Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: mmOmqZ2G2NdHobGGWfv/iVTrugqEKDQzV32prC7SoYw=
Subject key identifier: FE:52:8B:9B:5E:F3:0B:F6:D3:61:9C:EA:95:FF:35:64:4A:5D:67:08
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 01A135911125618A10CA70D824C9B7098CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 19A1
Signing time: Tue 13 Oct 2026 14:01:01 +0000
Manifest this update: Tue 13 Oct 2026 14:01:01 +0000
Manifest next update: Wed 14 Oct 2026 14:01:01 +0000
Files and hashes: 1: aGm4oWzWCr3hZ2n5emUeTMzgGSk.roa (hash: m6Rf2fpcq/fb4aUDhuQy0L8UgTU/UIaDKJQ6AQd8ZLw=)
2: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: cz3ro8qovR8ySUcaztKcX9/78GCHBCC5Cbl57JQgb74=)
3: xCi0G_e0Q695aPNT6gcJGjk5Aik.roa (hash: 5ipSKU666jOWKtI/B+Mronv23Zfmy4lLPWtuX/CkhF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:91:11:25:61:8a:10:ca:70:d8:24:c9:b7:09:8c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Oct 13 14:01:01 2026 GMT
Not After : Oct 14 14:01:01 2026 GMT
Subject: CN=fe528b9b5ef30bf6d3619cea95ff35644a5d6708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:b2:6b:4e:21:d9:2e:fb:7b:13:24:a8:a4:
de:d8:1e:35:cf:63:2c:64:6a:95:2d:9c:d6:ba:b1:
4b:4d:db:20:c5:73:96:c9:11:94:b7:73:c7:24:93:
0b:ef:34:e9:92:eb:02:5d:6b:bc:e7:34:3d:48:4c:
6f:b3:f9:71:db:29:e9:8b:6e:39:16:72:2e:f0:4c:
ec:42:89:fc:4a:b4:67:ed:51:b7:b9:0c:4a:73:a5:
24:e3:b2:45:41:3c:80:ba:b9:67:69:d3:af:be:04:
ea:a7:b5:96:f1:50:91:ef:37:e6:9b:8d:c9:14:2a:
86:0d:ee:75:74:4d:e7:5f:f9:f9:9c:63:d5:a4:ed:
2f:08:d6:92:d3:8b:6d:0b:6f:ec:c4:6d:91:75:37:
ba:6b:ce:e0:80:98:db:f9:e4:ac:d3:77:f7:00:21:
88:e5:58:5a:dc:5f:59:1f:72:b5:81:a3:97:8b:f7:
56:67:1c:90:54:ba:86:72:f9:6d:46:61:23:4a:ee:
f3:8d:fc:39:90:72:cc:68:d8:c8:a2:38:4d:fd:27:
a1:8d:1f:42:97:c3:a7:27:02:2a:05:77:cf:4b:aa:
fc:d9:10:ac:db:50:a6:36:40:08:11:97:4d:91:91:
be:0d:2c:b1:67:d2:5f:f3:d7:32:e5:04:07:0c:23:
0c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:52:8B:9B:5E:F3:0B:F6:D3:61:9C:EA:95:FF:35:64:4A:5D:67:08
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4b:dd:a3:58:01:ff:09:b1:d9:c4:0f:8b:01:0d:45:20:4f:
f0:7f:36:2e:ea:b5:d6:d6:48:9d:0d:ca:fa:e2:7e:60:04:f5:
e2:1f:18:a7:9c:a4:27:1e:50:9f:20:85:7b:63:7b:00:f2:2f:
30:97:a3:ca:4c:df:0e:69:7b:f6:ce:d8:17:e5:f3:b2:f3:2e:
57:d8:b3:dc:f2:97:1e:ee:8a:20:5c:50:47:b1:11:e6:77:29:
25:76:73:28:23:2a:2f:c7:ec:94:62:c7:52:55:f4:98:c8:9b:
22:23:68:4b:18:a8:87:fd:78:78:b9:bd:b2:6c:d5:34:64:e2:
e3:8e:80:7b:07:5a:e3:d8:57:54:ac:e2:51:87:28:56:93:16:
70:18:cf:31:e9:7e:5e:43:43:47:9b:a2:6d:f5:1b:39:ee:ae:
bb:d9:bc:34:42:85:2e:eb:83:eb:8e:0b:a2:36:76:1e:1e:a3:
23:70:64:42:fe:03:45:a9:15:08:0d:e1:78:2b:75:f6:fc:cd:
a1:8c:01:6f:71:2d:c3:e8:8a:a1:db:65:28:46:83:e6:b0:d1:
89:bf:d3:1a:1d:51:c1:1a:f4:90:5e:d8:f4:63:07:80:13:d1:
e3:ad:30:43:a7:82:80:d8:8a:f9:07:8e:ff:a3:c2:df:b0:1f:
43:f1:09:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1kRElYYoQynDYJMm3CYzoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYTQzYmIzOGQ2ZTBiZThjMjg5MDk0YmE0YWRmMzg3ZDBk
ZTQwYTAwHhcNMjYxMDEzMTQwMTAxWhcNMjYxMDE0MTQwMTAxWjAzMTEwLwYDVQQD
EyhmZTUyOGI5YjVlZjMwYmY2ZDM2MTljZWE5NWZmMzU2NDRhNWQ2NzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojyya04h2S77exMkqKTe2B41z2Ms
ZGqVLZzWurFLTdsgxXOWyRGUt3PHJJML7zTpkusCXWu85zQ9SExvs/lx2ynpi245
FnIu8EzsQon8SrRn7VG3uQxKc6Uk47JFQTyAurlnadOvvgTqp7WW8VCR7zfmm43J
FCqGDe51dE3nX/n5nGPVpO0vCNaS04ttC2/sxG2RdTe6a87ggJjb+eSs03f3ACGI
5Vha3F9ZH3K1gaOXi/dWZxyQVLqGcvltRmEjSu7zjfw5kHLMaNjIojhN/SehjR9C
l8OnJwIqBXfPS6r82RCs21CmNkAIEZdNkZG+DSyxZ9Jf89cy5QQHDCMMkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5Si5te8wv202Gc6pX/NWRKXWcIMB8GA1UdIwQY
MBaAFI6kO7ONbgvowokJS6St84fQ3kCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82Zjg1YjEtNmEzYy00MDhkLWEzOWIt
MjRmN2Y5NDM2Y2VjLzEvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82Zjg1YjEtNmEzYy00MDhkLWEzOWItMjRmN2Y5NDM2Y2Vj
LzEvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkvdo1gB
/wmx2cQPiwENRSBP8H82Luq11tZInQ3K+uJ+YAT14h8Yp5ykJx5QnyCFe2N7APIv
MJejykzfDml79s7YF+XzsvMuV9iz3PKXHu6KIFxQR7ER5ncpJXZzKCMqL8fslGLH
UlX0mMibIiNoSxioh/14eLm9smzVNGTi446Aewda49hXVKziUYcoVpMWcBjPMel+
XkNDR5uibfUbOe6uu9m8NEKFLuuD644LojZ2Hh6jI3BkQv4DRakVCA3heCt19vzN
oYwBb3Etw+iKodtlKEaD5rDRib/TGh1RwRr0kF7Y9GMHgBPR460wQ6eCgNiK+QeO
/6PC37AfQ/EJRg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:10:42 2026 by rpki-client