Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
File: jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft (raw, json)
Hash identifier: jSLXxB61vQatzwnZvEThb5UncQkZGnGaZkF0r4mUxkA=
Subject key identifier: F9:14:3C:19:BC:56:FB:84:97:34:20:DB:3F:46:21:2F:0E:3C:5B:51
Authority key identifier: 8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
Certificate issuer: /CN=8cc44984c686f2018c48102a284ab5a80f52a646
Certificate serial: 01A0D501E8AC155811F736602CD6FA656272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
Manifest number: 01C3
Signing time: Thu 24 Sep 2026 20:01:07 +0000
Manifest this update: Thu 24 Sep 2026 20:01:07 +0000
Manifest next update: Fri 25 Sep 2026 20:01:07 +0000
Files and hashes: 1: DXFnpgsoAJDSh1GQIY3dLsC542M.roa (hash: aPR1e33+9EP8BG3ZvfZllvca2KoUBSV0RYS/0Gf7RO0=)
2: ZH79cfZtvswrSRgEB8rNyMLIncU.roa (hash: GdJB3BYjUYCwb6ugCMPQc81N/mokOXiUDJJvBJrnEFI=)
3: jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl (hash: Xq9HzpJ3DKHXRSxdRbneIUwz5mPkJoyU4C4Syi451sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:01:e8:ac:15:58:11:f7:36:60:2c:d6:fa:65:62:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc44984c686f2018c48102a284ab5a80f52a646
Validity
Not Before: Sep 24 20:01:07 2026 GMT
Not After : Sep 25 20:01:07 2026 GMT
Subject: CN=f9143c19bc56fb84973420db3f46212f0e3c5b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:bf:fd:2c:16:18:1a:51:71:9f:bf:ff:7a:
51:50:f1:c2:a7:8e:e3:66:92:76:8e:dc:20:0f:1b:
1b:16:96:ef:32:ce:1a:fb:7f:c8:bb:44:1f:0b:68:
b7:f4:52:93:3e:9c:eb:8d:3a:51:03:ac:61:b4:ee:
32:6a:5d:24:ee:85:7a:67:68:8c:56:11:04:2e:79:
62:90:8d:c3:20:38:e8:f9:e6:b5:38:4f:be:bb:f9:
c1:b4:7c:7f:52:97:0a:ef:54:8a:48:cc:33:d2:6e:
52:1a:4f:de:ed:e7:3e:1e:60:88:00:cd:90:e1:a4:
c2:32:e6:40:aa:0c:32:6c:04:2b:cf:c5:d8:03:5e:
4f:d8:41:84:ab:d4:b0:f9:f7:03:5e:31:03:01:42:
4a:2b:98:ac:a7:f5:f2:13:39:c3:ac:aa:0b:31:07:
72:58:cb:be:ea:34:87:0d:85:e5:29:d0:48:d4:b3:
70:46:4f:23:40:98:f3:79:fa:f6:82:2d:d2:22:94:
7a:78:32:2f:10:f5:b8:41:8d:7e:01:4e:48:9d:32:
6e:6d:2f:be:65:52:b3:44:98:a8:ca:75:95:90:51:
07:91:b2:9b:d2:a6:01:9b:31:c2:f4:c6:72:1e:d8:
48:6c:94:31:e3:32:fa:73:d2:b4:a3:87:c5:9c:54:
16:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:14:3C:19:BC:56:FB:84:97:34:20:DB:3F:46:21:2F:0E:3C:5B:51
X509v3 Authority Key Identifier:
keyid:8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9d:b3:5a:cc:76:4c:ba:c8:2d:98:4a:32:92:23:ce:da:b4:
8d:48:3b:d6:64:7a:3e:e5:df:94:3f:94:2e:a7:79:3f:e6:78:
f1:1c:43:2b:44:79:11:8d:61:ca:9a:9f:75:dd:5e:20:40:e0:
dc:8b:76:8c:7b:f6:7d:68:c1:e5:f5:28:27:b1:0a:9a:da:ba:
d8:c5:d7:2e:59:e6:d6:58:eb:b4:a9:bc:d0:b4:2d:19:19:ac:
83:a6:89:b7:98:7f:b6:45:86:ad:5a:78:26:b4:59:9d:b1:09:
e0:ff:65:ab:57:1a:bd:1e:3a:73:c6:bc:b8:7a:df:08:33:ad:
65:51:95:dc:bf:c1:e0:65:83:a6:24:f0:fb:fd:81:e1:8d:7b:
53:65:6f:f0:da:cf:85:a8:ee:f3:88:8a:d7:d1:34:5a:11:4b:
de:ea:22:b1:fc:c1:6a:38:37:b9:d8:9f:55:4b:af:6b:7e:d2:
d7:74:59:f6:cc:66:55:39:e4:c4:16:a8:3f:7f:43:b3:60:00:
86:a1:9b:1b:04:ec:91:e8:98:b4:71:52:74:95:33:c2:49:bd:
9c:39:e4:2a:a1:1e:2e:3d:f5:a8:23:f5:39:cc:a8:a0:99:0b:
0c:d6:75:92:f1:9c:b3:ef:7e:66:21:84:fb:a1:ea:ac:6c:59:
34:67:d8:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVAeisFVgR9zZgLNb6ZWJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjYzQ0OTg0YzY4NmYyMDE4YzQ4MTAyYTI4NGFiNWE4MGY1
MmE2NDYwHhcNMjYwOTI0MjAwMTA3WhcNMjYwOTI1MjAwMTA3WjAzMTEwLwYDVQQD
EyhmOTE0M2MxOWJjNTZmYjg0OTczNDIwZGIzZjQ2MjEyZjBlM2M1YjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZO//SwWGBpRcZ+//3pRUPHCp47j
ZpJ2jtwgDxsbFpbvMs4a+3/Iu0QfC2i39FKTPpzrjTpRA6xhtO4yal0k7oV6Z2iM
VhEELnlikI3DIDjo+ea1OE++u/nBtHx/UpcK71SKSMwz0m5SGk/e7ec+HmCIAM2Q
4aTCMuZAqgwybAQrz8XYA15P2EGEq9Sw+fcDXjEDAUJKK5isp/XyEznDrKoLMQdy
WMu+6jSHDYXlKdBI1LNwRk8jQJjzefr2gi3SIpR6eDIvEPW4QY1+AU5InTJubS++
ZVKzRJioynWVkFEHkbKb0qYBmzHC9MZyHthIbJQx4zL6c9K0o4fFnFQWdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkUPBm8VvuElzQg2z9GIS8OPFtRMB8GA1UdIwQY
MBaAFIzESYTGhvIBjEgQKihKtagPUqZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak1SSmhNYUc4Z0dNU0JBcUtFcTFxQTlTcGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81YmE4NWUtMzkzNy00YjBjLTg3ZDkt
YzJmODQ3NDdkNzVmLzEvak1SSmhNYUc4Z0dNU0JBcUtFcTFxQTlTcGtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81YmE4NWUtMzkzNy00YjBjLTg3ZDktYzJmODQ3NDdkNzVm
LzEvak1SSmhNYUc4Z0dNU0JBcUtFcTFxQTlTcGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJ2zWsx2
TLrILZhKMpIjztq0jUg71mR6PuXflD+ULqd5P+Z48RxDK0R5EY1hypqfdd1eIEDg
3It2jHv2fWjB5fUoJ7EKmtq62MXXLlnm1ljrtKm80LQtGRmsg6aJt5h/tkWGrVp4
JrRZnbEJ4P9lq1cavR46c8a8uHrfCDOtZVGV3L/B4GWDpiTw+/2B4Y17U2Vv8NrP
haju84iK19E0WhFL3uoisfzBajg3udifVUuva37S13RZ9sxmVTnkxBaoP39Ds2AA
hqGbGwTskeiYtHFSdJUzwkm9nDnkKqEeLj31qCP1OcyooJkLDNZ1kvGcs+9+ZiGE
+6HqrGxZNGfYOQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:53:27 2026 by rpki-client