Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
File: J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json)
Hash identifier: 50o6UBHAskDgE5wNIlu6nh2jm8wK078gDMoIMag1BZE=
Subject key identifier: E8:F3:C0:51:E6:39:AE:7C:53:BE:3D:88:AA:18:14:D7:E3:B0:D6:4B
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial: 01A0D6F0AAC07E56FFC11F4971B2CA1E6EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
Manifest number: 129D
Signing time: Fri 25 Sep 2026 05:01:31 +0000
Manifest this update: Fri 25 Sep 2026 05:01:31 +0000
Manifest next update: Sat 26 Sep 2026 05:01:31 +0000
Files and hashes: 1: ElTViivmjGxEdxaxj11VFkP14YI.roa (hash: YUVaRGC2xsx0b6XubgQiQ6H3U/a4QTrhpMWWRuXADx4=)
2: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: pXaamp3vY54JtqD37ucBlVCq3v1K7XWQezrU40K1nQI=)
3: MH507cRFXNNeqadxQdKywhHkylA.roa (hash: SJpj63kNuERbqmJKNAG4loDyhiVzSuV9bopPuk1oXO0=)
4: yXUQWiWAuj52X2blMDF0ySpC9kY.roa (hash: 2dpSoguExI4LCzpUhvwGpd2mxrAlFFlJZgWzZagSNCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:aa:c0:7e:56:ff:c1:1f:49:71:b2:ca:1e:6e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Validity
Not Before: Sep 25 05:01:31 2026 GMT
Not After : Sep 26 05:01:31 2026 GMT
Subject: CN=e8f3c051e639ae7c53be3d88aa1814d7e3b0d64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ef:f0:5e:5b:dc:04:4c:d6:cf:03:13:36:4b:
27:e4:ec:4f:ef:a2:9c:b9:8e:f3:5c:09:76:34:4f:
1c:de:37:f8:24:f1:be:96:57:db:10:08:28:3b:e2:
c0:77:c6:8f:34:e9:cc:b2:e4:a8:1f:32:7b:74:63:
aa:dd:14:61:0c:7b:fb:00:3b:c1:60:5d:ef:0d:ce:
80:3f:8c:07:c6:db:7a:24:6f:ab:b8:03:8b:7a:58:
71:9c:93:0e:b3:0c:5d:81:76:27:e4:bd:50:35:29:
5a:72:9c:29:b9:12:1a:d0:73:f4:d7:a7:8f:0c:f7:
25:f6:7d:03:d7:9c:fb:af:78:e0:de:4b:ec:ca:a7:
e8:9f:b3:f0:23:bb:72:15:7f:a2:50:15:0e:3f:0b:
b1:d1:d8:4a:84:37:dc:ae:9e:b7:c5:1c:80:1e:1d:
e7:66:d8:b6:8f:91:3f:4e:22:51:52:a5:c4:3e:05:
0b:50:4d:bd:c1:53:35:c9:3d:2c:5a:b2:96:df:b6:
c3:63:1a:ff:ed:f9:ca:4e:2e:85:19:ab:87:09:30:
f7:b1:2d:98:a9:de:77:9a:0f:c8:9f:ae:3a:db:02:
5e:6a:a5:79:8b:e2:92:f2:b9:79:8d:e7:d1:0c:e5:
a3:09:6e:c5:98:6c:25:b9:00:0a:49:0b:36:89:16:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F3:C0:51:E6:39:AE:7C:53:BE:3D:88:AA:18:14:D7:E3:B0:D6:4B
X509v3 Authority Key Identifier:
keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d0:06:83:72:92:9e:c0:44:ac:2d:93:99:99:29:7f:da:19:
41:1a:a7:85:3e:55:7a:6e:96:a9:ec:5c:46:8e:be:6c:11:41:
43:eb:73:d1:6f:18:cc:b3:4c:dd:12:29:73:27:e9:7c:24:7b:
20:97:0e:9a:a7:17:e4:44:15:4f:94:78:d4:76:40:96:6f:f1:
a4:41:b7:07:53:f6:55:29:55:00:41:89:6b:c7:23:f0:63:99:
7c:c7:ac:cb:bf:8a:ad:d7:07:94:39:43:14:27:3c:4e:13:95:
0b:1e:a9:44:69:7b:bc:35:7e:b5:e5:9a:2a:8b:ef:5b:e4:b3:
d8:a1:6b:33:a9:58:36:b2:17:f4:32:38:ed:b3:d9:8e:86:07:
d7:cb:f2:41:17:85:7a:12:92:96:30:2c:a6:ca:51:61:c8:35:
50:c5:ce:56:40:6b:ca:af:f8:5f:67:68:21:2c:a0:c9:d6:72:
13:8b:d8:60:d7:4b:d6:bf:07:f9:87:ac:19:f1:da:26:cf:9f:
12:71:0d:ff:94:98:49:b6:ec:d7:af:58:a5:47:90:c2:aa:c1:
d8:59:2b:06:8e:7e:7f:38:b9:3b:a5:c1:55:7e:58:58:40:17:
9a:c4:5e:ed:75:ff:c5:cd:09:ef:d1:80:2b:e3:24:67:8a:5a:
7a:65:00:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDW8KrAflb/wR9JcbLKHm7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3Zjk1OGMzYjc1OWIyYzc4OTZmNWVkNjYzZTgwNzc4MWYz
ZmY1YTIwHhcNMjYwOTI1MDUwMTMxWhcNMjYwOTI2MDUwMTMxWjAzMTEwLwYDVQQD
EyhlOGYzYzA1MWU2MzlhZTdjNTNiZTNkODhhYTE4MTRkN2UzYjBkNjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+/wXlvcBEzWzwMTNksn5OxP76Kc
uY7zXAl2NE8c3jf4JPG+llfbEAgoO+LAd8aPNOnMsuSoHzJ7dGOq3RRhDHv7ADvB
YF3vDc6AP4wHxtt6JG+ruAOLelhxnJMOswxdgXYn5L1QNSlacpwpuRIa0HP016eP
DPcl9n0D15z7r3jg3kvsyqfon7PwI7tyFX+iUBUOPwux0dhKhDfcrp63xRyAHh3n
Zti2j5E/TiJRUqXEPgULUE29wVM1yT0sWrKW37bDYxr/7fnKTi6FGauHCTD3sS2Y
qd53mg/In6462wJeaqV5i+KS8rl5jefRDOWjCW7FmGwluQAKSQs2iRY89wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjzwFHmOa58U749iKoYFNfjsNZLMB8GA1UdIwQY
MBaAFCf5WMO3WbLHiW9e1mPoB3gfP/WiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl9sWXc3ZFpzc2VKYjE3V1ktZ0hlQjhfOWFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jZGJmYmQtZWQ2Ny00NGI3LTllMWYt
YjI5MTA3Yjk4YWNjLzEvSl9sWXc3ZFpzc2VKYjE3V1ktZ0hlQjhfOWFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9jZGJmYmQtZWQ2Ny00NGI3LTllMWYtYjI5MTA3Yjk4YWNj
LzEvSl9sWXc3ZFpzc2VKYjE3V1ktZ0hlQjhfOWFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNAGg3KS
nsBErC2TmZkpf9oZQRqnhT5Vem6WqexcRo6+bBFBQ+tz0W8YzLNM3RIpcyfpfCR7
IJcOmqcX5EQVT5R41HZAlm/xpEG3B1P2VSlVAEGJa8cj8GOZfMesy7+KrdcHlDlD
FCc8ThOVCx6pRGl7vDV+teWaKovvW+Sz2KFrM6lYNrIX9DI47bPZjoYH18vyQReF
ehKSljAspspRYcg1UMXOVkBryq/4X2doISygydZyE4vYYNdL1r8H+YesGfHaJs+f
EnEN/5SYSbbs169YpUeQwqrB2FkrBo5+fzi5O6XBVX5YWEAXmsRe7XX/xc0J79GA
K+MkZ4paemUARA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:34:56 2026 by rpki-client