Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/jUVFZ7xFjEbZlJpsEObaFYqnpcA.mft
File: jUVFZ7xFjEbZlJpsEObaFYqnpcA.mft (raw, json)
Hash identifier: P7mlTJexRe9lK9atyIn/gGnvSU1+MJTJwrhkWKWsK7w=
Subject key identifier: A7:FB:04:F6:52:DF:47:DF:44:1A:95:99:62:11:AE:A9:28:29:A8:3A
Authority key identifier: 8D:45:45:67:BC:45:8C:46:D9:94:9A:6C:10:E6:DA:15:8A:A7:A5:C0
Certificate issuer: /CN=8d454567bc458c46d9949a6c10e6da158aa7a5c0
Certificate serial: 01A0ED0B15A3B83535451843FDB53E8B69CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jUVFZ7xFjEbZlJpsEObaFYqnpcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/jUVFZ7xFjEbZlJpsEObaFYqnpcA.mft
Manifest number: F4
Signing time: Tue 29 Sep 2026 12:02:01 +0000
Manifest this update: Tue 29 Sep 2026 12:02:01 +0000
Manifest next update: Wed 30 Sep 2026 12:02:01 +0000
Files and hashes: 1: J_rm4irlXyul-9SSioq0J12OhGw.roa (hash: NMx7tZKe46TFJ5ivGujHYkVVqt05EhMgXUNXkv1EpJs=)
2: jUVFZ7xFjEbZlJpsEObaFYqnpcA.crl (hash: /Gr5xvB7rOjzrW1ni2sa80V1d4zL2X7AGKSMvOgxrms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/jUVFZ7xFjEbZlJpsEObaFYqnpcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/jUVFZ7xFjEbZlJpsEObaFYqnpcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jUVFZ7xFjEbZlJpsEObaFYqnpcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 12:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0b:15:a3:b8:35:35:45:18:43:fd:b5:3e:8b:69:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d454567bc458c46d9949a6c10e6da158aa7a5c0
Validity
Not Before: Sep 29 12:02:01 2026 GMT
Not After : Sep 30 12:02:01 2026 GMT
Subject: CN=a7fb04f652df47df441a95996211aea92829a83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:2a:96:d8:eb:fa:28:36:04:0e:b0:ed:de:
19:a5:f3:c3:6d:4d:54:80:01:59:ae:db:09:f2:cf:
6d:ff:17:a3:2d:fa:a1:bd:ec:be:45:df:f7:9b:89:
09:82:58:da:36:c9:4a:b9:45:f8:b5:0e:90:2c:8c:
6d:dc:50:1b:dc:39:48:70:3f:24:55:dc:8f:a2:2b:
6b:da:11:92:26:28:b1:34:a5:4a:09:cf:40:95:c6:
d9:89:98:bb:b7:96:ab:e3:75:cc:42:5a:42:7d:f4:
24:ae:fa:dd:2c:1a:72:76:9c:57:88:bc:09:83:75:
6c:18:65:38:bb:94:15:af:00:d2:ec:b2:53:3a:28:
25:a9:91:fe:7c:1e:41:61:44:19:f6:c1:46:b3:35:
f2:01:b0:9d:ac:67:b1:95:5b:8b:cb:06:f4:76:61:
39:53:81:da:7d:0a:d4:c5:b6:c7:08:7e:5e:61:59:
bb:9c:51:a9:82:17:f5:0a:0b:b0:2e:3a:50:ff:e0:
00:88:89:08:3a:fd:e2:ed:bc:dd:1f:a6:86:c4:fa:
d9:56:70:05:91:73:24:0c:29:06:4b:f9:5d:3a:7f:
3e:14:8d:b1:16:5e:13:4e:53:51:04:66:f9:f8:86:
47:68:25:d6:fb:44:62:42:65:2f:da:65:91:6d:73:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FB:04:F6:52:DF:47:DF:44:1A:95:99:62:11:AE:A9:28:29:A8:3A
X509v3 Authority Key Identifier:
keyid:8D:45:45:67:BC:45:8C:46:D9:94:9A:6C:10:E6:DA:15:8A:A7:A5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jUVFZ7xFjEbZlJpsEObaFYqnpcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/jUVFZ7xFjEbZlJpsEObaFYqnpcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/jUVFZ7xFjEbZlJpsEObaFYqnpcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c3:ff:94:94:57:4a:83:37:a3:24:5e:7b:f6:f7:31:c6:3a:
d0:58:7a:b9:26:b3:13:fc:b6:75:86:93:b1:89:ec:55:4a:07:
c6:f3:87:36:f7:54:93:a0:99:27:5b:f8:63:3b:7b:fa:eb:61:
04:ca:ff:ea:f6:f7:42:aa:d9:ad:27:27:90:9b:44:b2:e4:07:
47:ca:82:0c:d0:7b:10:96:57:65:92:4d:7a:bf:9d:5c:00:9d:
34:1d:13:29:c6:ea:0a:57:1d:60:08:1e:21:5b:da:f3:23:91:
9c:fe:6e:25:e0:04:65:b0:12:01:b8:ac:82:64:fe:ff:8b:a7:
00:ab:e4:1d:79:a8:3c:38:f1:66:e4:e5:a4:2a:26:92:24:53:
f5:39:f8:06:5e:ef:96:fb:6d:5b:a3:7c:34:b7:27:25:2e:3c:
60:60:9f:86:af:57:bc:71:ca:11:68:e0:1b:88:a4:2e:e7:c7:
79:bd:bf:80:88:78:d0:0f:15:52:aa:04:cd:bd:c0:7e:18:33:
c4:c7:35:3d:7b:80:75:a1:56:fb:0a:0c:b6:5a:7a:66:b9:0f:
e7:8a:cb:9e:4b:c0:41:5f:62:68:f4:a0:60:d9:d7:0a:0c:10:
ed:ab:1c:e1:43:b0:7d:20:b0:da:cf:0d:d9:f4:71:a7:1a:ae:
da:e2:02:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDtCxWjuDU1RRhD/bU+i2nKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNDU0NTY3YmM0NThjNDZkOTk0OWE2YzEwZTZkYTE1OGFh
N2E1YzAwHhcNMjYwOTI5MTIwMjAxWhcNMjYwOTMwMTIwMjAxWjAzMTEwLwYDVQQD
EyhhN2ZiMDRmNjUyZGY0N2RmNDQxYTk1OTk2MjExYWVhOTI4MjlhODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEcqltjr+ig2BA6w7d4ZpfPDbU1U
gAFZrtsJ8s9t/xejLfqhvey+Rd/3m4kJgljaNslKuUX4tQ6QLIxt3FAb3DlIcD8k
VdyPoitr2hGSJiixNKVKCc9AlcbZiZi7t5ar43XMQlpCffQkrvrdLBpydpxXiLwJ
g3VsGGU4u5QVrwDS7LJTOiglqZH+fB5BYUQZ9sFGszXyAbCdrGexlVuLywb0dmE5
U4HafQrUxbbHCH5eYVm7nFGpghf1CguwLjpQ/+AAiIkIOv3i7bzdH6aGxPrZVnAF
kXMkDCkGS/ldOn8+FI2xFl4TTlNRBGb5+IZHaCXW+0RiQmUv2mWRbXOpPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKf7BPZS30ffRBqVmWIRrqkoKag6MB8GA1UdIwQY
MBaAFI1FRWe8RYxG2ZSabBDm2hWKp6XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalVWRlo3eEZqRWJabEpwc0VPYmFGWXFucGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yZmE2MjQtNWI1ZC00NjQ2LWIxM2Qt
MTY1MTFhNmVkOWM2LzEvalVWRlo3eEZqRWJabEpwc0VPYmFGWXFucGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yZmE2MjQtNWI1ZC00NjQ2LWIxM2QtMTY1MTFhNmVkOWM2
LzEvalVWRlo3eEZqRWJabEpwc0VPYmFGWXFucGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZcP/lJRX
SoM3oyRee/b3McY60Fh6uSazE/y2dYaTsYnsVUoHxvOHNvdUk6CZJ1v4Yzt7+uth
BMr/6vb3QqrZrScnkJtEsuQHR8qCDNB7EJZXZZJNer+dXACdNB0TKcbqClcdYAge
IVva8yORnP5uJeAEZbASAbisgmT+/4unAKvkHXmoPDjxZuTlpComkiRT9Tn4Bl7v
lvttW6N8NLcnJS48YGCfhq9XvHHKEWjgG4ikLufHeb2/gIh40A8VUqoEzb3Afhgz
xMc1PXuAdaFW+woMtlp6ZrkP54rLnkvAQV9iaPSgYNnXCgwQ7asc4UOwfSCw2s8N
2fRxpxqu2uICmg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 21:29:02 2026 by rpki-client