Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
File: J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft (raw, json)
Hash identifier: OLkQzh0x+o4rJowjvj4wBDaqeeBurrohETBj+8XezP8=
Subject key identifier: C3:B0:08:55:08:4D:7E:E7:EF:F6:B4:C3:EC:D8:E6:4C:98:CB:5B:73
Authority key identifier: 27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
Certificate issuer: /CN=2747c171786e883167d862be101f352135b923b4
Certificate serial: 01A0CE23A009D86EB6498944BBA21FE418AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
Manifest number: 01BE
Signing time: Wed 23 Sep 2026 12:00:36 +0000
Manifest this update: Wed 23 Sep 2026 12:00:36 +0000
Manifest next update: Thu 24 Sep 2026 12:00:36 +0000
Files and hashes: 1: J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl (hash: +mEC5457HsIA5ats2OGFdppQ6sfZGX5fMiQDthyPAmE=)
2: O_GvhJ3AIu5IJuqpQ4uX03ArEEA.roa (hash: GC8qNwD4vLhbf1Ux7vQLpVBwBRtyOha518PQltW/PIg=)
3: hFukJ1Me328-WPvDybOfx7SqLNM.asa (hash: HFJhYuc006ijF+saTkFV1K0a6wbtr7JpRGOKmayJt1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:a0:09:d8:6e:b6:49:89:44:bb:a2:1f:e4:18:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2747c171786e883167d862be101f352135b923b4
Validity
Not Before: Sep 23 12:00:36 2026 GMT
Not After : Sep 24 12:00:36 2026 GMT
Subject: CN=c3b00855084d7ee7eff6b4c3ecd8e64c98cb5b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:4a:ba:a0:59:67:c8:2a:31:28:87:d9:98:
67:05:5d:f4:51:1e:28:16:aa:d7:6a:b3:f7:6e:bb:
24:12:c7:15:aa:c3:02:38:04:1f:fe:1d:e6:ee:9d:
03:6d:3b:ca:91:68:34:9f:20:c5:a9:79:d7:97:fb:
2a:fa:30:a2:11:3d:5c:6c:cf:e8:6f:5e:d0:91:a6:
72:bc:ae:66:20:8f:d1:49:95:15:11:e3:18:3e:6e:
50:2a:a7:fc:d3:92:60:b2:11:07:aa:f4:72:e7:96:
6c:ac:0f:4f:e8:b2:29:76:39:c8:af:31:74:26:2e:
9b:77:53:2b:56:74:8f:d2:e7:d1:07:d0:79:a8:38:
93:7c:aa:f1:e3:da:af:23:0e:53:c9:6b:74:b2:b4:
c0:29:f0:f2:83:80:a9:3f:92:6f:6f:cb:08:9a:07:
11:cf:89:e3:b4:80:a5:f2:38:79:f3:83:96:85:45:
b0:69:59:99:10:9c:1b:3a:45:9d:6b:b9:87:2f:39:
26:63:80:32:35:53:d9:a4:c1:98:f6:4f:73:e3:04:
bc:ab:de:39:78:47:d4:f5:0c:25:a2:58:43:ca:dc:
b9:5b:f0:f2:85:7d:0e:29:b8:cf:c6:68:7b:56:9f:
40:07:1e:bb:bb:d7:ad:63:4c:ad:f4:3b:02:07:9e:
16:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B0:08:55:08:4D:7E:E7:EF:F6:B4:C3:EC:D8:E6:4C:98:CB:5B:73
X509v3 Authority Key Identifier:
keyid:27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:90:66:e0:4c:24:90:b3:8f:80:14:62:5f:c6:06:a1:97:a7:
2b:da:29:04:27:b0:c9:08:52:89:69:13:eb:f6:7e:45:00:61:
54:22:5a:23:0c:00:b5:fa:84:fe:6b:d6:a2:40:e4:d3:0f:c7:
d7:6e:0b:5c:03:4a:83:f8:f4:e7:5b:6e:96:e5:2c:92:3f:4e:
7a:e8:fd:4c:87:9f:09:8f:92:d7:13:7f:98:1b:6b:ed:1d:5c:
6d:99:e8:c1:d1:13:92:56:58:7e:6d:f0:55:21:7c:4f:99:a8:
37:86:b3:f3:63:e0:af:86:f7:cf:28:35:e2:60:66:87:dd:88:
c2:02:d4:c1:c9:16:55:ce:a0:37:8e:f5:eb:b1:40:0b:07:b4:
8e:06:e2:71:ed:93:8f:b0:0b:52:ac:30:4d:a4:bd:45:18:ed:
83:0a:5b:42:bc:0e:b3:c4:e4:a2:3a:79:60:04:66:0a:33:fc:
1e:c7:7c:84:75:95:ef:ac:53:3b:a0:e7:02:1b:ad:d2:f6:80:
32:e2:f7:49:9c:3d:e4:9c:fd:e1:9f:9b:81:b3:0c:13:c0:bd:
51:52:81:bf:a7:0e:0a:23:06:e6:8c:ca:11:41:af:f4:40:cc:
d9:26:16:ff:82:68:5f:df:bb:51:85:20:c3:0d:c6:27:15:89:
df:fa:65:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOI6AJ2G62SYlEu6If5BiqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDdjMTcxNzg2ZTg4MzE2N2Q4NjJiZTEwMWYzNTIxMzVi
OTIzYjQwHhcNMjYwOTIzMTIwMDM2WhcNMjYwOTI0MTIwMDM2WjAzMTEwLwYDVQQD
EyhjM2IwMDg1NTA4NGQ3ZWU3ZWZmNmI0YzNlY2Q4ZTY0Yzk4Y2I1YjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNRKuqBZZ8gqMSiH2ZhnBV30UR4o
FqrXarP3brskEscVqsMCOAQf/h3m7p0DbTvKkWg0nyDFqXnXl/sq+jCiET1cbM/o
b17QkaZyvK5mII/RSZUVEeMYPm5QKqf805JgshEHqvRy55ZsrA9P6LIpdjnIrzF0
Ji6bd1MrVnSP0ufRB9B5qDiTfKrx49qvIw5TyWt0srTAKfDyg4CpP5Jvb8sImgcR
z4njtICl8jh584OWhUWwaVmZEJwbOkWda7mHLzkmY4AyNVPZpMGY9k9z4wS8q945
eEfU9QwlolhDyty5W/DyhX0OKbjPxmh7Vp9ABx67u9etY0yt9DsCB54WeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOwCFUITX7n7/a0w+zY5kyYy1tzMB8GA1UdIwQY
MBaAFCdHwXF4bogxZ9hivhAfNSE1uSO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBmQmNYaHVpREZuMkdLLUVCODFJVFc1STdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kZjFhMmUtMjkwMS00ZjI3LWEyZjEt
MmMxODAxMGZiZmJmLzEvSjBmQmNYaHVpREZuMkdLLUVCODFJVFc1STdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kZjFhMmUtMjkwMS00ZjI3LWEyZjEtMmMxODAxMGZiZmJm
LzEvSjBmQmNYaHVpREZuMkdLLUVCODFJVFc1STdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpBm4Ewk
kLOPgBRiX8YGoZenK9opBCewyQhSiWkT6/Z+RQBhVCJaIwwAtfqE/mvWokDk0w/H
124LXANKg/j051tuluUskj9Oeuj9TIefCY+S1xN/mBtr7R1cbZnowdETklZYfm3w
VSF8T5moN4az82Pgr4b3zyg14mBmh92IwgLUwckWVc6gN47167FACwe0jgbice2T
j7ALUqwwTaS9RRjtgwpbQrwOs8Tkojp5YARmCjP8Hsd8hHWV76xTO6DnAhut0vaA
MuL3SZw95Jz94Z+bgbMME8C9UVKBv6cOCiMG5ozKEUGv9EDM2SYW/4JoX9+7UYUg
ww3GJxWJ3/plxQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:19:40 2026 by rpki-client