Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: rGvFvFQLzvXAh9K+36u6TlniHK5HlCRZt2OrylVoEmQ=
Subject key identifier: 0E:1B:BA:DE:17:15:18:64:AE:4A:9C:50:53:83:27:D0:7C:19:DC:CC
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 01A0CB2231D22AC42F397CCC5457C13CB51A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 17B5
Signing time: Tue 22 Sep 2026 22:00:10 +0000
Manifest this update: Tue 22 Sep 2026 22:00:10 +0000
Manifest next update: Wed 23 Sep 2026 22:00:10 +0000
Files and hashes: 1: jOlvTqoRsdAulg6Y3XpZsAr0oMk.roa (hash: cs60eVRzgZLIh6eTxfnRAFFGp7Qvb56odPMGxJ4uAvU=)
2: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: PTGsbuY4P5doOgX607inVPAQ98b6CcLUdBGHHngHzf4=)
3: sAH-vh-27sRa8XMB1zXDPSKTTFE.roa (hash: Vvwat5s3NJzZ4utG1tsbAtKbf8nI+e0SigwDHdU+hO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:31:d2:2a:c4:2f:39:7c:cc:54:57:c1:3c:b5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Sep 22 22:00:10 2026 GMT
Not After : Sep 23 22:00:10 2026 GMT
Subject: CN=0e1bbade17151864ae4a9c50538327d07c19dccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:a8:de:2f:b0:b3:5b:98:a1:3f:b6:a1:41:d0:
3f:75:d4:38:6b:00:cb:e8:32:0d:fd:49:04:2c:01:
4b:99:01:be:9c:15:73:ae:c1:2e:2f:03:75:bf:c2:
0a:3d:f1:9b:22:01:b5:cd:a9:09:39:37:ea:14:6d:
77:8a:72:f5:8e:50:04:64:9f:d5:6a:bf:ad:9f:61:
b4:cf:b5:40:ca:bb:e7:17:a6:cc:e1:c7:69:ce:22:
b1:14:1f:bd:8a:1d:5a:b3:9e:21:e6:c6:39:d1:30:
5d:f4:fd:bc:97:8b:df:88:ed:5b:ab:fa:2e:14:2f:
e6:be:6a:3f:28:f2:f3:a4:45:c4:f6:5f:aa:bb:1a:
18:61:f1:01:fa:18:5e:6b:0d:c7:f5:9a:dc:d4:97:
d7:3f:12:9b:e9:8d:ca:a1:7e:2b:e8:a7:3c:de:7f:
c6:7f:53:f6:78:e5:f4:16:61:9d:a3:41:a4:88:50:
4d:be:05:3b:e6:5e:db:d7:e8:03:d3:5a:9e:01:74:
04:c8:67:76:6d:9b:36:24:1a:f8:56:de:26:08:55:
10:cf:05:44:68:8c:06:fa:2f:b3:18:e7:7a:ea:d1:
8c:ba:d0:67:44:10:cb:a4:6d:a7:f9:46:16:41:88:
d2:31:2d:4e:cb:7f:23:c8:d4:97:f2:03:22:2f:34:
a8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1B:BA:DE:17:15:18:64:AE:4A:9C:50:53:83:27:D0:7C:19:DC:CC
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:96:5a:03:b6:25:87:66:e6:0c:ae:5a:86:a5:02:04:6e:0d:
ce:07:8d:9a:e9:4b:1a:8a:d8:d1:25:11:8f:4c:a3:d3:b5:8c:
c6:b1:2f:9e:bf:3c:01:71:bf:8c:81:ad:15:a2:a6:b7:ba:71:
23:18:9d:da:fe:a5:0d:91:3e:bc:99:6f:4a:ea:61:0d:f1:f0:
14:60:ec:66:6f:bf:91:9a:f3:2f:14:a2:7d:7d:63:87:4a:cd:
c5:e0:6e:16:cc:7e:2a:1d:02:50:af:7c:d2:2e:11:a7:72:a7:
e5:a0:3a:19:24:94:c7:98:2d:46:eb:9b:fc:b3:7e:17:fb:5f:
0c:91:b5:79:5a:eb:d4:c7:0d:7a:ed:dc:a2:bf:b8:ad:77:42:
6b:cc:b2:42:47:3e:cf:f5:49:25:67:a3:c0:bf:fb:05:c1:30:
93:bc:5b:2b:68:2a:e2:8f:9a:f1:21:31:21:2b:2b:46:58:6e:
c2:67:b7:55:ff:ac:57:cb:96:d4:3d:8d:da:77:6e:b8:6d:cb:
59:c5:7c:20:e9:32:f8:d1:67:00:0e:0e:e9:9c:b5:b9:f9:32:
23:33:2b:5e:c8:23:1b:50:09:d2:95:56:a0:b7:1d:23:e2:ec:
61:6a:a5:b0:b8:25:b3:3a:03:26:bd:9c:4c:1d:88:d9:4e:f7:
49:3d:4d:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLIjHSKsQvOXzMVFfBPLUaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNmJkM2Q1NDVlZWIwYmU0MGYyODM4OTlkMjE4Y2Y0ODY4
ZTk0OTAwHhcNMjYwOTIyMjIwMDEwWhcNMjYwOTIzMjIwMDEwWjAzMTEwLwYDVQQD
EygwZTFiYmFkZTE3MTUxODY0YWU0YTljNTA1MzgzMjdkMDdjMTlkY2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+qjeL7CzW5ihP7ahQdA/ddQ4awDL
6DIN/UkELAFLmQG+nBVzrsEuLwN1v8IKPfGbIgG1zakJOTfqFG13inL1jlAEZJ/V
ar+tn2G0z7VAyrvnF6bM4cdpziKxFB+9ih1as54h5sY50TBd9P28l4vfiO1bq/ou
FC/mvmo/KPLzpEXE9l+quxoYYfEB+hheaw3H9Zrc1JfXPxKb6Y3KoX4r6Kc83n/G
f1P2eOX0FmGdo0GkiFBNvgU75l7b1+gD01qeAXQEyGd2bZs2JBr4Vt4mCFUQzwVE
aIwG+i+zGOd66tGMutBnRBDLpG2n+UYWQYjSMS1Oy38jyNSX8gMiLzSouwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4but4XFRhkrkqcUFODJ9B8GdzMMB8GA1UdIwQY
MBaAFI5r09VF7rC+QPKDiZ0hjPSGjpSQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDkt
YjEwYTIyZDBhNDc2LzEvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDktYjEwYTIyZDBhNDc2
LzEvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapZaA7Yl
h2bmDK5ahqUCBG4NzgeNmulLGorY0SURj0yj07WMxrEvnr88AXG/jIGtFaKmt7px
Ixid2v6lDZE+vJlvSuphDfHwFGDsZm+/kZrzLxSifX1jh0rNxeBuFsx+Kh0CUK98
0i4Rp3Kn5aA6GSSUx5gtRuub/LN+F/tfDJG1eVrr1McNeu3cor+4rXdCa8yyQkc+
z/VJJWejwL/7BcEwk7xbK2gq4o+a8SExISsrRlhuwme3Vf+sV8uW1D2N2nduuG3L
WcV8IOky+NFnAA4O6Zy1ufkyIzMrXsgjG1AJ0pVWoLcdI+LsYWqlsLglszoDJr2c
TB2I2U73ST1NkA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:19:23 2026 by rpki-client