Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
File: JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft (raw, json)
Hash identifier: lEKSSlNQLtKybM24UtIb4t7/QINHeZJqHfOONMrW5BY=
Subject key identifier: CB:2B:A3:7D:E0:F9:AB:0F:69:26:C7:EA:45:9B:23:6E:F1:D0:2A:E3
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 01A0DD297C830D6BA41AF754ECB480A76E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
Manifest number: 1AD7
Signing time: Sat 26 Sep 2026 10:01:18 +0000
Manifest this update: Sat 26 Sep 2026 10:01:18 +0000
Manifest next update: Sun 27 Sep 2026 10:01:18 +0000
Files and hashes: 1: FnwKQW5UnLQMReNyfTHKRcvd6kk.roa (hash: UCeEtQwba/ftT20tzo08vD+65NQ/1VW7etax1BQEDTI=)
2: JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl (hash: 2zi4VEGbPUqBSM+u5/kn6N0w3TtK58h6lcew0xEug/U=)
3: N9eJQft8E_Vlm9-92c34l9oVaOE.roa (hash: STJ3sDAbNVIFBy9HmVpY5X7TsamKj7xapU3f0YN1wC0=)
4: YMqk5erxqcBl_rQ1UMg8ywZDz0M.roa (hash: n9uoqKCqG6Ob4UlpegclYiabrSTMSzoqIVhaQf1T96Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:7c:83:0d:6b:a4:1a:f7:54:ec:b4:80:a7:6e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Sep 26 10:01:18 2026 GMT
Not After : Sep 27 10:01:18 2026 GMT
Subject: CN=cb2ba37de0f9ab0f6926c7ea459b236ef1d02ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:71:8c:fa:a8:17:bc:8c:87:4d:ad:11:69:9b:
8c:3a:43:8b:48:2d:2c:d9:26:48:ee:e5:f7:d1:a1:
5d:14:de:b1:37:49:7e:4e:b2:9e:79:75:1f:0d:ea:
8d:e9:49:d5:c5:5e:40:82:df:83:e1:25:d1:8c:e2:
49:f0:ea:19:4a:e4:b1:32:9d:c2:e2:cf:e8:37:e0:
4e:92:49:a0:93:37:fa:32:30:10:03:17:22:9a:f7:
43:d4:22:93:f7:a3:43:cb:72:4d:e3:14:3f:98:bc:
30:d5:9f:cc:b7:d7:95:64:88:4a:c7:56:2f:99:ad:
01:96:c9:a1:3a:e5:d2:3b:cb:22:dc:d4:45:9a:79:
89:49:1d:6b:ff:b3:67:a0:0f:bd:ad:f7:c9:17:6c:
cd:63:47:a3:8f:9d:1d:df:eb:a1:74:f0:c3:58:c1:
94:a2:c2:9a:78:e2:88:9e:e2:71:49:37:31:c3:6e:
e5:3e:6b:da:4e:69:1b:2c:78:8a:0b:2a:db:44:dd:
14:fc:6f:08:1d:a0:46:08:49:53:7e:06:b2:e1:01:
2b:3e:dc:7b:93:d8:19:56:7a:7f:c1:96:2a:73:46:
d6:99:54:2d:af:3e:62:e3:b3:e3:36:e6:23:c7:5c:
2b:df:40:8a:c6:90:cf:a9:d8:24:19:3c:28:78:87:
4c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2B:A3:7D:E0:F9:AB:0F:69:26:C7:EA:45:9B:23:6E:F1:D0:2A:E3
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0e:dd:03:c4:e2:03:eb:f3:d3:b3:5f:c9:10:f9:20:76:8b:
d3:e8:7d:56:45:c5:69:f9:8c:c1:a6:51:9c:62:b3:7b:53:05:
40:da:26:11:d3:54:64:e7:25:7c:08:9c:ea:42:20:e9:be:e8:
e3:8d:55:a0:62:5f:d9:39:1c:6e:b9:b8:3e:82:3a:9f:54:ba:
74:7e:d9:fb:56:d4:4c:3c:05:4b:ee:3c:f3:4d:df:a6:c9:e2:
0f:db:8c:35:32:75:4f:7e:ac:b9:a0:be:e4:dd:77:51:6a:5b:
a6:00:d8:de:ae:1c:5c:bb:74:25:f6:60:67:65:98:4e:0d:87:
4a:64:23:85:3d:2c:5d:27:bc:6f:fa:b6:c1:7e:af:b0:5d:09:
d4:15:9f:62:63:65:3d:63:df:65:85:d8:e6:8f:4d:d5:7e:94:
f7:f5:ce:94:9e:ba:93:1e:a7:ad:08:0a:12:e2:7d:16:99:0e:
a5:77:ab:f1:d3:07:7e:17:5f:fa:e3:86:ce:8c:b8:62:c7:26:
8a:67:d5:a4:e6:e6:63:a4:e9:dd:32:81:74:75:3c:55:4f:87:
ab:e8:93:7b:65:69:68:f0:35:59:73:b0:45:9f:13:31:93:12:
01:8c:ed:a7:76:a9:35:56:35:d1:d5:7a:df:9f:0f:80:e5:45:
2a:28:26:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdKXyDDWukGvdU7LSAp255MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MTQ3YzhiM2YzNzg1MGU5ZjkwNzQ5OTM4NDVjNGUwNjlm
OGVmZTIwHhcNMjYwOTI2MTAwMTE4WhcNMjYwOTI3MTAwMTE4WjAzMTEwLwYDVQQD
EyhjYjJiYTM3ZGUwZjlhYjBmNjkyNmM3ZWE0NTliMjM2ZWYxZDAyYWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73GM+qgXvIyHTa0RaZuMOkOLSC0s
2SZI7uX30aFdFN6xN0l+TrKeeXUfDeqN6UnVxV5Agt+D4SXRjOJJ8OoZSuSxMp3C
4s/oN+BOkkmgkzf6MjAQAxcimvdD1CKT96NDy3JN4xQ/mLww1Z/Mt9eVZIhKx1Yv
ma0BlsmhOuXSO8si3NRFmnmJSR1r/7NnoA+9rffJF2zNY0ejj50d3+uhdPDDWMGU
osKaeOKInuJxSTcxw27lPmvaTmkbLHiKCyrbRN0U/G8IHaBGCElTfgay4QErPtx7
k9gZVnp/wZYqc0bWmVQtrz5i47PjNuYjx1wr30CKxpDPqdgkGTwoeIdMswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsro33g+asPaSbH6kWbI27x0CrjMB8GA1UdIwQY
MBaAFCQUfIs/N4UOn5B0mThFxOBp+O/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEt
YjM1MzViNGNhNTBmLzEvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEtYjM1MzViNGNhNTBm
LzEvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATw7dA8Ti
A+vz07NfyRD5IHaL0+h9VkXFafmMwaZRnGKze1MFQNomEdNUZOclfAic6kIg6b7o
441VoGJf2Tkcbrm4PoI6n1S6dH7Z+1bUTDwFS+48803fpsniD9uMNTJ1T36suaC+
5N13UWpbpgDY3q4cXLt0JfZgZ2WYTg2HSmQjhT0sXSe8b/q2wX6vsF0J1BWfYmNl
PWPfZYXY5o9N1X6U9/XOlJ66kx6nrQgKEuJ9FpkOpXer8dMHfhdf+uOGzoy4Yscm
imfVpObmY6Tp3TKBdHU8VU+Hq+iTe2VpaPA1WXOwRZ8TMZMSAYztp3apNVY10dV6
358PgOVFKigmlw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 19:53:39 2026 by rpki-client