Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
File: jP3v7O1c7o8abJN5jlo0tiH23As.mft (raw, json)
Hash identifier: YfSyWh7+wRbRXFRu5XjrL0q1k8rie1LIdpvnlkEQwLo=
Subject key identifier: 31:EA:AB:87:22:19:CC:0B:CF:10:5B:73:F0:69:44:CD:29:5C:7D:4C
Authority key identifier: 8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
Certificate issuer: /CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Certificate serial: 01A0DACD72768F7214323CE7F9F0046B7BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
Manifest number: 07F9
Signing time: Fri 25 Sep 2026 23:01:32 +0000
Manifest this update: Fri 25 Sep 2026 23:01:32 +0000
Manifest next update: Sat 26 Sep 2026 23:01:32 +0000
Files and hashes: 1: bILTlSPGWMGMY_1Qfmo1vE-bgOc.roa (hash: t48mqB2NaYieA0CKr3J9wx4iPJRQZqgCszx9KbMiWRM=)
2: d_e_JyIjKLPMENo5L-8CUih_VYg.asa (hash: y4fScZgWsT2DmITy30uJ8yrcaHxFdDvaL2MnILNovdw=)
3: jP3v7O1c7o8abJN5jlo0tiH23As.crl (hash: LIoASmJOwT/oB2D8ktyiCmI7InwxEdL3VYDfe7TWU2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:72:76:8f:72:14:32:3c:e7:f9:f0:04:6b:7b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Validity
Not Before: Sep 25 23:01:32 2026 GMT
Not After : Sep 26 23:01:32 2026 GMT
Subject: CN=31eaab872219cc0bcf105b73f06944cd295c7d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:3e:d4:7a:3b:03:9a:c4:e6:a2:dc:42:c3:
b5:e7:58:64:6b:35:f9:82:b7:24:b0:59:65:bf:03:
81:3c:1d:83:8d:42:71:d4:3f:4a:c5:35:8c:29:db:
c2:dc:7d:f3:15:74:ce:bb:68:3e:db:d3:a0:ec:68:
10:98:03:65:01:92:ae:4e:2e:3f:f5:b6:d8:66:7a:
98:71:cc:ec:1a:6f:7d:47:f4:b5:26:fc:20:55:be:
c5:8b:86:c4:2b:58:35:af:56:ce:2d:7e:22:e7:cf:
80:11:3c:39:1c:0f:e8:62:dd:0c:9f:69:27:2e:45:
11:26:d1:2d:88:69:86:97:85:b3:e4:28:bd:92:43:
d1:92:c6:69:4f:69:92:e3:59:a6:96:4c:e6:43:55:
f1:32:1c:1d:9f:7c:c6:0a:52:cf:05:df:0e:80:41:
56:e7:00:1a:68:ca:29:b0:15:52:28:56:82:aa:81:
8b:f8:6b:2d:8e:ab:66:c9:93:1b:b3:cd:15:7e:ba:
cc:c5:f9:6c:12:53:60:42:b3:e7:ce:ec:4a:e1:35:
cf:37:96:4f:56:da:84:32:8c:c5:fc:70:c1:4c:f4:
ef:f2:db:f3:83:81:f5:33:21:00:f7:89:21:b0:2f:
f1:d6:03:aa:4d:1b:41:90:11:db:7d:49:81:47:57:
ba:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EA:AB:87:22:19:CC:0B:CF:10:5B:73:F0:69:44:CD:29:5C:7D:4C
X509v3 Authority Key Identifier:
keyid:8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:83:be:0f:22:ea:2b:2d:46:83:6c:a2:01:21:20:3d:d3:13:
df:18:d8:67:9c:30:5c:2b:ed:aa:22:6f:64:13:b5:a0:78:b0:
d1:80:45:4d:18:c6:df:74:fa:30:f3:14:10:19:e3:c7:cb:2a:
97:9b:e6:b0:fb:fe:d2:1c:19:2a:f6:4d:cd:45:dc:54:74:e0:
b2:56:7d:92:ce:09:a9:68:04:02:5e:59:94:95:6f:50:ff:d8:
0a:39:fa:81:05:ef:62:8d:0d:02:24:e2:da:6e:d3:fc:61:02:
a7:e6:31:4a:f4:d1:4e:62:1f:4d:3b:aa:09:5f:3e:56:83:eb:
dc:8e:fc:79:5d:df:de:18:4e:ac:f9:c1:df:f6:ab:9e:f1:a6:
4a:54:5c:ed:59:15:24:27:da:e2:5d:86:53:d7:cf:03:47:28:
06:12:ab:d5:13:97:c0:28:df:17:94:13:25:65:be:d8:dd:b8:
c2:30:64:6f:46:5e:6e:c6:3d:46:93:cb:bd:d3:6e:fe:04:c7:
c4:62:58:f4:a8:2e:bf:37:10:69:0f:5f:e8:5d:6a:79:9f:93:
0d:45:19:74:3d:35:cd:b8:66:21:cb:0a:25:f1:2a:8d:27:33:
0b:98:5b:0a:ba:5b:f6:ec:92:7a:af:0c:8e:df:6d:0f:d6:84:
97:4f:8b:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDazXJ2j3IUMjzn+fAEa3ugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZmRlZmVjZWQ1Y2VlOGYxYTZjOTM3OThlNWEzNGI2MjFm
NmRjMGIwHhcNMjYwOTI1MjMwMTMyWhcNMjYwOTI2MjMwMTMyWjAzMTEwLwYDVQQD
EygzMWVhYWI4NzIyMTljYzBiY2YxMDViNzNmMDY5NDRjZDI5NWM3ZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x8+1Ho7A5rE5qLcQsO151hkazX5
grcksFllvwOBPB2DjUJx1D9KxTWMKdvC3H3zFXTOu2g+29Og7GgQmANlAZKuTi4/
9bbYZnqYcczsGm99R/S1JvwgVb7Fi4bEK1g1r1bOLX4i58+AETw5HA/oYt0Mn2kn
LkURJtEtiGmGl4Wz5Ci9kkPRksZpT2mS41mmlkzmQ1XxMhwdn3zGClLPBd8OgEFW
5wAaaMopsBVSKFaCqoGL+GstjqtmyZMbs80VfrrMxflsElNgQrPnzuxK4TXPN5ZP
VtqEMozF/HDBTPTv8tvzg4H1MyEA94khsC/x1gOqTRtBkBHbfUmBR1e6HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHqq4ciGcwLzxBbc/BpRM0pXH1MMB8GA1UdIwQY
MBaAFIz97+ztXO6PGmyTeY5aNLYh9twLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalAzdjdPMWM3bzhhYkpONWpsbzB0aUgyM0FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS85ZmI3YWItZjNjYi00N2ZjLTlhMTQt
MDZjZGViMzhmN2I2LzEvalAzdjdPMWM3bzhhYkpONWpsbzB0aUgyM0FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS85ZmI3YWItZjNjYi00N2ZjLTlhMTQtMDZjZGViMzhmN2I2
LzEvalAzdjdPMWM3bzhhYkpONWpsbzB0aUgyM0FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIO+DyLq
Ky1Gg2yiASEgPdMT3xjYZ5wwXCvtqiJvZBO1oHiw0YBFTRjG33T6MPMUEBnjx8sq
l5vmsPv+0hwZKvZNzUXcVHTgslZ9ks4JqWgEAl5ZlJVvUP/YCjn6gQXvYo0NAiTi
2m7T/GECp+YxSvTRTmIfTTuqCV8+VoPr3I78eV3f3hhOrPnB3/arnvGmSlRc7VkV
JCfa4l2GU9fPA0coBhKr1ROXwCjfF5QTJWW+2N24wjBkb0ZebsY9RpPLvdNu/gTH
xGJY9KguvzcQaQ9f6F1qeZ+TDUUZdD01zbhmIcsKJfEqjSczC5hbCrpb9uySeq8M
jt9tD9aEl0+LRA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:41:38 2026 by rpki-client