Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
File: J5M1a3LBBBztecoRRZUreMtGb8A.mft (raw, json)
Hash identifier: gFMbr0pobHwNYMRJXsytzlJi4BJ6uTy9XaLidCcqk08=
Subject key identifier: AF:4E:F5:46:94:D1:CD:56:0D:4E:47:A1:4C:F6:B4:79:9B:B5:02:6F
Authority key identifier: 27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
Certificate issuer: /CN=2793356b72c1041ced79ca1145952b78cb466fc0
Certificate serial: 01A0F4C3D2E11F2371E5D70A85F5027D1716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
Manifest number: 01C4
Signing time: Thu 01 Oct 2026 00:01:09 +0000
Manifest this update: Thu 01 Oct 2026 00:01:09 +0000
Manifest next update: Fri 02 Oct 2026 00:01:09 +0000
Files and hashes: 1: J5M1a3LBBBztecoRRZUreMtGb8A.crl (hash: Jwwr5FUXtB54nUCfBGffMAByspTObNoqcI2VtuOh4L0=)
2: iXFt1KY0aqsyx-9Vdc9e4RKOA5Y.asa (hash: UPxLBpOmrMbXDNQ7hogNRA77L99FxDK6/MOEI7JjMOY=)
3: nqLy6vXc7QJkT8qVeO-NeJ41RTQ.roa (hash: UPdkXkVzcf45jUKtURLaO9b8juj9XHNGGiuikA8ZS84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:c3:d2:e1:1f:23:71:e5:d7:0a:85:f5:02:7d:17:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793356b72c1041ced79ca1145952b78cb466fc0
Validity
Not Before: Oct 1 00:01:09 2026 GMT
Not After : Oct 2 00:01:09 2026 GMT
Subject: CN=af4ef54694d1cd560d4e47a14cf6b4799bb5026f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:4d:b0:74:d1:95:31:37:2d:ed:8e:9e:ed:
8b:4d:64:7e:8b:49:09:54:5b:61:95:67:14:20:e7:
38:56:59:54:f0:08:68:47:54:c2:bb:27:0b:a1:e2:
75:e3:79:d3:cd:7d:b1:79:b5:97:f8:47:61:f0:f5:
59:df:da:dc:31:04:11:50:b3:fd:55:12:20:6c:ed:
0d:4c:a4:cb:c0:c9:26:9f:6a:07:c2:75:72:a9:ab:
73:d0:85:1b:00:8e:30:ca:54:36:30:06:18:cb:f3:
61:d1:b5:8b:cc:d3:b3:50:cb:7c:18:66:6d:06:b7:
7e:ff:8c:17:09:69:0f:49:dc:cc:0f:43:cd:70:e3:
57:26:50:2c:64:5a:e0:81:d7:04:8a:fe:50:27:a1:
c5:0c:0d:a3:93:e0:60:5a:32:1e:b2:6d:32:5d:fe:
0a:c7:b8:27:bf:ee:22:e1:b6:36:0b:42:2a:d9:6a:
a7:bc:c9:80:a9:53:ec:d2:45:e5:7a:bb:42:26:3b:
e9:ad:e3:a6:98:7f:13:50:71:aa:96:c0:31:68:cd:
84:51:62:8f:8d:45:dc:04:a2:b4:17:33:f6:64:84:
ea:04:67:d7:dc:ac:c8:96:76:c8:43:fc:1b:da:65:
40:ab:e5:c6:cb:cb:f1:f9:47:25:76:cc:a8:97:d1:
59:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4E:F5:46:94:D1:CD:56:0D:4E:47:A1:4C:F6:B4:79:9B:B5:02:6F
X509v3 Authority Key Identifier:
keyid:27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:9f:d1:91:48:a6:7d:c0:ad:67:b9:96:5a:bb:d1:d4:52:fd:
56:67:c0:a8:01:97:5f:98:6b:ed:25:8c:c6:76:16:3b:82:0a:
ed:55:fc:7e:8e:49:62:88:63:93:04:28:12:52:3b:d4:7e:d2:
54:67:e7:2d:c8:57:7d:4e:71:cc:27:bf:c0:af:c1:d2:d9:1e:
e6:80:cb:79:1d:dd:78:23:76:bf:b3:09:3f:ce:df:7b:92:ac:
0f:81:db:3d:3f:d7:6a:df:be:3a:8c:a0:46:34:81:ad:87:69:
c1:bc:7f:91:50:e3:45:82:1b:8d:5a:17:1f:17:f6:42:56:38:
d4:66:29:be:a2:bb:ff:de:80:08:d3:75:e1:e1:d6:84:c4:5f:
95:57:00:f4:7e:d3:8f:4d:8b:f8:84:8b:e1:eb:6f:50:e8:6c:
ae:3d:49:66:79:e4:ee:17:f7:82:7e:51:01:fd:b3:e7:e9:8e:
37:17:94:f0:9f:4d:66:5a:57:5a:19:f2:ea:15:99:92:05:e6:
24:a7:22:96:bb:f1:d9:a9:bd:3c:89:89:a9:75:a2:e1:c4:9b:
82:2c:95:2b:79:31:b2:91:5d:cc:1c:4d:59:e8:27:3c:c7:21:
88:1b:c1:16:77:69:50:79:e6:64:34:9e:51:c1:ed:eb:ac:9e:
7f:82:29:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD0w9LhHyNx5dcKhfUCfRcWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OTMzNTZiNzJjMTA0MWNlZDc5Y2ExMTQ1OTUyYjc4Y2I0
NjZmYzAwHhcNMjYxMDAxMDAwMTA5WhcNMjYxMDAyMDAwMTA5WjAzMTEwLwYDVQQD
EyhhZjRlZjU0Njk0ZDFjZDU2MGQ0ZTQ3YTE0Y2Y2YjQ3OTliYjUwMjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+VNsHTRlTE3Le2Onu2LTWR+i0kJ
VFthlWcUIOc4VllU8AhoR1TCuycLoeJ143nTzX2xebWX+Edh8PVZ39rcMQQRULP9
VRIgbO0NTKTLwMkmn2oHwnVyqatz0IUbAI4wylQ2MAYYy/Nh0bWLzNOzUMt8GGZt
Brd+/4wXCWkPSdzMD0PNcONXJlAsZFrggdcEiv5QJ6HFDA2jk+BgWjIesm0yXf4K
x7gnv+4i4bY2C0Iq2WqnvMmAqVPs0kXlertCJjvpreOmmH8TUHGqlsAxaM2EUWKP
jUXcBKK0FzP2ZITqBGfX3KzIlnbIQ/wb2mVAq+XGy8vx+Ucldsyol9FZgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9O9UaU0c1WDU5HoUz2tHmbtQJvMB8GA1UdIwQY
MBaAFCeTNWtywQQc7XnKEUWVK3jLRm/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjVNMWEzTEJCQnp0ZWNvUlJaVXJlTXRHYjhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83YTBiYTMtYjVjZS00MjliLTk5OTAt
NTAwYTllYjllNDBmLzEvSjVNMWEzTEJCQnp0ZWNvUlJaVXJlTXRHYjhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy83YTBiYTMtYjVjZS00MjliLTk5OTAtNTAwYTllYjllNDBm
LzEvSjVNMWEzTEJCQnp0ZWNvUlJaVXJlTXRHYjhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0J/RkUim
fcCtZ7mWWrvR1FL9VmfAqAGXX5hr7SWMxnYWO4IK7VX8fo5JYohjkwQoElI71H7S
VGfnLchXfU5xzCe/wK/B0tke5oDLeR3deCN2v7MJP87fe5KsD4HbPT/Xat++Ooyg
RjSBrYdpwbx/kVDjRYIbjVoXHxf2QlY41GYpvqK7/96ACNN14eHWhMRflVcA9H7T
j02L+ISL4etvUOhsrj1JZnnk7hf3gn5RAf2z5+mONxeU8J9NZlpXWhny6hWZkgXm
JKcilrvx2am9PImJqXWi4cSbgiyVK3kxspFdzBxNWegnPMchiBvBFndpUHnmZDSe
UcHt66yef4IpuA==
-----END CERTIFICATE-----
Generated at Thu Oct 1 10:44:49 2026 by rpki-client