Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: ocqtDKgp/z2UPpNiEH0RKTxoZl2v56eIAhIh8Y8UVIk=
Subject key identifier: ED:B8:0D:D8:30:DC:56:A9:5D:D8:88:E8:C0:AB:E1:C5:30:CC:CA:2A
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 01A1DEDE2B4D3D9D8169815E83ADD7248ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 1427
Signing time: Sun 15 Nov 2026 11:01:04 +0000
Manifest this update: Sun 15 Nov 2026 11:01:04 +0000
Manifest next update: Mon 16 Nov 2026 11:01:04 +0000
Files and hashes: 1: GPFcG47nIYBiH_vSd-Zet9HInTY.asa (hash: HNMbYsk9UfUyN+47iHB5pyXq6stkZEZHOhwEC4uh0DQ=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: P8msIjo5bGSfuSzNIfhZfbt0cfoL92JU5QM0aiXH1lw=)
3: r_qY6TIFDc-2C46p1mCYOq9l7j4.roa (hash: eoGRneGgUw90MpEMiAODUHzFCL/oN3PFTCCGwv4cx5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:2b:4d:3d:9d:81:69:81:5e:83:ad:d7:24:8a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Nov 15 11:01:04 2026 GMT
Not After : Nov 16 11:01:04 2026 GMT
Subject: CN=edb80dd830dc56a95dd888e8c0abe1c530ccca2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:bf:d6:6b:d8:6c:00:93:91:50:b1:a9:08:
2a:00:ff:c9:1f:66:4b:31:30:67:80:53:3f:88:58:
29:7e:78:21:3a:57:45:de:a1:44:22:09:0f:ed:83:
fa:47:66:a2:e7:24:ab:d1:84:2b:70:0a:f4:9c:66:
4e:91:11:57:1b:ee:c9:dd:ce:39:d3:23:41:0d:98:
ed:2c:47:f9:f8:36:e8:4c:2e:59:43:a5:b1:ab:35:
b6:73:24:7a:71:73:2f:a6:1b:6f:e4:45:49:8b:00:
ee:40:f9:2a:ca:df:dd:44:04:57:b1:3f:d7:a9:7a:
8b:bd:d8:cc:3a:a1:af:2f:9b:51:5d:3e:6e:7e:ac:
62:26:ce:b8:a7:79:d2:0c:9d:a9:ba:91:c4:59:c9:
34:95:3b:fe:4f:a6:63:0c:ba:96:3b:00:c3:f7:53:
10:9f:85:89:c6:2c:04:9c:00:5a:cc:4c:e8:10:89:
c9:32:a4:7d:c0:ae:94:18:eb:e5:bd:8d:88:e1:fa:
da:f2:2d:92:ba:b3:83:29:97:88:ea:de:07:bc:3c:
ed:a2:6f:7f:c7:ae:36:78:41:c4:e0:57:30:e3:1e:
03:50:30:0b:f0:61:08:d3:89:40:75:41:73:da:e2:
08:03:60:54:67:eb:77:bb:97:e5:55:c1:af:1a:a2:
0b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B8:0D:D8:30:DC:56:A9:5D:D8:88:E8:C0:AB:E1:C5:30:CC:CA:2A
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:21:4a:0f:84:79:c2:03:cb:51:6b:e9:54:82:2f:ce:c8:02:
45:9a:44:b6:fb:82:fc:0e:a4:54:ed:6d:4f:33:b3:4e:d6:1a:
f4:c6:7b:25:68:e0:fa:8f:89:5d:f2:f8:20:09:6e:0b:ea:0d:
c6:e9:00:ad:c7:f3:32:71:a3:ff:c2:18:8d:2e:06:cc:ff:bb:
4f:79:b3:a8:7e:be:0e:54:30:7b:53:77:e5:e8:9c:3a:50:7e:
be:e6:f6:2a:e7:24:e6:66:60:4a:de:6a:d6:93:42:b2:7f:49:
32:79:bf:66:1f:74:e9:98:3f:24:50:59:c2:12:0a:9c:c1:bc:
d2:0a:c1:e3:84:b2:40:b0:14:44:b5:df:cc:80:7f:21:b5:8f:
7a:14:05:18:2e:27:d9:a9:55:ad:1c:d4:b3:3e:8c:10:da:0f:
d5:91:05:50:89:74:aa:3c:b0:27:9a:00:57:2f:52:be:fd:a6:
45:03:1f:4c:70:30:8e:49:95:68:24:ed:86:92:35:cb:79:30:
93:a1:e6:80:e2:d8:86:6e:b5:f3:c3:b3:b5:0f:a5:6d:9c:e4:
b7:71:42:d2:e3:48:57:d7:ff:21:91:f9:a2:91:5d:8b:b8:0d:
04:00:0f:e3:9f:cb:1f:6a:a0:01:b0:22:36:bf:b9:d7:76:bd:
35:fc:e0:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3itNPZ2BaYFeg63XJIq8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNzAyYTYxNmMwNDk0MWUyYzlmMDcxNjUxZTQ5YzVkZjNh
ZWQwYjEwHhcNMjYxMTE1MTEwMTA0WhcNMjYxMTE2MTEwMTA0WjAzMTEwLwYDVQQD
EyhlZGI4MGRkODMwZGM1NmE5NWRkODg4ZThjMGFiZTFjNTMwY2NjYTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnS/1mvYbACTkVCxqQgqAP/JH2ZL
MTBngFM/iFgpfnghOldF3qFEIgkP7YP6R2ai5ySr0YQrcAr0nGZOkRFXG+7J3c45
0yNBDZjtLEf5+DboTC5ZQ6WxqzW2cyR6cXMvphtv5EVJiwDuQPkqyt/dRARXsT/X
qXqLvdjMOqGvL5tRXT5ufqxiJs64p3nSDJ2pupHEWck0lTv+T6ZjDLqWOwDD91MQ
n4WJxiwEnABazEzoEInJMqR9wK6UGOvlvY2I4fra8i2SurODKZeI6t4HvDztom9/
x642eEHE4Fcw4x4DUDAL8GEI04lAdUFz2uIIA2BUZ+t3u5flVcGvGqILNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO24Ddgw3FapXdiI6MCr4cUwzMoqMB8GA1UdIwQY
MBaAFI5wKmFsBJQeLJ8HFlHknF3zrtCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yYjg4NzctZTUyMy00ZTljLTlmYzMt
Y2Q2MGM4OTEwMDFiLzEvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yYjg4NzctZTUyMy00ZTljLTlmYzMtY2Q2MGM4OTEwMDFi
LzEvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCFKD4R5
wgPLUWvpVIIvzsgCRZpEtvuC/A6kVO1tTzOzTtYa9MZ7JWjg+o+JXfL4IAluC+oN
xukArcfzMnGj/8IYjS4GzP+7T3mzqH6+DlQwe1N35eicOlB+vub2Kuck5mZgSt5q
1pNCsn9JMnm/Zh906Zg/JFBZwhIKnMG80grB44SyQLAURLXfzIB/IbWPehQFGC4n
2alVrRzUsz6MENoP1ZEFUIl0qjywJ5oAVy9Svv2mRQMfTHAwjkmVaCTthpI1y3kw
k6HmgOLYhm6188OztQ+lbZzkt3FC0uNIV9f/IZH5opFdi7gNBAAP45/LH2qgAbAi
Nr+513a9NfzgrA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:06:34 2026 by rpki-client