Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
File: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft (raw, json)
Hash identifier: czGhp1a6TnvNaUNopw0zXFzmFg6qKTvVcOJ/N3vFtX8=
Subject key identifier: CD:85:F2:99:99:D3:16:74:CF:44:6A:9C:C1:B5:91:EC:07:28:82:8C
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial: 01A1445F281D43A99E948CFF4584EE8E04CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
Manifest number: 1975
Signing time: Fri 16 Oct 2026 11:00:49 +0000
Manifest this update: Fri 16 Oct 2026 11:00:49 +0000
Manifest next update: Sat 17 Oct 2026 11:00:49 +0000
Files and hashes: 1: 7HIOB7eoRAyG0ZPEZvvAbpswFrY.roa (hash: Es8A+6R1MLYeRZW+tk5RBf/7aXDiiAHZ+/2nLZtggb4=)
2: MCbnv8KJAY7dWm0UH6ulCMh-Zxc.roa (hash: 0xuvAxTJi/9kYRQK87s4orh7y9pLCa7vkuXPG3p7G24=)
3: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl (hash: Vo0cQBPB3S6ERTlYpJs6OIclIDHXyCB+pCvw4dodp6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:5f:28:1d:43:a9:9e:94:8c:ff:45:84:ee:8e:04:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Validity
Not Before: Oct 16 11:00:49 2026 GMT
Not After : Oct 17 11:00:49 2026 GMT
Subject: CN=cd85f29999d31674cf446a9cc1b591ec0728828c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:31:8f:2e:65:67:01:8a:3f:99:b4:50:d5:
5a:16:dd:32:c3:9f:8c:10:00:84:ec:9a:22:79:c7:
dc:dd:53:68:ef:bf:a4:ec:f2:04:e5:ae:1b:75:66:
47:63:54:2c:f7:2d:2c:01:f0:d8:b4:f1:3d:a2:c0:
7b:1d:1b:27:d0:c0:80:a4:6a:67:00:7d:e3:e7:68:
c1:77:fb:2c:36:19:2a:21:22:35:52:5d:f9:4a:c7:
ba:92:1a:d3:d6:d9:32:7a:6f:bf:e1:db:70:f8:f9:
54:0c:a9:97:c6:8f:f1:74:5c:be:1e:ee:a7:73:73:
17:a4:64:21:df:0b:08:d2:83:04:2e:51:11:6a:76:
38:dc:8f:19:43:13:5c:43:2f:fd:2a:53:22:2c:32:
33:66:b8:95:ba:52:4b:a2:08:2f:eb:f0:48:ca:b4:
c8:ac:94:0c:d4:b9:97:84:e7:cd:c9:bd:ef:95:d8:
b4:b9:a4:34:9c:56:0a:8d:8d:47:88:9e:63:56:09:
7e:4e:35:6c:95:fe:bf:7f:09:49:bd:fc:9e:19:89:
f7:09:c8:cb:39:eb:c6:47:0a:70:b8:7d:af:e8:5b:
97:a8:e0:e9:fb:c6:2e:6c:02:ac:7c:52:b8:a2:c0:
70:b0:e7:46:c9:a2:d7:0e:65:b6:b7:d1:b6:90:53:
c6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:85:F2:99:99:D3:16:74:CF:44:6A:9C:C1:B5:91:EC:07:28:82:8C
X509v3 Authority Key Identifier:
keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ae:14:d4:76:19:25:ae:76:85:4a:7a:76:8c:32:c5:5d:42:
ab:c4:37:08:c8:01:67:93:ef:6c:c1:18:27:ae:84:c7:f0:0d:
43:62:77:03:2e:5c:7d:07:f0:e3:e1:e3:ce:1c:b5:6e:a3:a1:
a7:72:3b:72:32:b7:bf:ff:09:96:07:4d:a3:79:f1:34:4e:cd:
d0:dd:35:13:4d:29:6f:89:ac:f8:1a:cb:3b:83:ef:9d:45:3c:
17:8a:c9:bd:f2:7d:03:dc:53:fc:1d:1a:0e:d6:0c:7b:25:eb:
b0:02:7e:48:ad:0a:8a:a5:26:df:f7:ba:7b:81:00:3f:2b:16:
db:bf:c8:1c:c1:d2:fe:89:82:8c:41:3f:d1:27:61:4c:9b:f2:
75:4e:b3:29:e0:c1:42:7d:d9:3a:66:63:f8:04:4e:75:d8:e5:
a2:36:72:11:4f:d2:54:f1:b8:e7:9c:10:f0:b8:01:33:41:0e:
68:1a:e6:71:b0:35:cf:de:b0:21:b5:de:b1:9a:89:c9:34:db:
52:30:42:4e:13:7e:88:94:17:c5:7e:b5:d9:45:17:0d:c6:34:
2e:5c:2c:89:bf:df:50:05:74:cb:36:08:b9:62:89:53:47:6d:
bf:ae:d8:7d:4b:d7:16:de:a7:81:e1:e4:b9:9c:e6:0a:5c:30:
0a:be:fa:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFEXygdQ6melIz/RYTujgTKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMzJhNmU1N2VjODFjYzVjYjQzYmI1MDM3NDliMzYwZjJi
MDVjM2IwHhcNMjYxMDE2MTEwMDQ5WhcNMjYxMDE3MTEwMDQ5WjAzMTEwLwYDVQQD
EyhjZDg1ZjI5OTk5ZDMxNjc0Y2Y0NDZhOWNjMWI1OTFlYzA3Mjg4MjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIExjy5lZwGKP5m0UNVaFt0yw5+M
EACE7Joiecfc3VNo77+k7PIE5a4bdWZHY1Qs9y0sAfDYtPE9osB7HRsn0MCApGpn
AH3j52jBd/ssNhkqISI1Ul35Sse6khrT1tkyem+/4dtw+PlUDKmXxo/xdFy+Hu6n
c3MXpGQh3wsI0oMELlERanY43I8ZQxNcQy/9KlMiLDIzZriVulJLoggv6/BIyrTI
rJQM1LmXhOfNyb3vldi0uaQ0nFYKjY1HiJ5jVgl+TjVslf6/fwlJvfyeGYn3CcjL
OevGRwpwuH2v6FuXqODp+8YubAKsfFK4osBwsOdGyaLXDmW2t9G2kFPG0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2F8pmZ0xZ0z0RqnMG1kewHKIKMMB8GA1UdIwQY
MBaAFIwypuV+yBzFy0O7UDdJs2DysFw7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakRLbTVYN0lITVhMUTd0UU4wbXpZUEt3WERzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82ZTBjZmEtMjA1ZS00ZDY2LWFlM2Et
Yzc0M2Q3YzBiYjIyLzEvakRLbTVYN0lITVhMUTd0UU4wbXpZUEt3WERzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC82ZTBjZmEtMjA1ZS00ZDY2LWFlM2EtYzc0M2Q3YzBiYjIy
LzEvakRLbTVYN0lITVhMUTd0UU4wbXpZUEt3WERzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy64U1HYZ
Ja52hUp6dowyxV1Cq8Q3CMgBZ5PvbMEYJ66Ex/ANQ2J3Ay5cfQfw4+Hjzhy1bqOh
p3I7cjK3v/8JlgdNo3nxNE7N0N01E00pb4ms+BrLO4PvnUU8F4rJvfJ9A9xT/B0a
DtYMeyXrsAJ+SK0KiqUm3/e6e4EAPysW27/IHMHS/omCjEE/0SdhTJvydU6zKeDB
Qn3ZOmZj+AROddjlojZyEU/SVPG455wQ8LgBM0EOaBrmcbA1z96wIbXesZqJyTTb
UjBCThN+iJQXxX612UUXDcY0Llwsib/fUAV0yzYIuWKJU0dtv67YfUvXFt6ngeHk
uZzmClwwCr761Q==
-----END CERTIFICATE-----
Generated at Fri Oct 16 17:48:07 2026 by rpki-client