Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json)
Hash identifier: KBfFrIhMxLJUHJYcXVeYnDZH92Q5FxGLUhOt9uonSY0=
Subject key identifier: E4:61:A6:82:A6:2D:4D:75:42:08:16:23:80:93:E0:E8:64:59:92:6C
Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7
Certificate serial: 01A139A414A8E9E28D1BCDDDB52A2FB43407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
Manifest number: 1A35
Signing time: Wed 14 Oct 2026 09:00:16 +0000
Manifest this update: Wed 14 Oct 2026 09:00:16 +0000
Manifest next update: Thu 15 Oct 2026 09:00:16 +0000
Files and hashes: 1: jn9K_pC0GX4USuWZkNDQAr2-7bI.roa (hash: aZdHO+TkGWUBAKzieBcFCMZv2bHsKGiPJwYHudRBqcI=)
2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: MpoItyqvFYmvQTp70gm9fwg8mUn6yqv2bFRKt+zVxLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:a4:14:a8:e9:e2:8d:1b:cd:dd:b5:2a:2f:b4:34:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7
Validity
Not Before: Oct 14 09:00:16 2026 GMT
Not After : Oct 15 09:00:16 2026 GMT
Subject: CN=e461a682a62d4d75420816238093e0e86459926c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:68:4a:35:f2:8a:6e:2e:83:37:29:32:35:
b2:05:ef:6c:e3:c7:f5:13:cc:9a:a8:8d:a6:fa:af:
fa:e2:9e:b5:47:4e:ab:a6:02:68:0f:ca:cb:48:ef:
8a:a8:6e:23:f7:40:9a:5e:1e:13:5c:77:c9:8a:bc:
26:a1:84:bd:05:11:50:2b:e2:d5:a7:7d:bd:f7:d9:
0a:29:ea:03:15:33:e8:ed:4e:3d:92:d0:97:9f:ec:
f2:a2:d9:63:8f:e6:f1:fe:53:90:07:2e:e6:61:2d:
8c:72:01:3d:cb:76:6e:fa:ca:7d:e4:70:c1:0a:13:
a9:15:9f:70:66:99:00:2c:d2:3e:64:66:ae:ab:10:
39:0c:75:12:f5:c7:e8:79:63:f9:e1:fa:ce:39:2e:
e3:55:f1:b4:6c:5e:cf:6e:01:ae:af:5c:df:4e:90:
49:d1:8e:e6:be:9e:dc:5e:fe:7a:ee:50:9e:cb:96:
d2:34:a5:fe:d2:f8:23:8a:a8:f9:28:65:5c:13:55:
74:1a:81:15:45:f1:44:58:50:1a:f3:2f:6e:9d:9b:
a1:28:4e:39:a4:97:5b:0c:77:98:5d:30:88:f4:5e:
97:c5:8a:00:c4:e2:17:d7:0f:a1:36:15:d3:f3:d7:
1e:79:d5:e3:e6:cb:09:b7:43:64:40:b5:88:c9:2d:
3d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:61:A6:82:A6:2D:4D:75:42:08:16:23:80:93:E0:E8:64:59:92:6C
X509v3 Authority Key Identifier:
keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ef:f9:92:b1:1b:f2:55:2c:e7:c4:c9:d4:b4:e7:18:a3:ca:
63:10:b4:f9:53:76:1d:7f:13:5c:f6:aa:ea:cb:18:fc:10:8a:
fd:49:1d:2b:ba:31:2d:4e:bb:a8:75:3e:bb:b3:8a:09:b9:00:
b9:f0:43:e0:9c:18:ef:21:cd:0f:d0:cd:ac:01:fd:75:8f:71:
2f:a2:48:2a:d7:0b:50:8a:e9:86:24:34:de:40:64:53:44:be:
59:0f:fe:f9:a0:03:a6:ca:07:7c:00:bd:46:1d:75:c0:d3:03:
43:73:54:42:af:4c:99:13:f5:08:2e:19:bb:90:c7:f2:fd:b4:
2b:19:57:9f:a6:d3:55:89:93:1b:ff:47:60:6b:2b:d7:b0:54:
40:88:a9:0b:33:85:d3:c0:83:8e:7b:7f:21:ab:39:7a:60:6d:
87:1c:2a:d7:8c:e5:c2:00:f8:b1:11:75:c3:99:89:c6:31:83:
08:88:34:48:01:f0:61:96:d2:8c:4b:f3:1a:b8:6c:95:71:9e:
57:bb:f2:07:6c:91:d5:de:e0:83:b4:dc:dd:3a:01:d1:03:1f:
dc:15:2f:1a:33:b5:b4:54:0b:40:86:21:bb:f0:b7:b7:e3:f0:
91:ef:3a:26:10:00:4d:1d:8a:e6:2a:b1:26:9e:20:d4:ba:32:
44:4c:62:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE5pBSo6eKNG83dtSovtDQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOTRhMzY5MTA2NDgwM2Q4NjMwNjAyMzBhNjYwZjIzMDVl
ZWMyZTcwHhcNMjYxMDE0MDkwMDE2WhcNMjYxMDE1MDkwMDE2WjAzMTEwLwYDVQQD
EyhlNDYxYTY4MmE2MmQ0ZDc1NDIwODE2MjM4MDkzZTBlODY0NTk5MjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb1oSjXyim4ugzcpMjWyBe9s48f1
E8yaqI2m+q/64p61R06rpgJoD8rLSO+KqG4j90CaXh4TXHfJirwmoYS9BRFQK+LV
p32999kKKeoDFTPo7U49ktCXn+zyotljj+bx/lOQBy7mYS2McgE9y3Zu+sp95HDB
ChOpFZ9wZpkALNI+ZGauqxA5DHUS9cfoeWP54frOOS7jVfG0bF7PbgGur1zfTpBJ
0Y7mvp7cXv567lCey5bSNKX+0vgjiqj5KGVcE1V0GoEVRfFEWFAa8y9unZuhKE45
pJdbDHeYXTCI9F6XxYoAxOIX1w+hNhXT89ceedXj5ssJt0NkQLWIyS09BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORhpoKmLU11QggWI4CT4OhkWZJsMB8GA1UdIwQY
MBaAFKyUo2kQZIA9hjBgIwpmDyMF7sLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8zMDI1NmMtZjIwMS00ZjQ4LWFjYTAt
ZGJlNmM5MTBiYmE2LzEvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8zMDI1NmMtZjIwMS00ZjQ4LWFjYTAtZGJlNmM5MTBiYmE2
LzEvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+/5krEb
8lUs58TJ1LTnGKPKYxC0+VN2HX8TXPaq6ssY/BCK/UkdK7oxLU67qHU+u7OKCbkA
ufBD4JwY7yHND9DNrAH9dY9xL6JIKtcLUIrphiQ03kBkU0S+WQ/++aADpsoHfAC9
Rh11wNMDQ3NUQq9MmRP1CC4Zu5DH8v20KxlXn6bTVYmTG/9HYGsr17BUQIipCzOF
08CDjnt/Ias5emBthxwq14zlwgD4sRF1w5mJxjGDCIg0SAHwYZbSjEvzGrhslXGe
V7vyB2yR1d7gg7Tc3ToB0QMf3BUvGjO1tFQLQIYhu/C3t+Pwke86JhAATR2K5iqx
Jp4g1LoyRExi/g==
-----END CERTIFICATE-----
Generated at Wed Oct 14 19:23:27 2026 by rpki-client