Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: Mg6kQsnmHUa1P53NlHuFUhI2HAomRyx+MKINX40zESs=
Subject key identifier: 26:98:BA:61:94:65:AF:50:15:BA:A9:81:BB:3F:A1:39:B4:D5:8D:D1
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 01A0E99B3103E58034E287ACC0BAEA5D3C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 1219
Signing time: Mon 28 Sep 2026 20:00:56 +0000
Manifest this update: Mon 28 Sep 2026 20:00:56 +0000
Manifest next update: Tue 29 Sep 2026 20:00:56 +0000
Files and hashes: 1: ChullwnZqQZYUszFjSx3fewyjwo.roa (hash: Q47vpxHW3Ryw8e0pAegAXyctEwiMaOAhvKLpvI/M8b8=)
2: DNSKPd01dwV1m0UA3OWZjHrv0VI.roa (hash: xZ97A5jZ/SukMOaFd3zQ70K1ldM9Hn7h4aFpzYLuuQg=)
3: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: ffmELJNOEDdRLlU0+2wO7kmVbQxtzbwXrESBGBY81NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9b:31:03:e5:80:34:e2:87:ac:c0:ba:ea:5d:3c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Sep 28 20:00:56 2026 GMT
Not After : Sep 29 20:00:56 2026 GMT
Subject: CN=2698ba619465af5015baa981bb3fa139b4d58dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:1f:77:85:fd:4c:fa:00:0a:6c:c3:a7:07:
dd:22:fa:b7:ee:cd:50:f5:e2:a5:ae:2b:2a:7f:cc:
00:8d:47:22:cd:5c:75:43:98:3b:82:69:fe:df:ec:
05:79:fd:0f:26:71:25:e9:91:7b:c4:d2:a1:b8:fa:
8f:64:17:8c:e6:1f:1c:6c:94:af:6e:98:7a:5f:26:
b2:ac:26:ab:10:33:d0:43:ab:c2:8a:86:3f:f3:5e:
cd:ff:61:8d:c8:7b:75:21:c5:bf:c5:b7:5c:7e:07:
fc:87:08:17:b6:ef:3d:87:c1:b4:0c:88:75:7a:86:
38:6d:98:62:78:9e:4b:5c:41:d7:b2:b6:34:d3:fd:
0b:24:09:3d:03:a3:a3:d9:aa:64:d6:8b:20:8a:30:
a6:42:5c:0f:60:bf:00:73:a3:6a:fa:34:3b:80:e0:
fe:8e:be:6f:9c:de:c7:ad:38:db:32:a2:ca:6e:e1:
83:61:6e:5a:35:cf:e8:21:0b:db:4b:b1:93:fd:90:
42:d4:90:e3:32:b3:6a:f7:48:1f:50:04:0f:af:c8:
4a:ef:94:2c:c2:10:72:b4:c3:2b:b9:e0:58:a0:e5:
d6:63:7c:cb:80:b4:0d:a9:6d:ed:dc:d7:cd:22:fd:
da:6a:6c:2a:9d:bc:cf:a1:a6:d9:7b:33:d0:b9:6c:
e0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:98:BA:61:94:65:AF:50:15:BA:A9:81:BB:3F:A1:39:B4:D5:8D:D1
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:91:08:af:8d:cc:92:8d:e3:81:c0:37:6c:3b:a6:76:8c:17:
83:34:e9:85:e4:5d:5c:a3:78:9f:b0:83:ac:eb:f8:72:cf:37:
e8:a2:09:61:f1:57:a6:5b:d3:ef:5c:f2:0b:62:36:9e:2d:f1:
96:65:21:59:c5:74:4c:53:77:e8:7b:2a:f1:d8:58:17:39:fc:
4c:73:bb:9c:18:40:45:3a:6f:ec:40:25:8d:46:37:ae:d4:dc:
15:aa:9f:d7:9f:89:10:ab:9f:7f:fe:4e:2c:13:b8:27:0e:92:
7f:c4:8b:02:a7:23:3b:9e:1e:b6:a4:bd:6d:e9:70:6f:2b:0d:
ac:ec:2e:74:3c:97:f1:9f:07:aa:02:fa:cf:ef:6a:d4:37:eb:
11:dd:7a:03:36:23:61:b5:d8:51:8a:fb:03:4f:6f:c8:5d:52:
cf:41:ee:60:27:6e:a1:51:45:c6:8b:31:6c:37:2d:c1:3f:26:
47:fa:a4:11:c4:fa:cf:45:bc:aa:b1:04:00:e6:7a:1a:5a:2d:
84:51:a6:ed:f7:a8:e3:bc:11:00:11:1d:1d:1f:e2:a3:99:5b:
8f:d1:e4:dc:cd:29:94:dd:91:47:6f:27:37:6b:04:ff:05:88:
8c:d7:ae:c9:11:5d:c5:03:fe:c6:dc:21:56:d4:e8:92:78:6d:
84:dd:ed:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpmzED5YA04oeswLrqXTxDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YjY2MGE2MTE5ODBjNjgyNzMxMzllMzJhZmZiNzRiNDU0
YTlkMzIwHhcNMjYwOTI4MjAwMDU2WhcNMjYwOTI5MjAwMDU2WjAzMTEwLwYDVQQD
EygyNjk4YmE2MTk0NjVhZjUwMTViYWE5ODFiYjNmYTEzOWI0ZDU4ZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPYfd4X9TPoACmzDpwfdIvq37s1Q
9eKlrisqf8wAjUcizVx1Q5g7gmn+3+wFef0PJnEl6ZF7xNKhuPqPZBeM5h8cbJSv
bph6XyayrCarEDPQQ6vCioY/817N/2GNyHt1IcW/xbdcfgf8hwgXtu89h8G0DIh1
eoY4bZhieJ5LXEHXsrY00/0LJAk9A6Oj2apk1osgijCmQlwPYL8Ac6Nq+jQ7gOD+
jr5vnN7HrTjbMqLKbuGDYW5aNc/oIQvbS7GT/ZBC1JDjMrNq90gfUAQPr8hK75Qs
whBytMMrueBYoOXWY3zLgLQNqW3t3NfNIv3aamwqnbzPoabZezPQuWzgkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaYumGUZa9QFbqpgbs/oTm01Y3RMB8GA1UdIwQY
MBaAFCS2YKYRmAxoJzE54yr/t0tFSp0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYt
NzA1MTk3NTA3YTU5LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYtNzA1MTk3NTA3YTU5
LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5EIr43M
ko3jgcA3bDumdowXgzTpheRdXKN4n7CDrOv4cs836KIJYfFXplvT71zyC2I2ni3x
lmUhWcV0TFN36Hsq8dhYFzn8THO7nBhARTpv7EAljUY3rtTcFaqf15+JEKuff/5O
LBO4Jw6Sf8SLAqcjO54etqS9belwbysNrOwudDyX8Z8HqgL6z+9q1DfrEd16AzYj
YbXYUYr7A09vyF1Sz0HuYCduoVFFxosxbDctwT8mR/qkEcT6z0W8qrEEAOZ6Glot
hFGm7feo47wRABEdHR/io5lbj9Hk3M0plN2RR28nN2sE/wWIjNeuyRFdxQP+xtwh
VtToknhthN3tZQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 23:37:23 2026 by rpki-client