Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
File: Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft (raw, json)
Hash identifier: mswqmgNx/bAvuhQyUpgXs2sSm0ed14DuGCgJS/7Hgi4=
Subject key identifier: CF:A1:49:BE:84:8E:AD:2B:C8:89:25:EC:75:8E:02:85:2C:33:54:E9
Authority key identifier: 25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
Certificate issuer: /CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Certificate serial: 01A0D012348F993E5DEA2B074709DBAFEE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:00:49 +0000
Manifest this update: Wed 23 Sep 2026 21:00:49 +0000
Manifest next update: Thu 24 Sep 2026 21:00:49 +0000
Files and hashes: 1: C0q_FEBxSMrd9E0lH1qFkI0HoA4.roa (hash: z039AMhLSdjI+bLUAHVfZeXYFKTMJ1GuEuS23INfAZY=)
2: Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl (hash: UwzkNxgbJmg0aOm07oIt2h2VBomcWt/GWY+NIobfi/w=)
3: mctbCwQm4KKjmeToBymcjKVxZA4.asa (hash: DrGRHy1qtMiaOeuOWdrwLS9l4ACbw4Gg+jvObrN5Pi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:34:8f:99:3e:5d:ea:2b:07:47:09:db:af:ee:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Validity
Not Before: Sep 23 21:00:49 2026 GMT
Not After : Sep 24 21:00:49 2026 GMT
Subject: CN=cfa149be848ead2bc88925ec758e02852c3354e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:4a:82:34:d7:bb:5b:aa:63:32:28:01:0e:
70:96:f3:3a:a6:2a:a3:0e:8f:d7:94:e1:65:1a:12:
65:59:18:35:8b:13:b0:02:e8:b7:f9:36:9a:22:13:
35:ea:29:bd:5c:fb:c8:f0:33:34:df:3e:91:b5:90:
fd:ac:60:06:d3:b2:ca:d0:e4:29:38:d5:d5:e7:8d:
6a:5c:93:49:41:2c:28:f2:de:9d:5c:79:41:d3:23:
32:11:35:93:ef:33:8a:9d:3b:07:1c:b4:ab:c2:46:
c6:5d:76:81:e7:91:56:56:1a:ef:9a:9d:22:22:d1:
62:cc:9a:37:2b:64:96:2c:a3:ab:7e:29:67:48:05:
2f:f0:7a:b0:cd:b6:79:9f:58:a4:23:09:eb:13:8a:
40:10:1d:0f:ec:c3:4a:8a:67:a1:6d:e2:31:a5:66:
03:db:0a:f4:45:e3:fa:90:2d:cf:ff:b9:ac:e0:de:
18:35:9c:e9:8d:74:07:4e:2f:5d:7e:5c:db:9c:d8:
c8:9a:bb:46:a6:ef:e4:91:37:05:5a:f8:ea:36:47:
31:58:a7:d5:d7:5e:89:1a:b6:38:ff:b9:48:c5:8d:
2d:a1:6e:60:e4:48:88:98:d2:4a:19:06:b9:d5:7e:
50:da:08:59:a2:8c:8c:3a:bc:eb:56:ce:3b:ce:35:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A1:49:BE:84:8E:AD:2B:C8:89:25:EC:75:8E:02:85:2C:33:54:E9
X509v3 Authority Key Identifier:
keyid:25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cc:22:a0:8c:1e:47:dc:7d:a8:b4:2a:67:e8:32:b6:7b:2b:
35:b6:72:8a:c4:ac:74:d2:bf:01:90:4c:18:3a:e8:fe:16:b5:
96:a2:ca:ca:0b:53:1d:11:b7:dc:a3:e3:ea:90:d1:30:c8:01:
48:ac:3b:e0:27:e6:9d:f2:51:32:e0:06:59:ca:df:41:1d:80:
f8:9d:e3:9d:8b:e4:fb:5f:9d:02:f6:d3:b3:c0:a2:52:34:f1:
c6:61:41:aa:13:14:c8:92:93:d4:10:36:35:61:e6:2b:1a:e4:
64:57:9a:bf:29:9f:06:bf:d3:5a:05:76:ec:ff:d9:f9:31:7b:
c2:66:f1:fc:8c:cf:47:6e:cb:87:d2:37:59:28:4e:e5:d1:fc:
92:9c:c4:ec:d0:51:d4:69:cf:03:3a:23:8b:df:71:c0:1d:60:
f2:fe:24:77:06:0a:e4:1e:b9:88:04:74:20:01:9d:50:5c:9f:
b1:36:47:df:09:46:d1:9c:b4:dc:70:94:23:ac:aa:b9:13:61:
14:2b:fa:b7:01:c1:f7:81:21:b5:8a:3b:19:7a:f8:42:65:1e:
9a:36:3e:63:dd:9f:71:36:a8:a0:e3:03:b7:17:c3:48:09:ef:
f1:fd:e8:f2:9d:99:5f:88:fd:6c:cd:55:2d:16:a4:3a:8c:39:
b3:e8:bc:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEjSPmT5d6isHRwnbr+46MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YTlmZjFjNmY2ZTJjODUwYzI5OTExNzlmZTUyMWJjMTE2
Njc3MDMwHhcNMjYwOTIzMjEwMDQ5WhcNMjYwOTI0MjEwMDQ5WjAzMTEwLwYDVQQD
EyhjZmExNDliZTg0OGVhZDJiYzg4OTI1ZWM3NThlMDI4NTJjMzM1NGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9hKgjTXu1uqYzIoAQ5wlvM6piqj
Do/XlOFlGhJlWRg1ixOwAui3+TaaIhM16im9XPvI8DM03z6RtZD9rGAG07LK0OQp
ONXV541qXJNJQSwo8t6dXHlB0yMyETWT7zOKnTsHHLSrwkbGXXaB55FWVhrvmp0i
ItFizJo3K2SWLKOrfilnSAUv8HqwzbZ5n1ikIwnrE4pAEB0P7MNKimehbeIxpWYD
2wr0ReP6kC3P/7ms4N4YNZzpjXQHTi9dflzbnNjImrtGpu/kkTcFWvjqNkcxWKfV
116JGrY4/7lIxY0toW5g5EiImNJKGQa51X5Q2ghZooyMOrzrVs47zjWBwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+hSb6Ejq0ryIkl7HWOAoUsM1TpMB8GA1UdIwQY
MBaAFCWp/xxvbiyFDCmRF5/lIbwRZncDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmFuX0hHOXVMSVVNS1pFWG4tVWh2QkZtZHdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAt
YzIzZjczMTM2MmNlLzEvSmFuX0hHOXVMSVVNS1pFWG4tVWh2QkZtZHdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAtYzIzZjczMTM2MmNl
LzEvSmFuX0hHOXVMSVVNS1pFWG4tVWh2QkZtZHdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8wioIwe
R9x9qLQqZ+gytnsrNbZyisSsdNK/AZBMGDro/ha1lqLKygtTHRG33KPj6pDRMMgB
SKw74CfmnfJRMuAGWcrfQR2A+J3jnYvk+1+dAvbTs8CiUjTxxmFBqhMUyJKT1BA2
NWHmKxrkZFeavymfBr/TWgV27P/Z+TF7wmbx/IzPR27Lh9I3WShO5dH8kpzE7NBR
1GnPAzoji99xwB1g8v4kdwYK5B65iAR0IAGdUFyfsTZH3wlG0Zy03HCUI6yquRNh
FCv6twHB94EhtYo7GXr4QmUemjY+Y92fcTaooOMDtxfDSAnv8f3o8p2ZX4j9bM1V
LRakOow5s+i8YQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:12:16 2026 by rpki-client