Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.mft
File: JAsyzWtXl7uo3nVxDSJjhYkJ84Y.mft (raw, json)
Hash identifier: HKzbUNAbad1bFU0ZQsFblN0R0dTSFR0kKGhjV+W1Tto=
Subject key identifier: 62:5D:B5:83:C4:D0:47:4A:9F:33:FE:73:88:02:BB:33:6B:D7:BB:AC
Authority key identifier: 24:0B:32:CD:6B:57:97:BB:A8:DE:75:71:0D:22:63:85:89:09:F3:86
Certificate issuer: /CN=240b32cd6b5797bba8de75710d2263858909f386
Certificate serial: 01A13447BCB820A647D9AE0E8070EF2C3C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.mft
Manifest number: 013D
Signing time: Tue 13 Oct 2026 08:01:18 +0000
Manifest this update: Tue 13 Oct 2026 08:01:18 +0000
Manifest next update: Wed 14 Oct 2026 08:01:18 +0000
Files and hashes: 1: FROPYkM5ktQTS4wOQF6SJwJLwig.roa (hash: AuHjIMdxNo/GZjrCi+DZLonZ7eKRGgLWjts+JzfgAeI=)
2: JAsyzWtXl7uo3nVxDSJjhYkJ84Y.crl (hash: V102gTrmkn8VWnYigTn4Fb4vfdNFW/8zpQGfhEba7oI=)
3: f80qjYnyCwfdNMKj1DsnAZ5cv9c.roa (hash: zngQrOsaQfFZfvx/BqG2rXEHHOh99MujSkajem83cE4=)
4: igCk7oNrHtLfxuau9vPZGAQvZ_M.roa (hash: Ur8FR9IN0yI1c69evJkfyoGd+ghZTySnXPRPUeZRMAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:47:bc:b8:20:a6:47:d9:ae:0e:80:70:ef:2c:3c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240b32cd6b5797bba8de75710d2263858909f386
Validity
Not Before: Oct 13 08:01:18 2026 GMT
Not After : Oct 14 08:01:18 2026 GMT
Subject: CN=625db583c4d0474a9f33fe738802bb336bd7bbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ec:89:9c:d8:09:16:e2:cb:0a:99:83:c5:6f:
93:45:ce:29:23:a8:c9:8c:aa:a6:a7:4d:3a:a9:6d:
ce:c0:b9:fc:73:6c:cb:f6:a6:fa:70:26:d8:9a:8c:
80:6a:81:1b:d7:50:c9:f0:9b:89:4b:4c:50:1e:fd:
25:94:ea:1e:ec:ef:11:28:dd:4e:01:04:ce:1b:53:
53:35:db:55:d4:d4:05:df:04:c8:a8:5b:f7:63:17:
ec:26:1e:ea:56:7d:6d:10:1c:62:74:1c:f5:7c:25:
3a:06:e5:2c:03:3d:b1:93:0e:d5:ef:cc:79:c4:ae:
9d:a1:dd:94:2b:51:d4:6e:70:12:c0:16:c1:c3:e8:
f9:40:69:fd:7a:ee:98:6b:47:a5:eb:bb:45:de:82:
95:03:3c:15:9d:4f:e5:f8:46:7b:9d:16:47:1f:8f:
e7:3a:13:7f:2b:25:b2:5a:9b:a5:b8:f7:09:3c:9a:
4b:8f:e4:b2:57:99:14:14:71:8c:cf:89:d2:c7:3f:
55:d1:cc:f1:dc:e0:4b:85:77:9b:2f:d1:30:ac:b3:
77:0a:6f:da:a4:7c:7b:11:68:90:bf:d5:38:bb:83:
ca:ff:4e:21:6d:59:12:b9:6e:96:c6:af:bb:d1:50:
01:28:64:da:9c:34:e4:15:7c:44:32:44:42:8c:b9:
7e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5D:B5:83:C4:D0:47:4A:9F:33:FE:73:88:02:BB:33:6B:D7:BB:AC
X509v3 Authority Key Identifier:
keyid:24:0B:32:CD:6B:57:97:BB:A8:DE:75:71:0D:22:63:85:89:09:F3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:75:63:70:53:2c:96:92:0a:0b:3b:46:08:fd:af:b3:bb:9a:
69:92:44:3b:e9:7b:ce:bf:d2:c3:fe:2d:31:c6:bf:b9:7c:79:
2f:25:64:4d:3e:01:9f:b7:56:ba:17:3b:ec:f3:74:de:cc:a4:
95:4c:d9:e5:0e:55:59:d9:97:d8:ef:7b:55:5c:dd:7c:67:48:
b8:a7:ec:b6:44:da:ce:99:a7:30:c3:0f:ae:ba:65:d8:2d:73:
39:26:15:b9:4e:bb:fb:61:c6:53:cd:3c:c7:0f:bb:30:08:4b:
9c:cf:35:4a:3d:87:01:36:ee:a7:7f:1b:53:82:9c:96:de:37:
25:fb:3d:e1:bc:7a:96:15:b5:14:b4:fa:15:b1:f4:06:b0:35:
19:49:e6:76:78:14:08:0e:48:a8:3d:dc:e4:24:4f:5c:52:6d:
5e:2b:f0:fe:34:a4:56:5e:9c:31:72:b5:cd:3b:75:f6:2b:92:
aa:de:a0:31:4e:87:f1:27:0d:a9:71:20:ba:98:25:0e:61:99:
d8:b0:e9:9a:4d:ee:4c:a6:2c:c8:d1:0d:fc:73:52:86:53:24:
a3:cb:ab:17:67:a3:18:29:96:f2:8d:5a:e4:c8:bb:31:e3:e5:
b6:1e:fd:e5:b9:0c:21:24:2e:c8:43:bf:dc:6f:36:2f:3d:ea:
b3:21:cb:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE0R7y4IKZH2a4OgHDvLDyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MGIzMmNkNmI1Nzk3YmJhOGRlNzU3MTBkMjI2Mzg1ODkw
OWYzODYwHhcNMjYxMDEzMDgwMTE4WhcNMjYxMDE0MDgwMTE4WjAzMTEwLwYDVQQD
Eyg2MjVkYjU4M2M0ZDA0NzRhOWYzM2ZlNzM4ODAyYmIzMzZiZDdiYmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uyJnNgJFuLLCpmDxW+TRc4pI6jJ
jKqmp006qW3OwLn8c2zL9qb6cCbYmoyAaoEb11DJ8JuJS0xQHv0llOoe7O8RKN1O
AQTOG1NTNdtV1NQF3wTIqFv3YxfsJh7qVn1tEBxidBz1fCU6BuUsAz2xkw7V78x5
xK6dod2UK1HUbnASwBbBw+j5QGn9eu6Ya0el67tF3oKVAzwVnU/l+EZ7nRZHH4/n
OhN/KyWyWpuluPcJPJpLj+SyV5kUFHGMz4nSxz9V0czx3OBLhXebL9EwrLN3Cm/a
pHx7EWiQv9U4u4PK/04hbVkSuW6Wxq+70VABKGTanDTkFXxEMkRCjLl+nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJdtYPE0EdKnzP+c4gCuzNr17usMB8GA1UdIwQY
MBaAFCQLMs1rV5e7qN51cQ0iY4WJCfOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkFzeXpXdFhsN3VvM25WeERTSmpoWWtKODRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8wMzMyNWYtMjM0ZS00MmQ4LWJjY2Mt
YWU2NWYwZTZkODY2LzEvSkFzeXpXdFhsN3VvM25WeERTSmpoWWtKODRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8wMzMyNWYtMjM0ZS00MmQ4LWJjY2MtYWU2NWYwZTZkODY2
LzEvSkFzeXpXdFhsN3VvM25WeERTSmpoWWtKODRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnVjcFMs
lpIKCztGCP2vs7uaaZJEO+l7zr/Sw/4tMca/uXx5LyVkTT4Bn7dWuhc77PN03syk
lUzZ5Q5VWdmX2O97VVzdfGdIuKfstkTazpmnMMMPrrpl2C1zOSYVuU67+2HGU808
xw+7MAhLnM81Sj2HATbup38bU4Kclt43Jfs94bx6lhW1FLT6FbH0BrA1GUnmdngU
CA5IqD3c5CRPXFJtXivw/jSkVl6cMXK1zTt19iuSqt6gMU6H8ScNqXEgupglDmGZ
2LDpmk3uTKYsyNEN/HNShlMko8urF2ejGCmW8o1a5Mi7MePlth795bkMISQuyEO/
3G82Lz3qsyHLNw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 16:22:11 2026 by rpki-client