Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
File: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json)
Hash identifier: ke5SoC6EhpyVRLjhCos0lehWEiwJpvdqWW6/EtBsuFY=
Subject key identifier: 8D:29:19:BC:3D:04:86:9F:27:1F:07:72:23:72:EA:4A:13:4D:ED:31
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial: 01A0C39FA7E3D73D11E8E4793774744E0D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
Manifest number: 0818
Signing time: Mon 21 Sep 2026 11:00:15 +0000
Manifest this update: Mon 21 Sep 2026 11:00:15 +0000
Manifest next update: Tue 22 Sep 2026 11:00:15 +0000
Files and hashes: 1: D84NfmvTfMKexslgZq5Al71ZBj4.asa (hash: davxVJx5jjzmjZdeUnCwP1bBkhZiVGk6m71g+mvRQkY=)
2: U9dpamPlXFGPVwyxa7ZIjQCVXbM.roa (hash: NpMd/z8Tkr9WOq97vd7su+5I1m9lCbB+kCkvJo6LpzM=)
3: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: UWycvoT7Vcs9/0O1fckP+63peauFInLhmHyWkbVaB6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:a7:e3:d7:3d:11:e8:e4:79:37:74:74:4e:0d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Validity
Not Before: Sep 21 11:00:15 2026 GMT
Not After : Sep 22 11:00:15 2026 GMT
Subject: CN=8d2919bc3d04869f271f07722372ea4a134ded31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8d:03:ca:66:c0:d5:6b:ac:7b:e3:ce:46:15:
0a:8f:3e:4e:2f:bf:c5:3f:d6:a1:26:94:f6:95:af:
f6:db:53:ce:94:26:57:0c:1a:6a:c0:4b:06:d9:50:
b0:70:c6:fb:f0:ef:0e:0a:9c:a3:aa:46:3f:78:75:
da:4a:48:38:e2:73:3b:09:0f:c8:ff:1e:01:13:92:
1a:e8:e1:4a:87:3f:27:2c:0e:44:0d:99:ca:a9:63:
36:70:86:85:26:85:41:40:07:ab:97:e3:73:01:a8:
df:cf:a7:06:07:29:c5:ce:e3:db:bf:bb:5f:f8:91:
5e:bf:63:e7:fd:ea:f6:30:bd:a3:09:7a:80:9a:4c:
a1:bd:5b:e1:e5:6e:38:0a:1f:18:6c:c4:13:d9:91:
d1:ca:8e:37:1f:4b:61:06:37:20:8f:86:bf:5a:e4:
72:bb:a4:e5:ba:0b:3c:83:fc:2f:e6:9a:e1:56:e1:
0b:b8:10:3b:c5:b6:5e:c7:45:13:75:4d:8d:9d:06:
c4:f5:b8:ac:4c:f9:93:79:60:3b:6c:2a:ef:91:5e:
5b:9a:7c:3b:b7:18:cd:2b:6d:0a:ca:ef:dd:01:62:
40:d4:f6:40:f5:7c:2d:74:5a:6e:22:33:36:78:65:
0e:1b:ff:39:44:22:0e:62:b1:0c:ba:62:79:db:d9:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:29:19:BC:3D:04:86:9F:27:1F:07:72:23:72:EA:4A:13:4D:ED:31
X509v3 Authority Key Identifier:
keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:65:a3:29:fa:a1:3b:ea:25:b2:fb:f6:24:d8:db:62:5c:b5:
bb:91:04:37:89:ed:75:38:bb:07:a8:a4:a6:5a:c0:0d:66:02:
b9:23:0a:8e:57:16:3c:34:06:34:98:40:a5:68:a3:c2:cf:d8:
00:f1:8d:07:f5:f9:b9:dd:d6:0e:5e:54:bb:cb:d2:a4:96:31:
f5:ec:d4:3b:02:c4:3b:d6:9c:fa:29:1a:e0:85:d4:65:51:24:
1d:df:6e:74:64:d4:8b:91:18:84:7e:4f:16:87:84:1c:4b:c7:
ff:39:22:a1:1b:cd:2f:3e:e2:e6:44:53:d2:47:d8:b8:ec:f4:
ca:67:6a:62:84:af:db:a7:cf:26:63:e8:1f:8a:10:90:84:33:
0b:ba:d7:9e:f7:2f:84:e8:f4:c9:b4:b9:fa:c4:b4:0b:90:04:
f5:7b:a9:d4:d1:05:46:cb:05:d5:71:52:91:fa:0f:11:37:2f:
fd:3a:69:45:21:ec:97:3a:c9:11:8d:8c:a0:9a:2d:7b:4b:03:
98:ac:bd:7d:88:a8:ef:f0:37:f8:37:da:f8:c4:ab:5c:72:bf:
88:6d:3b:03:f6:65:18:9e:e9:2a:42:b5:72:bf:c2:a8:5b:d3:
3b:3c:c0:c2:85:d1:97:6f:f9:91:e7:51:e2:7e:f4:ee:06:ce:
0d:13:86:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDn6fj1z0R6OR5N3R0Tg1eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDU2ZmIxZDY3OTQ3M2IxYWUxYzU3YjBmYzJhMzIzY2Fm
MTcwOWEwHhcNMjYwOTIxMTEwMDE1WhcNMjYwOTIyMTEwMDE1WjAzMTEwLwYDVQQD
Eyg4ZDI5MTliYzNkMDQ4NjlmMjcxZjA3NzIyMzcyZWE0YTEzNGRlZDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY0DymbA1Wuse+PORhUKjz5OL7/F
P9ahJpT2la/221POlCZXDBpqwEsG2VCwcMb78O8OCpyjqkY/eHXaSkg44nM7CQ/I
/x4BE5Ia6OFKhz8nLA5EDZnKqWM2cIaFJoVBQAerl+NzAajfz6cGBynFzuPbv7tf
+JFev2Pn/er2ML2jCXqAmkyhvVvh5W44Ch8YbMQT2ZHRyo43H0thBjcgj4a/WuRy
u6Tlugs8g/wv5prhVuELuBA7xbZex0UTdU2NnQbE9bisTPmTeWA7bCrvkV5bmnw7
txjNK20Kyu/dAWJA1PZA9XwtdFpuIjM2eGUOG/85RCIOYrEMumJ529nVkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0pGbw9BIafJx8HciNy6koTTe0xMB8GA1UdIwQY
MBaAFIzVb7HWeUc7GuHFew/CoyPK8XCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9hMjIwOWItYTkxOC00MDc0LWJhOTct
YTc5MmE4OGJhZjEwLzEvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9hMjIwOWItYTkxOC00MDc0LWJhOTctYTc5MmE4OGJhZjEw
LzEvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2WjKfqh
O+olsvv2JNjbYly1u5EEN4ntdTi7B6ikplrADWYCuSMKjlcWPDQGNJhApWijws/Y
APGNB/X5ud3WDl5Uu8vSpJYx9ezUOwLEO9ac+ika4IXUZVEkHd9udGTUi5EYhH5P
FoeEHEvH/zkioRvNLz7i5kRT0kfYuOz0ymdqYoSv26fPJmPoH4oQkIQzC7rXnvcv
hOj0ybS5+sS0C5AE9Xup1NEFRssF1XFSkfoPETcv/TppRSHslzrJEY2MoJote0sD
mKy9fYio7/A3+Dfa+MSrXHK/iG07A/ZlGJ7pKkK1cr/CqFvTOzzAwoXRl2/5kedR
4n707gbODROGaw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:35:53 2026 by rpki-client