Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json)
Hash identifier: muQT5GHqpwHb1dAIbR0gmFpFptKEK62AeYsO3CInWYE=
Subject key identifier: 2C:85:EA:3F:9F:FC:E3:EA:37:C6:14:4F:C8:E0:FB:DD:38:0E:CE:4A
Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Certificate serial: 01A10701547B2DA4D35990FD75AB5B9A602A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
Manifest number: 157C
Signing time: Sun 04 Oct 2026 13:01:29 +0000
Manifest this update: Sun 04 Oct 2026 13:01:29 +0000
Manifest next update: Mon 05 Oct 2026 13:01:29 +0000
Files and hashes: 1: L24zb2GPwHD-aPGno9VtNYT_9UA.roa (hash: TV8bwr8KXxyIpZ3hz+LfUH4wszhJw0hokfRXNpqsBSk=)
2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: SfmHQORx/KE26TBYSbcQIJnhk/NyEtdc9fygUritIq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:01:54:7b:2d:a4:d3:59:90:fd:75:ab:5b:9a:60:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Validity
Not Before: Oct 4 13:01:29 2026 GMT
Not After : Oct 5 13:01:29 2026 GMT
Subject: CN=2c85ea3f9ffce3ea37c6144fc8e0fbdd380ece4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:05:e4:78:fd:2e:10:a5:84:d4:58:65:34:a2:
2f:70:74:46:64:fb:2a:5b:c3:73:03:86:fc:67:3b:
e6:3d:c8:6f:4c:ae:cc:09:12:88:c5:8f:b1:28:60:
98:57:a3:6a:41:dc:8f:49:20:e7:d8:cb:71:10:1b:
45:5e:d5:88:96:55:cf:fd:79:2d:08:b2:b6:20:39:
72:b7:71:cd:31:8c:dc:32:87:58:84:33:92:6b:49:
ba:96:a4:60:50:37:54:32:e9:50:d2:6f:56:0a:6a:
ef:62:1b:fc:aa:d1:a0:d5:63:1d:f5:e1:35:64:29:
04:49:44:a4:f1:fa:3a:29:9c:4a:bc:9d:cf:df:f8:
68:63:0c:59:24:43:67:82:76:b4:d5:cd:94:f2:ce:
30:f4:bb:67:f2:8d:1a:00:27:cd:86:ec:52:12:34:
f5:35:db:3c:d4:7d:09:17:3e:5d:64:b5:c4:17:2e:
35:85:97:48:93:59:26:e0:f2:d6:71:7c:48:47:22:
d4:70:5a:86:4b:80:9b:1e:d3:3b:3c:44:90:32:d9:
27:69:29:66:7a:6f:e1:d6:d9:fa:dd:88:2a:91:a0:
70:ff:f1:26:89:13:6c:ab:f1:a4:64:15:18:24:77:
26:7f:d8:3d:eb:17:cb:75:bd:19:73:fe:17:00:3b:
0f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:85:EA:3F:9F:FC:E3:EA:37:C6:14:4F:C8:E0:FB:DD:38:0E:CE:4A
X509v3 Authority Key Identifier:
keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ed:26:8d:85:58:36:d7:61:ad:75:8c:1f:d2:24:ac:65:92:
aa:e9:7a:ef:2c:e3:37:e7:1c:c3:ea:bb:86:0b:8d:98:3a:9c:
e8:a6:f4:24:38:ef:3b:46:df:73:ea:5a:10:ee:92:25:61:25:
79:27:3f:32:62:a8:ed:f2:b3:db:a8:e9:92:68:3e:c0:cc:02:
05:f7:69:ba:e5:19:af:97:00:83:d4:94:cd:02:f2:5b:30:50:
90:87:6c:f4:6a:10:50:4b:e6:cc:88:b2:89:99:8e:db:ed:18:
32:02:4e:d3:2e:7a:41:92:21:98:96:54:70:1d:c9:75:52:50:
ec:ec:db:0b:70:56:bc:13:78:8f:b5:63:62:0d:18:8f:db:62:
f1:c8:b2:7e:c2:ec:d2:0e:19:2d:d2:25:29:f8:a6:f4:e7:92:
ee:71:4b:4c:24:f7:48:08:64:5a:08:75:08:6e:7c:e9:ae:1b:
bf:6c:51:12:01:ab:56:72:8f:99:bb:dc:49:06:e5:6b:44:06:
d6:63:8f:59:6a:d9:50:ff:dd:c4:61:3c:46:18:bf:1d:69:4d:
67:a2:1d:84:1a:ab:d4:cf:70:83:1c:6f:2a:93:40:be:fa:9e:
02:61:95:1d:c9:44:01:e8:c8:2a:90:23:91:75:30:75:a8:b7:
1e:df:ed:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEHAVR7LaTTWZD9datbmmAqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlODk1ZjFlMjcwYzYzNWVjNjFkZjlhOTdmYzBmNjY4YzBh
OGY1NDgwHhcNMjYxMDA0MTMwMTI5WhcNMjYxMDA1MTMwMTI5WjAzMTEwLwYDVQQD
EygyYzg1ZWEzZjlmZmNlM2VhMzdjNjE0NGZjOGUwZmJkZDM4MGVjZTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AXkeP0uEKWE1FhlNKIvcHRGZPsq
W8NzA4b8ZzvmPchvTK7MCRKIxY+xKGCYV6NqQdyPSSDn2MtxEBtFXtWIllXP/Xkt
CLK2IDlyt3HNMYzcModYhDOSa0m6lqRgUDdUMulQ0m9WCmrvYhv8qtGg1WMd9eE1
ZCkESUSk8fo6KZxKvJ3P3/hoYwxZJENngna01c2U8s4w9Ltn8o0aACfNhuxSEjT1
Nds81H0JFz5dZLXEFy41hZdIk1km4PLWcXxIRyLUcFqGS4CbHtM7PESQMtknaSlm
em/h1tn63YgqkaBw//EmiRNsq/GkZBUYJHcmf9g96xfLdb0Zc/4XADsPpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyF6j+f/OPqN8YUT8jg+904Ds5KMB8GA1UdIwQY
MBaAFI6JXx4nDGNexh35qX/A9mjAqPVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam9sZkhpY01ZMTdHSGZtcGY4RDJhTUNvOVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iYzUzZDItOTEzNy00Nzk5LTllNDEt
ZTY5YTAxNzQ4NWZiLzEvam9sZkhpY01ZMTdHSGZtcGY4RDJhTUNvOVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9iYzUzZDItOTEzNy00Nzk5LTllNDEtZTY5YTAxNzQ4NWZi
LzEvam9sZkhpY01ZMTdHSGZtcGY4RDJhTUNvOVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhe0mjYVY
NtdhrXWMH9IkrGWSqul67yzjN+ccw+q7hguNmDqc6Kb0JDjvO0bfc+paEO6SJWEl
eSc/MmKo7fKz26jpkmg+wMwCBfdpuuUZr5cAg9SUzQLyWzBQkIds9GoQUEvmzIiy
iZmO2+0YMgJO0y56QZIhmJZUcB3JdVJQ7OzbC3BWvBN4j7VjYg0Yj9ti8ciyfsLs
0g4ZLdIlKfim9OeS7nFLTCT3SAhkWgh1CG586a4bv2xREgGrVnKPmbvcSQbla0QG
1mOPWWrZUP/dxGE8Rhi/HWlNZ6IdhBqr1M9wgxxvKpNAvvqeAmGVHclEAejIKpAj
kXUwdai3Ht/tsg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:54:19 2026 by rpki-client