Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
File: j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json)
Hash identifier: /l/oENNVvjoa92tyN0oSqbvp8b2DakxeJXpgRBintJY=
Subject key identifier: E0:0F:7C:68:BA:D7:45:AC:D1:63:2B:1E:2F:5F:4E:C2:B2:9F:4D:6C
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial: 01A0DD97D2B8FC316C3FE6D33A6DC30FCDAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
Manifest number: 1A86
Signing time: Sat 26 Sep 2026 12:01:49 +0000
Manifest this update: Sat 26 Sep 2026 12:01:49 +0000
Manifest next update: Sun 27 Sep 2026 12:01:49 +0000
Files and hashes: 1: GacqQo2_yWLXH1ZsNLzHsN_ZkJg.roa (hash: 0oQogmWm+7L8vyOzeRyovxgJ33f02sYon4T+HeiS/Bg=)
2: Vbu4WFHtQs8CWjvDwWDBgOfuqwQ.roa (hash: N29scv8xguie+t9aPoJpoSulc1+RZLFrY9t5xm5Se4E=)
3: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: lEDS02kEgighZNFKn2poJ7YqanVVUmlmXbIVWIRCaTI=)
4: wsaxcP_FSlrJyUqyv6RnWe5M_1k.roa (hash: 7BcGsYEeMK3lgIGyfCupRWnQz43ULZB5dbROxwaq/V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:d2:b8:fc:31:6c:3f:e6:d3:3a:6d:c3:0f:cd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Validity
Not Before: Sep 26 12:01:49 2026 GMT
Not After : Sep 27 12:01:49 2026 GMT
Subject: CN=e00f7c68bad745acd1632b1e2f5f4ec2b29f4d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c5:1a:50:d7:a6:b7:bc:07:cc:52:9f:44:a4:
3c:51:34:65:39:73:f3:bc:21:dd:2f:64:42:9e:5c:
a9:d3:64:d2:36:a8:34:5a:6e:18:6a:62:ae:a0:5f:
ea:58:04:53:38:f2:8c:6e:b5:bb:0a:f1:fb:d9:8c:
e1:c9:8b:0a:40:79:89:6f:44:95:ea:24:84:71:0b:
4c:0d:a2:ab:3e:66:b3:f5:a9:7c:81:8e:26:6f:7f:
da:59:a5:c6:64:d7:57:d3:b9:17:66:ac:93:11:9c:
fc:32:13:b0:62:67:36:e9:de:d2:c9:6d:b7:ea:a1:
83:ce:01:87:e9:e2:89:da:f0:89:bd:78:d7:6a:97:
c2:10:2c:27:1d:47:be:0e:02:31:c5:89:6a:8b:57:
f3:ca:0d:72:3c:8d:20:b4:6a:14:6b:4d:c2:17:fd:
c7:6c:f0:3d:bb:ef:9b:2a:0f:dd:80:f6:b3:2b:64:
e9:01:a2:4b:52:46:bc:a4:b4:d3:2c:31:61:95:34:
53:7a:74:95:12:74:c7:45:67:20:b2:86:a9:31:2a:
a3:8d:64:cb:d6:b8:15:9e:45:87:ca:90:12:43:d4:
fa:8c:23:76:54:b9:48:db:c0:c0:7d:84:48:8f:12:
ac:df:f0:b8:2a:47:45:bb:d4:08:17:d8:bc:e9:1d:
43:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0F:7C:68:BA:D7:45:AC:D1:63:2B:1E:2F:5F:4E:C2:B2:9F:4D:6C
X509v3 Authority Key Identifier:
keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:00:c7:1f:52:1a:b0:55:32:6f:c6:8b:a0:b8:48:62:fc:16:
5e:81:b5:5d:dc:f8:ba:f0:ed:37:00:7b:75:9c:66:9d:a0:61:
ad:28:51:98:af:3c:16:0e:6b:bb:ef:0c:ba:46:14:fd:04:0b:
06:a0:f3:ac:94:74:ad:fd:9b:46:b7:19:6d:85:57:97:67:2f:
82:1a:28:b2:e9:f6:e8:9c:05:89:8a:b8:a1:fb:9a:e9:a9:71:
24:c1:56:f8:5f:25:ad:7e:f5:4d:43:88:d6:cc:b3:2f:4b:ae:
b7:e2:98:59:0b:ee:ab:a6:1c:9e:8f:af:47:c6:57:2f:d9:0d:
ef:42:e3:bd:e0:d5:83:9f:6e:9c:94:35:7a:d5:f5:db:a9:b0:
94:66:bf:c8:a9:90:0c:75:21:f4:f6:6e:41:52:48:93:59:d0:
77:22:89:5b:73:0f:78:46:dc:63:1f:16:e1:9f:fc:73:88:ac:
97:93:74:cb:10:a3:40:b4:58:29:3e:cc:cb:a9:c5:29:11:11:
3e:f5:c7:0e:a0:4f:c9:06:c7:1d:23:f6:86:dd:d5:ea:b8:2e:
07:18:a1:ed:e5:03:1b:00:b6:0e:d6:05:89:7b:19:69:76:ea:
17:11:54:e5:15:83:aa:8d:e6:c7:81:19:e0:e4:10:32:25:91:
e8:7e:0d:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdl9K4/DFsP+bTOm3DD82sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNzg5NjNiM2M0ZjJkZDE4N2MyMDQzN2RmMWQ3ZDljMTY4
Y2FiODEwHhcNMjYwOTI2MTIwMTQ5WhcNMjYwOTI3MTIwMTQ5WjAzMTEwLwYDVQQD
EyhlMDBmN2M2OGJhZDc0NWFjZDE2MzJiMWUyZjVmNGVjMmIyOWY0ZDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68UaUNemt7wHzFKfRKQ8UTRlOXPz
vCHdL2RCnlyp02TSNqg0Wm4YamKuoF/qWARTOPKMbrW7CvH72YzhyYsKQHmJb0SV
6iSEcQtMDaKrPmaz9al8gY4mb3/aWaXGZNdX07kXZqyTEZz8MhOwYmc26d7SyW23
6qGDzgGH6eKJ2vCJvXjXapfCECwnHUe+DgIxxYlqi1fzyg1yPI0gtGoUa03CF/3H
bPA9u++bKg/dgPazK2TpAaJLUka8pLTTLDFhlTRTenSVEnTHRWcgsoapMSqjjWTL
1rgVnkWHypASQ9T6jCN2VLlI28DAfYRIjxKs3/C4KkdFu9QIF9i86R1D5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAPfGi610Ws0WMrHi9fTsKyn01sMB8GA1UdIwQY
MBaAFI94ljs8Ty3Rh8IEN98dfZwWjKuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgt
MWVmOWYyMzE5NTIyLzEvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgtMWVmOWYyMzE5NTIy
LzEvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAogDHH1Ia
sFUyb8aLoLhIYvwWXoG1Xdz4uvDtNwB7dZxmnaBhrShRmK88Fg5ru+8MukYU/QQL
BqDzrJR0rf2bRrcZbYVXl2cvghoosun26JwFiYq4ofua6alxJMFW+F8lrX71TUOI
1syzL0uut+KYWQvuq6Ycno+vR8ZXL9kN70LjveDVg59unJQ1etX126mwlGa/yKmQ
DHUh9PZuQVJIk1nQdyKJW3MPeEbcYx8W4Z/8c4isl5N0yxCjQLRYKT7My6nFKRER
PvXHDqBPyQbHHSP2ht3V6rguBxih7eUDGwC2DtYFiXsZaXbqFxFU5RWDqo3mx4EZ
4OQQMiWR6H4NWA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 22:20:53 2026 by rpki-client