Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
File: jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft (raw, json)
Hash identifier: +U4rme8XKqVUbzY/XtztE+54WOAqDKxw1e+O9/XS3As=
Subject key identifier: 37:23:45:49:C1:6C:99:33:61:1D:5E:74:71:AC:12:7B:21:16:19:52
Authority key identifier: 8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
Certificate issuer: /CN=8cc44984c686f2018c48102a284ab5a80f52a646
Certificate serial: 019F8F7EC1756BA7E4EEF230DAE6D8050B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
Manifest number: 011A
Signing time: Thu 23 Jul 2026 15:01:16 +0000
Manifest this update: Thu 23 Jul 2026 15:01:16 +0000
Manifest next update: Fri 24 Jul 2026 15:01:16 +0000
Files and hashes: 1: ZH79cfZtvswrSRgEB8rNyMLIncU.roa (hash: GdJB3BYjUYCwb6ugCMPQc81N/mokOXiUDJJvBJrnEFI=)
2: ZRs42qGd3cKFMrGetaE_cEFCL58.roa (hash: QY1vvv3yXpUMazK4C60xrRvy7PbaO26yt177jKe+yzU=)
3: jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl (hash: 7kJV41OPLrqaxL751P9GIHitPJcw0ezON7x/PtjfzRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:c1:75:6b:a7:e4:ee:f2:30:da:e6:d8:05:0b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc44984c686f2018c48102a284ab5a80f52a646
Validity
Not Before: Jul 23 15:01:16 2026 GMT
Not After : Jul 24 15:01:16 2026 GMT
Subject: CN=37234549c16c9933611d5e7471ac127b21161952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:35:6b:67:10:5a:f3:61:83:66:58:6f:70:b4:
7b:8f:86:9b:06:1d:07:3d:cd:a9:ed:3f:12:db:1d:
b5:b0:4a:42:60:f3:71:5e:02:08:a4:37:a2:74:78:
be:f1:b8:29:ca:d0:33:10:e1:85:5f:7a:c0:40:76:
af:c8:04:0b:6a:58:db:bd:fa:b4:f8:4e:2d:6f:a8:
46:00:ec:bc:4d:4b:3d:a1:c1:93:a0:f1:af:ba:60:
4e:8d:73:9b:e8:f2:83:99:f9:9c:95:e1:a9:8f:a3:
33:0b:39:71:c7:df:d1:e9:74:51:13:e1:40:c1:7e:
9a:ae:88:4e:90:a5:cb:33:dd:be:f7:65:f3:c1:30:
d6:1f:ef:a0:93:64:ee:7b:f3:b7:e9:e7:03:54:12:
e4:38:71:37:e9:66:31:0b:70:3e:82:75:9a:a7:c2:
20:3d:63:1c:13:6d:60:f7:64:da:d9:cf:95:d6:af:
c3:cd:54:8a:0c:0d:65:0b:a9:5a:85:67:dd:04:7b:
4e:16:d3:be:2d:d7:f8:15:aa:a8:83:3c:cd:6b:9b:
7e:7e:62:bf:8c:5e:1d:6f:01:81:d3:89:e2:1c:d2:
2e:bc:ed:9e:79:41:ab:43:be:b0:0a:b8:83:1c:7f:
8d:9f:50:48:1b:8c:68:3e:15:fc:8a:e7:14:a6:2b:
e1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:23:45:49:C1:6C:99:33:61:1D:5E:74:71:AC:12:7B:21:16:19:52
X509v3 Authority Key Identifier:
keyid:8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ce:db:34:b2:28:73:cc:e7:54:2a:b5:ea:56:fc:6a:b8:98:
e6:07:4a:88:29:51:e1:38:02:71:33:00:7c:0c:b7:fa:14:82:
00:3b:1f:ca:52:bb:6b:50:06:b0:53:c8:90:a9:b4:e2:6e:74:
ab:42:f5:74:90:08:13:8f:59:56:5b:37:4a:28:52:f3:6b:d2:
52:bc:9a:68:43:b6:b5:dd:a7:a3:c6:63:63:bb:e1:6b:fc:b3:
d2:17:27:d0:ab:e2:fd:de:7a:71:71:58:69:c4:67:2a:d1:ba:
92:11:45:65:07:ff:75:64:c0:95:61:1a:4d:27:55:28:60:7e:
a9:6d:f1:e3:6c:50:9b:eb:22:e2:f2:b7:bd:47:ab:83:fb:0b:
c8:b9:a9:04:2c:d0:fc:52:56:a2:59:a0:a6:ef:fc:82:e7:84:
30:fc:04:35:c3:fb:93:d1:f4:f6:20:c1:1d:64:61:4c:56:87:
f7:87:44:2c:15:dd:57:2a:19:b4:3c:5a:40:1e:4a:88:c4:ab:
12:e8:d7:3e:b8:d5:ec:ef:85:7f:e0:de:39:fc:fe:0b:c0:17:
f2:1b:ed:36:57:ac:3e:c8:9c:92:75:eb:28:89:be:5a:ae:cb:
da:d7:8b:d1:9f:b8:6c:25:54:40:81:15:b8:91:db:3e:89:0a:
4b:07:b6:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfsF1a6fk7vIw2ubYBQuVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjYzQ0OTg0YzY4NmYyMDE4YzQ4MTAyYTI4NGFiNWE4MGY1
MmE2NDYwHhcNMjYwNzIzMTUwMTE2WhcNMjYwNzI0MTUwMTE2WjAzMTEwLwYDVQQD
EygzNzIzNDU0OWMxNmM5OTMzNjExZDVlNzQ3MWFjMTI3YjIxMTYxOTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjVrZxBa82GDZlhvcLR7j4abBh0H
Pc2p7T8S2x21sEpCYPNxXgIIpDeidHi+8bgpytAzEOGFX3rAQHavyAQLaljbvfq0
+E4tb6hGAOy8TUs9ocGToPGvumBOjXOb6PKDmfmcleGpj6MzCzlxx9/R6XRRE+FA
wX6arohOkKXLM92+92XzwTDWH++gk2Tue/O36ecDVBLkOHE36WYxC3A+gnWap8Ig
PWMcE21g92Ta2c+V1q/DzVSKDA1lC6lahWfdBHtOFtO+Ldf4FaqogzzNa5t+fmK/
jF4dbwGB04niHNIuvO2eeUGrQ76wCriDHH+Nn1BIG4xoPhX8iucUpivh1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcjRUnBbJkzYR1edHGsEnshFhlSMB8GA1UdIwQY
MBaAFIzESYTGhvIBjEgQKihKtagPUqZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak1SSmhNYUc4Z0dNU0JBcUtFcTFxQTlTcGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81YmE4NWUtMzkzNy00YjBjLTg3ZDkt
YzJmODQ3NDdkNzVmLzEvak1SSmhNYUc4Z0dNU0JBcUtFcTFxQTlTcGtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81YmE4NWUtMzkzNy00YjBjLTg3ZDktYzJmODQ3NDdkNzVm
LzEvak1SSmhNYUc4Z0dNU0JBcUtFcTFxQTlTcGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS87bNLIo
c8znVCq16lb8ariY5gdKiClR4TgCcTMAfAy3+hSCADsfylK7a1AGsFPIkKm04m50
q0L1dJAIE49ZVls3SihS82vSUryaaEO2td2no8ZjY7vha/yz0hcn0Kvi/d56cXFY
acRnKtG6khFFZQf/dWTAlWEaTSdVKGB+qW3x42xQm+si4vK3vUerg/sLyLmpBCzQ
/FJWolmgpu/8gueEMPwENcP7k9H09iDBHWRhTFaH94dELBXdVyoZtDxaQB5KiMSr
EujXPrjV7O+Ff+DeOfz+C8AX8hvtNlesPsicknXrKIm+Wq7L2teL0Z+4bCVUQIEV
uJHbPokKSwe2Vw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:20:13 2026 by rpki-client