhcNMjYwOTI3MDEwMjA0WhcNMjYwOTI4MDEwMjA0WjAzMTEwLwYDVQQD
Eyg2MDc0NjQwNDgyYmE1YjQzZmE1MzNiYmUxZDI5YTI5M2Q3OTk1N2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivqU+9a4DAMxR9iZ0ZYimBzu2ceC
n9754leehsQJj+ofw7t2iqoo3NJhQ2MSfQ+k23iWsN0crFTwGuvNFj2wmnP1MxcQ
FCmUcqnsiVRYD1TtdLlnf5dQ/jYRksQioSgU/2GN1T7pCdwd1ehiU2xRi8T1FFvm
CIUQIBiiI9C8SEk04rl870yMg8JvPxYA8T/N7ObTAdIxwUVmk5AMPpjbVhH+3/ue
t9jpzb3iTqg+1f1cOzPFrPz4HZ4uLemfBYqCVFZVm/rF5wCe1eIEtcwfDh0cuPsV
IOVvphiVnxzPNjWpqb29DE//RgvUEN5VUO8jyN54PBFXKkhi0AZmK+p2+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGB0ZASCultD+lM7vh0popPXmVf6MB8GA1UdIwQY
MBaAFI5BWXkjuYHhwNT8ov/QqM3DZnt9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamtGWmVTTzVnZUhBMVB5aV85Q296Y05tZTMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jOTYwOTAtOTFkNC00NDAzLWJiZmQt
NDdiYTMzYmEzYzA1LzEvamtGWmVTTzVnZUhBMVB5aV85Q296Y05tZTMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jOTYwOTAtOTFkNC00NDAzLWJiZmQtNDdiYTMzYmEzYzA1
LzEvamtGWmVTTzVnZUhBMVB5aV85Q296Y05tZTMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVOXJWHK
wgs7/+e1vrAgGHlvgUCUEraVvaefNmJpslSelOG73mh8GrjLj5BceSMomFvPz1J4
qwAcpTZT9/C3M1axbnkF9VHp33l+H+GQ5uc0IPqiIpCBH9AJSG6YkOoAJDZUb6Cu
LRjv46/Do2KNYSDE/UqVW0V+DfHcbiddXgaqqLGFX/NoqEYEDM7TiHDWyIZAANAb
q2cADfLRxFLY1iuGhMdX9yZ2DnyRHVgEGbUABLOtn6FohFVWyK9GzAxVsWxOQJp8
ri4EefYQCY5yZLCLSLueAScfqa1STyEjhIVDZnt6viJzmI01Pdaeox6gqYVk3Qdu
GiZHS+5AgnmqBA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:06:02 2026 by rpki-client