Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
File: JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json)
Hash identifier: vRipPkLv2n9iO7xoQxZTHwbuSu5SPeCEhDmZFUnItuE=
Subject key identifier: 33:83:6D:2A:F8:EF:FF:B7:F2:6B:5F:77:73:CF:43:FD:91:13:41:29
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial: 01A0E7E476A1B3B3B6D47A5ADE6D722A34BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
Manifest number: 174F
Signing time: Mon 28 Sep 2026 12:01:44 +0000
Manifest this update: Mon 28 Sep 2026 12:01:44 +0000
Manifest next update: Tue 29 Sep 2026 12:01:44 +0000
Files and hashes: 1: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: kARzVWAl0Q6Hvs4h9RAjq9RT3ukeNV0iLYKXVlR+/WM=)
2: M2jHykXP5tshdup3cmW0BBbfpFc.roa (hash: GerABurddckbNTOvcsAmSJXKIfhdD87hJkB99cOoWFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e4:76:a1:b3:b3:b6:d4:7a:5a:de:6d:72:2a:34:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
Validity
Not Before: Sep 28 12:01:44 2026 GMT
Not After : Sep 29 12:01:44 2026 GMT
Subject: CN=33836d2af8efffb7f26b5f7773cf43fd91134129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:82:5e:8d:85:3c:cf:de:2d:80:a6:51:6c:
59:e5:36:df:19:aa:5e:07:19:23:5c:83:b3:eb:f7:
08:9d:a6:5b:b1:8c:3b:4c:2a:5e:47:f6:a7:b7:0a:
82:a1:e9:25:45:bf:2e:26:ef:11:e3:84:43:f4:10:
d9:8f:3a:58:9b:bd:89:f7:77:9b:57:6b:9b:40:bc:
92:3e:d9:41:d8:0c:27:d6:c5:9c:08:e3:3d:3c:17:
ad:00:77:e2:cd:e3:e9:8a:e5:f8:4c:b4:73:bd:eb:
dd:e2:a5:18:88:c9:97:38:e1:52:8d:bb:d4:04:58:
91:1f:8d:92:66:f8:e2:d6:d9:fa:a6:5d:d6:a5:5f:
94:dc:5c:37:d2:ea:5f:dd:96:e7:05:06:29:53:93:
aa:db:af:7b:39:b0:be:a9:53:4f:95:52:5b:31:9f:
c8:31:cb:d9:a5:2e:09:ab:eb:8b:15:00:75:78:0b:
36:00:84:aa:60:6a:da:c7:30:4f:3f:d6:92:60:44:
42:99:9f:9a:2e:52:37:63:8c:2f:09:89:05:c3:d5:
50:6b:b5:af:9a:6b:27:4e:27:d3:93:09:ef:da:c2:
6d:02:28:60:29:c0:47:5a:0d:72:de:44:e3:3d:87:
f5:71:67:33:16:8b:74:b0:27:84:20:e8:2e:fb:41:
3e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:83:6D:2A:F8:EF:FF:B7:F2:6B:5F:77:73:CF:43:FD:91:13:41:29
X509v3 Authority Key Identifier:
keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:06:5f:5a:ca:6d:9f:ed:c7:be:55:bb:4c:97:82:5f:e0:8e:
d2:a4:ca:2e:5b:3a:57:ee:cc:ab:71:cf:50:6b:19:63:c0:8b:
cf:b2:17:7a:7a:2d:7a:aa:35:42:d4:93:5a:92:d9:6d:94:7b:
a6:94:57:3c:51:55:9e:0a:60:c5:08:cf:03:af:a0:b4:50:6b:
42:b8:76:2e:73:28:04:d8:ef:a7:09:9c:7c:cd:43:95:50:82:
51:4a:5e:1c:26:ff:60:8a:b7:a4:49:6f:f4:8d:5c:d7:bc:ba:
55:32:bb:ac:10:e4:05:50:8c:66:53:74:b3:91:90:60:85:49:
cf:b9:d1:af:4d:dc:f8:c1:39:49:f9:34:7a:f8:3a:db:b7:69:
98:94:a9:37:df:0c:12:d2:1e:8a:76:99:96:dc:73:7b:c9:2b:
56:82:f4:a0:2c:55:0b:81:ad:5c:2b:da:0b:12:b9:c6:04:5b:
55:10:c2:4a:b8:65:be:8e:39:2e:6c:d9:4e:e7:b4:ec:61:71:
9c:d5:5f:ea:a5:11:d0:69:7a:07:0a:22:cb:6a:1f:38:03:cd:
3d:1c:1c:a6:eb:7c:fb:98:e3:f8:d9:d5:8f:12:ff:62:35:b2:
c7:20:97:92:69:af:4b:3c:1c:7f:17:13:3d:5b:0d:45:de:6b:
f7:0a:55:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDn5Hahs7O21Hpa3m1yKjS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NDVlZjBjZjJlMjk3NDg5ZDE5NzM3MGY4ODVkNTlmODll
OTVhYWIwHhcNMjYwOTI4MTIwMTQ0WhcNMjYwOTI5MTIwMTQ0WjAzMTEwLwYDVQQD
EygzMzgzNmQyYWY4ZWZmZmI3ZjI2YjVmNzc3M2NmNDNmZDkxMTM0MTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqByCXo2FPM/eLYCmUWxZ5TbfGape
BxkjXIOz6/cInaZbsYw7TCpeR/antwqCoeklRb8uJu8R44RD9BDZjzpYm72J93eb
V2ubQLySPtlB2Awn1sWcCOM9PBetAHfizePpiuX4TLRzvevd4qUYiMmXOOFSjbvU
BFiRH42SZvji1tn6pl3WpV+U3Fw30upf3ZbnBQYpU5Oq2697ObC+qVNPlVJbMZ/I
McvZpS4Jq+uLFQB1eAs2AISqYGraxzBPP9aSYERCmZ+aLlI3Y4wvCYkFw9VQa7Wv
mmsnTifTkwnv2sJtAihgKcBHWg1y3kTjPYf1cWczFot0sCeEIOgu+0E+4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDODbSr47/+38mtfd3PPQ/2RE0EpMB8GA1UdIwQY
MBaAFCRF7wzy4pdInRlzcPiF1Z+J6VqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTct
MDk5YmY3MzQzZTJjLzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTctMDk5YmY3MzQzZTJj
LzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwZfWspt
n+3HvlW7TJeCX+CO0qTKLls6V+7Mq3HPUGsZY8CLz7IXenoteqo1QtSTWpLZbZR7
ppRXPFFVngpgxQjPA6+gtFBrQrh2LnMoBNjvpwmcfM1DlVCCUUpeHCb/YIq3pElv
9I1c17y6VTK7rBDkBVCMZlN0s5GQYIVJz7nRr03c+ME5Sfk0evg627dpmJSpN98M
EtIeinaZltxze8krVoL0oCxVC4GtXCvaCxK5xgRbVRDCSrhlvo45LmzZTue07GFx
nNVf6qUR0Gl6Bwoiy2ofOAPNPRwcput8+5jj+NnVjxL/YjWyxyCXkmmvSzwcfxcT
PVsNRd5r9wpVWg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 22:47:22 2026 by rpki-client