Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
File: jriXJ_n47Oad-b7EzBHKvO4WS8M.mft (raw, json)
Hash identifier: SQwBguEJYSCYQbUCIIDGT+qGQp8+iotkBEYBweOhwRs=
Subject key identifier: 70:9F:21:9E:A9:BB:9C:2A:E5:95:A5:CF:BB:95:FD:02:91:9C:7B:EB
Authority key identifier: 8E:B8:97:27:F9:F8:EC:E6:9D:F9:BE:C4:CC:11:CA:BC:EE:16:4B:C3
Certificate issuer: /CN=8eb89727f9f8ece69df9bec4cc11cabcee164bc3
Certificate serial: 01A0F0E78D11F5E08A4277B04CD7ADF84D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
Manifest number: F6
Signing time: Wed 30 Sep 2026 06:01:41 +0000
Manifest this update: Wed 30 Sep 2026 06:01:41 +0000
Manifest next update: Thu 01 Oct 2026 06:01:41 +0000
Files and hashes: 1: KE3GupBR2iGoEZP8QqZIbP9I-xE.roa (hash: Xuer3yKNUbClZo8SA2R+1gQjYc7yVthlpiw4kBX8aYY=)
2: Oj8K8XHrsDfS-eldRMcH11WQYyQ.roa (hash: ifdd2pi8EShwVYLbGy/N4X0jrvCVRCdXziJXaPvLXA4=)
3: jriXJ_n47Oad-b7EzBHKvO4WS8M.crl (hash: DJL8s2g9Uf4toB0vYo1pY74PCqxYtq1emhLIczcGgHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 06:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e7:8d:11:f5:e0:8a:42:77:b0:4c:d7:ad:f8:4d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb89727f9f8ece69df9bec4cc11cabcee164bc3
Validity
Not Before: Sep 30 06:01:41 2026 GMT
Not After : Oct 1 06:01:41 2026 GMT
Subject: CN=709f219ea9bb9c2ae595a5cfbb95fd02919c7beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:cc:06:b8:a7:9e:30:b7:ce:43:2c:16:81:
b5:67:6f:ac:9e:3a:12:c0:7f:c0:7b:34:58:f2:23:
37:01:75:24:bc:bc:24:73:25:a2:29:b1:4b:94:b2:
1c:09:4b:bc:82:bd:ce:85:32:04:cb:24:25:a4:22:
40:54:60:ee:12:96:4b:d5:1c:bd:a9:ce:6b:92:0f:
a8:43:bd:04:14:70:b0:9f:07:72:6d:55:a1:b6:6e:
97:52:2a:f4:60:fe:39:2e:7e:28:e7:bd:2c:ba:d2:
4c:d3:41:08:5b:be:46:9f:2a:eb:fd:e1:9f:dc:dc:
43:c4:a8:17:f0:d0:66:43:3a:05:4e:14:0c:18:13:
5f:ef:bb:e3:3e:ad:a8:4e:f7:87:15:f3:fd:70:9f:
f6:9d:49:12:60:e1:91:fa:f3:0a:c2:ee:55:13:c0:
3c:79:29:19:9b:49:f0:87:62:15:88:01:eb:d1:d6:
0a:37:5e:b1:c0:7e:75:9e:7c:5b:3d:a2:51:15:fc:
ae:c6:3e:b0:fe:cd:e7:af:21:af:b2:59:bf:37:e5:
f4:39:cd:5e:14:be:11:6a:7a:c2:5f:37:32:78:57:
f5:da:cd:dc:ba:68:7b:24:3f:a4:bd:5e:a0:02:da:
49:c8:cd:0b:7d:fc:bf:d2:ba:5a:f0:e0:c6:7e:40:
9f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9F:21:9E:A9:BB:9C:2A:E5:95:A5:CF:BB:95:FD:02:91:9C:7B:EB
X509v3 Authority Key Identifier:
keyid:8E:B8:97:27:F9:F8:EC:E6:9D:F9:BE:C4:CC:11:CA:BC:EE:16:4B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d5:0a:49:15:2c:3c:07:40:da:79:7f:dc:c2:95:68:39:77:
ee:40:10:c1:89:d8:12:62:82:da:55:1b:20:8a:cd:8f:a2:45:
40:9c:c6:08:7f:c4:9f:d1:f8:4d:82:1b:e8:45:f6:43:5c:e3:
77:68:37:f7:7e:63:61:d6:5d:45:6c:32:12:1d:73:a9:03:bb:
2a:d2:36:d8:39:6e:f8:a8:c1:6d:85:cd:93:29:6d:37:d3:bc:
3d:19:33:c4:eb:e6:71:dd:98:15:ba:c7:66:ac:26:49:62:f0:
4f:88:95:d8:66:a4:6b:c1:4c:7b:fa:fc:90:e5:5f:fa:70:6b:
89:13:43:9c:79:cf:6b:61:d1:28:79:5e:21:d9:d9:af:8f:20:
3a:49:00:1f:af:a3:76:de:02:8c:c5:4d:21:1f:ee:1c:16:3d:
bb:8b:ee:60:de:c9:e3:69:66:24:c0:95:70:51:9b:38:81:2a:
32:76:35:9d:fd:7c:ca:c5:d2:62:9a:d3:eb:b5:8e:9a:68:8d:
ed:a4:55:3f:5d:ae:2d:ec:7c:c6:1e:8d:5f:7d:bd:03:9a:76:
8a:bb:e8:1a:50:49:b7:56:4c:5a:2f:65:a7:74:78:36:bc:5b:
4a:c2:cb:f0:0c:1f:cb:6a:e9:42:94:6d:24:00:62:56:8f:b0:
66:5f:c2:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDw540R9eCKQnewTNet+E0DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjg5NzI3ZjlmOGVjZTY5ZGY5YmVjNGNjMTFjYWJjZWUx
NjRiYzMwHhcNMjYwOTMwMDYwMTQxWhcNMjYxMDAxMDYwMTQxWjAzMTEwLwYDVQQD
Eyg3MDlmMjE5ZWE5YmI5YzJhZTU5NWE1Y2ZiYjk1ZmQwMjkxOWM3YmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnjMBrinnjC3zkMsFoG1Z2+snjoS
wH/AezRY8iM3AXUkvLwkcyWiKbFLlLIcCUu8gr3OhTIEyyQlpCJAVGDuEpZL1Ry9
qc5rkg+oQ70EFHCwnwdybVWhtm6XUir0YP45Ln4o570sutJM00EIW75Gnyrr/eGf
3NxDxKgX8NBmQzoFThQMGBNf77vjPq2oTveHFfP9cJ/2nUkSYOGR+vMKwu5VE8A8
eSkZm0nwh2IViAHr0dYKN16xwH51nnxbPaJRFfyuxj6w/s3nryGvslm/N+X0Oc1e
FL4RanrCXzcyeFf12s3cumh7JD+kvV6gAtpJyM0Lffy/0rpa8ODGfkCfKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCfIZ6pu5wq5ZWlz7uV/QKRnHvrMB8GA1UdIwQY
MBaAFI64lyf5+Ozmnfm+xMwRyrzuFkvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJpWEpfbjQ3T2FkLWI3RXpCSEt2TzRXUzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgt
MTcxNTkxOTU2N2M5LzEvanJpWEpfbjQ3T2FkLWI3RXpCSEt2TzRXUzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgtMTcxNTkxOTU2N2M5
LzEvanJpWEpfbjQ3T2FkLWI3RXpCSEt2TzRXUzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9UKSRUs
PAdA2nl/3MKVaDl37kAQwYnYEmKC2lUbIIrNj6JFQJzGCH/En9H4TYIb6EX2Q1zj
d2g3935jYdZdRWwyEh1zqQO7KtI22Dlu+KjBbYXNkyltN9O8PRkzxOvmcd2YFbrH
ZqwmSWLwT4iV2Gaka8FMe/r8kOVf+nBriRNDnHnPa2HRKHleIdnZr48gOkkAH6+j
dt4CjMVNIR/uHBY9u4vuYN7J42lmJMCVcFGbOIEqMnY1nf18ysXSYprT67WOmmiN
7aRVP12uLex8xh6NX329A5p2irvoGlBJt1ZMWi9lp3R4NrxbSsLL8Awfy2rpQpRt
JABiVo+wZl/C0g==
-----END CERTIFICATE-----
Generated at Wed Sep 30 20:06:48 2026 by rpki-client