Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
File: jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json)
Hash identifier: KIk9oRv8dw+7nVVQMoD+r0kC9OeEGapNjeFtQ1yw6Cw=
Subject key identifier: 11:20:A5:B0:FC:2E:F9:DE:EC:E8:2E:A9:3C:01:D4:83:B9:B2:AE:66
Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
Certificate issuer: /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Certificate serial: 01A0F53204A5C9DD034C7DB088C5DB294826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
Manifest number: 0F27
Signing time: Thu 01 Oct 2026 02:01:30 +0000
Manifest this update: Thu 01 Oct 2026 02:01:30 +0000
Manifest next update: Fri 02 Oct 2026 02:01:30 +0000
Files and hashes: 1: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: Hb0AqfM0FGpVnCDcO0C5gRHtTpKGxFym54zakOLETik=)
2: ybGK7D59nhsrV5zcx9pDpZj5zRw.roa (hash: lUVMObnC7ci77KqYjQKC6vaADGXMIPOZVK0KWxLUoCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:32:04:a5:c9:dd:03:4c:7d:b0:88:c5:db:29:48:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Validity
Not Before: Oct 1 02:01:30 2026 GMT
Not After : Oct 2 02:01:30 2026 GMT
Subject: CN=1120a5b0fc2ef9deece82ea93c01d483b9b2ae66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:7e:0a:60:8e:e3:b0:c2:56:9b:ff:d0:77:
42:35:ac:91:bb:2b:31:81:61:7d:dd:22:04:32:fe:
4d:a1:6a:2a:6b:c5:76:47:09:93:41:64:9a:e4:36:
fa:04:a6:4d:a7:6d:54:3d:db:b5:fa:e9:0b:e1:83:
43:9c:87:bb:20:98:bb:a9:74:71:55:4b:07:7d:8d:
d3:9f:16:8d:d1:09:ec:d2:ce:93:8e:b7:87:92:13:
3f:1e:ee:d4:de:f9:9c:8f:41:7a:b0:b5:85:d2:c2:
f5:35:9f:77:5f:98:94:0b:86:0a:d7:4c:6f:a2:03:
a3:0e:9a:fb:b7:ff:36:80:fa:bd:f5:a1:86:9c:da:
a4:fd:7e:a5:6b:07:d9:6c:51:62:ee:af:4c:f2:3c:
41:ba:b3:0b:91:c6:2f:59:53:41:c5:59:b6:9f:95:
45:f0:c4:f6:73:37:6e:09:d1:af:a2:07:f3:f3:41:
50:20:85:53:fc:f4:f6:7f:11:17:28:7d:93:59:d1:
1f:6c:d3:4c:c1:c3:64:b2:eb:35:9c:9b:3f:76:41:
b3:da:3c:96:f9:56:cf:14:5d:1e:d9:38:09:8f:3a:
cb:a9:0d:f3:7e:5c:e4:cf:45:32:28:4d:32:39:1c:
29:aa:33:cc:00:6e:7f:0a:95:d1:52:6a:b6:fe:63:
ce:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:20:A5:B0:FC:2E:F9:DE:EC:E8:2E:A9:3C:01:D4:83:B9:B2:AE:66
X509v3 Authority Key Identifier:
keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9b:16:80:e6:98:86:3d:23:76:e6:e1:75:cb:4c:e4:4c:d8:
a6:f5:3b:7a:e3:f9:d4:52:31:ce:39:5e:b5:57:85:c1:16:17:
2e:d8:0a:e4:1e:bd:51:45:1e:b4:59:d5:c4:65:83:f3:35:32:
ed:54:24:84:36:43:1c:4a:49:54:17:43:ee:2e:b2:3f:81:d7:
fe:b8:a9:ea:73:d0:f2:6a:c2:3c:aa:09:ad:99:e1:f3:94:25:
24:17:26:01:15:15:7f:24:1a:80:2b:6b:e0:4c:9b:20:68:f2:
33:e3:ed:2f:82:09:d1:12:c9:9b:c8:d7:07:6d:a0:50:50:d4:
8c:32:c6:42:d8:54:db:9b:92:f9:25:c7:c9:61:c5:83:59:a1:
bb:97:a2:2f:ae:b9:70:52:77:56:e4:77:35:30:26:5f:f7:ff:
0c:d5:56:7e:9b:a9:eb:25:fa:d0:71:50:e3:82:2e:1e:47:c6:
9a:bf:24:6d:6f:c8:6d:c1:6e:c1:56:76:07:79:63:6e:04:88:
36:4d:5f:39:c9:0e:b1:c0:01:c9:db:62:df:7b:76:48:98:e7:
27:4c:b2:43:97:25:ce:67:71:98:db:4f:75:ce:aa:f5:27:ed:
f9:6f:4b:e1:9c:ba:95:7d:96:8d:6a:fe:c5:c3:88:bd:10:ad:
20:8e:0a:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD1MgSlyd0DTH2wiMXbKUgmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMjA3NTNkZDUxNjMzYWEyZTE3YTkyYzU5ZjRjNDg0NWQ4
NzZjZDMwHhcNMjYxMDAxMDIwMTMwWhcNMjYxMDAyMDIwMTMwWjAzMTEwLwYDVQQD
EygxMTIwYTViMGZjMmVmOWRlZWNlODJlYTkzYzAxZDQ4M2I5YjJhZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXt+CmCO47DCVpv/0HdCNayRuysx
gWF93SIEMv5NoWoqa8V2RwmTQWSa5Db6BKZNp21UPdu1+ukL4YNDnIe7IJi7qXRx
VUsHfY3TnxaN0Qns0s6TjreHkhM/Hu7U3vmcj0F6sLWF0sL1NZ93X5iUC4YK10xv
ogOjDpr7t/82gPq99aGGnNqk/X6lawfZbFFi7q9M8jxBurMLkcYvWVNBxVm2n5VF
8MT2czduCdGvogfz80FQIIVT/PT2fxEXKH2TWdEfbNNMwcNksus1nJs/dkGz2jyW
+VbPFF0e2TgJjzrLqQ3zflzkz0UyKE0yORwpqjPMAG5/CpXRUmq2/mPOcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEgpbD8Lvne7OguqTwB1IO5sq5mMB8GA1UdIwQY
MBaAFIwgdT3VFjOqLhepLFn0xIRdh2zTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81YzNjZmEtYTM2My00MGE0LWJmYTYt
YzI5YmViMWE0NzM0LzEvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS81YzNjZmEtYTM2My00MGE0LWJmYTYtYzI5YmViMWE0NzM0
LzEvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZsWgOaY
hj0jdubhdctM5EzYpvU7euP51FIxzjletVeFwRYXLtgK5B69UUUetFnVxGWD8zUy
7VQkhDZDHEpJVBdD7i6yP4HX/rip6nPQ8mrCPKoJrZnh85QlJBcmARUVfyQagCtr
4EybIGjyM+PtL4IJ0RLJm8jXB22gUFDUjDLGQthU25uS+SXHyWHFg1mhu5eiL665
cFJ3VuR3NTAmX/f/DNVWfpup6yX60HFQ44IuHkfGmr8kbW/IbcFuwVZ2B3ljbgSI
Nk1fOckOscABydti33t2SJjnJ0yyQ5clzmdxmNtPdc6q9Sft+W9L4Zy6lX2WjWr+
xcOIvRCtII4Kvg==
-----END CERTIFICATE-----
Generated at Thu Oct 1 11:02:47 2026 by rpki-client