Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
File: JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json)
Hash identifier: 3QN6C/2TcJh+fWVH7Fly1gy50ncAGsYVan67BvkamCc=
Subject key identifier: 9B:5B:31:BB:44:67:56:0B:BC:B0:0D:9C:71:5D:47:92:12:5E:E7:7B
Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
Certificate issuer: /CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Certificate serial: 01A125AFE09F23C61D3462D400D33D0F4746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
Manifest number: 04CC
Signing time: Sat 10 Oct 2026 12:00:45 +0000
Manifest this update: Sat 10 Oct 2026 12:00:45 +0000
Manifest next update: Sun 11 Oct 2026 12:00:45 +0000
Files and hashes: 1: D17eb-YaN69zmYAWu9of4KG5E8Y.roa (hash: stGJZzeKt4km6Sv/uUT+Q3OWclxmp1dOYGAe5XGVe2w=)
2: FZgi84RMvT9_2vE42FDuM9M6yQo.roa (hash: MWv0A+a3Hv1l7nsYC0PKMV2mBEaDOEQF7nbo1KN1I5Q=)
3: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: CpwXoPmKD83DnZUNnlQ39g07iJtI+V2+zC2UmXoHa3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:af:e0:9f:23:c6:1d:34:62:d4:00:d3:3d:0f:47:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Validity
Not Before: Oct 10 12:00:45 2026 GMT
Not After : Oct 11 12:00:45 2026 GMT
Subject: CN=9b5b31bb4467560bbcb00d9c715d4792125ee77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:eb:cf:66:99:ca:0c:fe:b3:c0:6a:17:d8:b1:
1a:70:bb:78:1b:d1:0f:e0:99:20:71:d3:dd:93:f2:
44:a5:b5:65:7d:b1:43:e3:00:1e:23:94:2a:66:f9:
0f:78:ba:fe:73:62:bc:8c:01:ea:35:09:3a:1b:ff:
45:d8:0b:40:9e:cc:0e:ca:22:de:d8:a2:5d:db:c5:
46:6f:90:f0:08:43:78:8b:ae:33:5b:f9:c5:fd:83:
93:30:28:a6:9d:84:d8:95:2d:e3:29:15:44:c5:ea:
f0:27:8d:dc:30:39:cf:10:d4:2b:94:56:25:8c:38:
75:3c:89:f9:7e:7f:99:4b:a5:79:10:d5:66:a5:93:
90:b5:ca:6f:57:04:9f:16:a1:30:9b:8c:40:de:ff:
29:be:0d:d0:17:1f:eb:d7:fc:22:fa:ea:6c:67:8a:
01:01:24:70:c4:da:6d:f5:ea:93:62:74:22:b7:43:
8a:51:15:a5:5e:ed:b9:f4:69:3e:38:48:cd:90:ff:
7c:9d:e1:12:2a:18:41:d3:de:70:fb:2b:e5:15:df:
c6:d5:ce:cb:7a:f1:af:c6:cc:ed:8c:29:af:6b:62:
17:db:29:53:00:b5:ed:44:59:c4:4e:85:58:5a:18:
ca:9c:e7:bb:2c:a5:d4:b4:8b:15:04:34:6c:29:c9:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5B:31:BB:44:67:56:0B:BC:B0:0D:9C:71:5D:47:92:12:5E:E7:7B
X509v3 Authority Key Identifier:
keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a7:5a:58:06:4a:94:5e:06:b3:5c:96:04:03:bf:33:8d:8c:
48:4d:da:e7:e0:97:91:33:da:b6:93:50:8b:3f:49:85:85:70:
48:08:67:f2:41:a1:e3:4c:10:3b:48:83:72:25:61:9a:d1:18:
17:0f:fd:77:8d:d5:0e:1e:0a:ec:53:e8:06:6d:b9:10:1f:42:
41:5f:8c:9e:52:da:65:44:88:1e:a7:7a:6c:d8:01:db:04:4f:
7d:4b:06:09:11:f4:10:7e:0c:f4:db:2f:dd:2e:02:2a:11:0f:
57:f9:45:40:32:84:61:d1:b6:2b:87:48:0f:26:8d:23:eb:e4:
2f:e5:70:b1:54:fc:14:cb:b7:4c:22:be:d7:9d:33:e1:e2:60:
5b:af:66:2a:14:09:e1:07:f8:52:9b:b6:4d:d0:d6:49:b8:85:
6b:87:65:a4:ae:d1:40:9c:af:2e:36:81:4b:df:ae:c8:77:6e:
ff:b5:60:ee:08:f1:71:8d:1d:17:ce:94:9c:36:71:24:d1:12:
32:b3:60:b8:6b:d8:70:e0:4e:6d:40:9f:e4:4f:d3:4a:9b:56:
fa:47:7c:52:22:37:69:5c:51:f4:9d:7c:3f:1c:c0:a7:07:a2:
ec:ef:32:7e:1e:d4:62:eb:3d:7b:e9:8b:33:e3:51:af:70:ae:
11:30:8a:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElr+CfI8YdNGLUANM9D0dGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NWRlNjVmMzc1MTVkZjhjYzI0MmYzNmRiYmVmMzIwYzZk
OTBiNGYwHhcNMjYxMDEwMTIwMDQ1WhcNMjYxMDExMTIwMDQ1WjAzMTEwLwYDVQQD
Eyg5YjViMzFiYjQ0Njc1NjBiYmNiMDBkOWM3MTVkNDc5MjEyNWVlNzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuvPZpnKDP6zwGoX2LEacLt4G9EP
4JkgcdPdk/JEpbVlfbFD4wAeI5QqZvkPeLr+c2K8jAHqNQk6G/9F2AtAnswOyiLe
2KJd28VGb5DwCEN4i64zW/nF/YOTMCimnYTYlS3jKRVExerwJ43cMDnPENQrlFYl
jDh1PIn5fn+ZS6V5ENVmpZOQtcpvVwSfFqEwm4xA3v8pvg3QFx/r1/wi+upsZ4oB
ASRwxNpt9eqTYnQit0OKURWlXu259Gk+OEjNkP98neESKhhB095w+yvlFd/G1c7L
evGvxsztjCmva2IX2ylTALXtRFnEToVYWhjKnOe7LKXUtIsVBDRsKcnD4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtbMbtEZ1YLvLANnHFdR5ISXud7MB8GA1UdIwQY
MBaAFCRd5l83UV34zCQvNtu+8yDG2QtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mNmUwOTktOWI2NC00MDQxLTlkMTkt
MzE3Mjc5ODE4YWNjLzEvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9mNmUwOTktOWI2NC00MDQxLTlkMTktMzE3Mjc5ODE4YWNj
LzEvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKdaWAZK
lF4Gs1yWBAO/M42MSE3a5+CXkTPatpNQiz9JhYVwSAhn8kGh40wQO0iDciVhmtEY
Fw/9d43VDh4K7FPoBm25EB9CQV+MnlLaZUSIHqd6bNgB2wRPfUsGCRH0EH4M9Nsv
3S4CKhEPV/lFQDKEYdG2K4dIDyaNI+vkL+VwsVT8FMu3TCK+150z4eJgW69mKhQJ
4Qf4Upu2TdDWSbiFa4dlpK7RQJyvLjaBS9+uyHdu/7Vg7gjxcY0dF86UnDZxJNES
MrNguGvYcOBObUCf5E/TSptW+kd8UiI3aVxR9J18PxzApwei7O8yfh7UYus9e+mL
M+NRr3CuETCKKA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:17:32 2026 by rpki-client