Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.mft
File: jLsZbctbQbLDX2jNw9CKcj-OMKc.mft (raw, json)
Hash identifier: IuipmeBfHjWmS+XRkX6wjkLjjBfi+i9wCnAosKNyOrU=
Subject key identifier: D0:CA:A6:83:80:2F:8F:C5:99:3D:81:58:6F:95:EE:A3:8B:5B:9B:70
Authority key identifier: 8C:BB:19:6D:CB:5B:41:B2:C3:5F:68:CD:C3:D0:8A:72:3F:8E:30:A7
Certificate issuer: /CN=8cbb196dcb5b41b2c35f68cdc3d08a723f8e30a7
Certificate serial: 01A0C85817C9D506F19A9EDF1B0CBDCA4BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLsZbctbQbLDX2jNw9CKcj-OMKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:11 +0000
Manifest this update: Tue 22 Sep 2026 09:00:11 +0000
Manifest next update: Wed 23 Sep 2026 09:00:11 +0000
Files and hashes: 1: jLsZbctbQbLDX2jNw9CKcj-OMKc.crl (hash: OGuk4yeVs4GJd7e7MaSRBH1uxOKRdnBR67HJon3uF9I=)
2: pjDwdQHNJVDo70btJAsKcL2t8Wc.asa (hash: 9hs9uCk4t0lY0AxWzX7WklKc5C2LiY8Jejt1rMjXdhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jLsZbctbQbLDX2jNw9CKcj-OMKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:17:c9:d5:06:f1:9a:9e:df:1b:0c:bd:ca:4b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbb196dcb5b41b2c35f68cdc3d08a723f8e30a7
Validity
Not Before: Sep 22 09:00:11 2026 GMT
Not After : Sep 23 09:00:11 2026 GMT
Subject: CN=d0caa683802f8fc5993d81586f95eea38b5b9b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:37:e7:15:14:f8:65:5c:28:2f:98:18:20:
a6:88:1f:dd:85:9f:97:7e:c7:b8:33:7e:bf:a3:79:
0a:b0:e7:fc:4d:90:b2:8f:8c:1e:5e:a3:b9:e6:70:
50:12:0e:42:09:c0:49:4d:71:29:b7:49:1d:0d:d7:
ca:d7:fa:b9:80:62:63:ee:e4:65:fd:76:54:c6:f9:
61:7a:eb:57:2a:8b:ed:30:2f:9f:08:64:09:91:c2:
8e:b0:8a:59:33:62:79:33:75:f7:0d:fb:0c:95:af:
67:e8:17:5f:cd:98:03:f2:f9:ec:8d:9c:82:7b:f2:
33:d4:87:24:61:84:13:a1:2a:a3:ec:fb:1b:f4:6b:
08:83:95:51:87:77:a3:d3:38:69:1e:8b:df:44:16:
12:9b:14:f9:5c:1a:20:48:97:04:74:38:34:3c:b0:
cb:d9:bc:0d:0f:60:9a:8c:07:6a:2c:00:ba:2a:44:
0a:97:80:77:f2:64:41:7a:ba:1c:ec:0b:e3:58:5c:
49:0a:cd:44:9a:87:e1:e5:5d:dc:be:6b:19:c8:28:
fe:90:22:87:af:41:58:78:94:45:c6:9f:1c:7f:dc:
4f:c8:f8:bb:80:c2:e6:39:e4:dd:4d:92:47:44:ca:
3d:19:98:f1:ff:36:ca:55:26:49:1c:52:de:4d:2d:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CA:A6:83:80:2F:8F:C5:99:3D:81:58:6F:95:EE:A3:8B:5B:9B:70
X509v3 Authority Key Identifier:
keyid:8C:BB:19:6D:CB:5B:41:B2:C3:5F:68:CD:C3:D0:8A:72:3F:8E:30:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLsZbctbQbLDX2jNw9CKcj-OMKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/jLsZbctbQbLDX2jNw9CKcj-OMKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:68:86:0d:93:24:a9:4a:a7:8f:68:70:17:be:07:6e:ce:5f:
64:9b:a4:be:55:a0:d3:9f:8d:ff:cd:a1:23:51:f7:31:dc:ae:
1f:d5:de:75:15:e8:0f:99:e6:af:11:a1:20:61:e8:c3:f6:a3:
cf:2c:0b:0e:cc:cc:12:e1:8f:6d:ef:f0:01:91:3b:d3:9b:a2:
4f:d9:29:50:c6:94:65:3c:9d:4e:24:b9:82:5a:c3:28:90:65:
9a:1e:6d:4b:f2:8c:7a:56:ac:5e:86:62:7f:54:a4:cf:09:ea:
dd:48:aa:bf:f1:68:fa:ad:b4:ce:b7:0f:32:8d:28:93:0a:40:
e3:4c:07:65:67:75:79:02:ab:97:49:4c:a0:44:22:74:c0:b8:
3d:d1:a1:5e:6e:77:f9:db:17:07:b1:97:60:02:b5:8a:31:2b:
65:1c:83:9a:27:07:4d:ef:37:de:ce:2a:3c:48:9b:65:71:81:
ed:72:a0:2b:29:0d:11:4d:38:0f:db:f2:48:b1:e7:4d:b8:75:
5b:8f:a1:5c:34:69:b8:b6:02:2d:7c:0b:31:7c:36:b8:fd:97:
cf:04:09:c0:44:21:8b:38:41:76:86:e7:0b:cc:3a:69:17:25:
4a:f1:33:0d:1f:e1:d2:92:2a:c6:0b:f8:14:1e:bf:3f:68:c6:
4b:c1:6c:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIWBfJ1Qbxmp7fGwy9ykv0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjYmIxOTZkY2I1YjQxYjJjMzVmNjhjZGMzZDA4YTcyM2Y4
ZTMwYTcwHhcNMjYwOTIyMDkwMDExWhcNMjYwOTIzMDkwMDExWjAzMTEwLwYDVQQD
EyhkMGNhYTY4MzgwMmY4ZmM1OTkzZDgxNTg2Zjk1ZWVhMzhiNWI5YjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS035xUU+GVcKC+YGCCmiB/dhZ+X
fse4M36/o3kKsOf8TZCyj4weXqO55nBQEg5CCcBJTXEpt0kdDdfK1/q5gGJj7uRl
/XZUxvlheutXKovtMC+fCGQJkcKOsIpZM2J5M3X3DfsMla9n6BdfzZgD8vnsjZyC
e/Iz1IckYYQToSqj7Psb9GsIg5VRh3ej0zhpHovfRBYSmxT5XBogSJcEdDg0PLDL
2bwND2CajAdqLAC6KkQKl4B38mRBeroc7AvjWFxJCs1Emofh5V3cvmsZyCj+kCKH
r0FYeJRFxp8cf9xPyPi7gMLmOeTdTZJHRMo9GZjx/zbKVSZJHFLeTS0hZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDKpoOAL4/FmT2BWG+V7qOLW5twMB8GA1UdIwQY
MBaAFIy7GW3LW0Gyw19ozcPQinI/jjCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakxzWmJjdGJRYkxEWDJqTnc5Q0tjai1PTUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85MmM0OTctNmYyMy00Y2E5LTk5NzQt
YmViNzkwZGE1YjRmLzEvakxzWmJjdGJRYkxEWDJqTnc5Q0tjai1PTUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85MmM0OTctNmYyMy00Y2E5LTk5NzQtYmViNzkwZGE1YjRm
LzEvakxzWmJjdGJRYkxEWDJqTnc5Q0tjai1PTUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1miGDZMk
qUqnj2hwF74Hbs5fZJukvlWg05+N/82hI1H3MdyuH9XedRXoD5nmrxGhIGHow/aj
zywLDszMEuGPbe/wAZE705uiT9kpUMaUZTydTiS5glrDKJBlmh5tS/KMelasXoZi
f1Skzwnq3Uiqv/Fo+q20zrcPMo0okwpA40wHZWd1eQKrl0lMoEQidMC4PdGhXm53
+dsXB7GXYAK1ijErZRyDmicHTe833s4qPEibZXGB7XKgKykNEU04D9vySLHnTbh1
W4+hXDRpuLYCLXwLMXw2uP2XzwQJwEQhizhBdobnC8w6aRclSvEzDR/h0pIqxgv4
FB6/P2jGS8Fs0g==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:13:53 2026 by rpki-client