Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier: BV/x5XpR4vFwUcaO2Vfs9AlE7bJ7sIcFxkcGsCWHgf8=
Subject key identifier: 9F:D8:6E:DC:29:CD:C3:55:44:53:57:E7:86:5C:29:4D:0F:E6:2F:F3
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 01A13635BF15FDFB666419EB77C48054E77A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number: 0ACC
Signing time: Tue 13 Oct 2026 17:00:54 +0000
Manifest this update: Tue 13 Oct 2026 17:00:54 +0000
Manifest next update: Wed 14 Oct 2026 17:00:54 +0000
Files and hashes: 1: 0B_-fCyLXp7fUsWOj-653bKohWc.roa (hash: Y+dKm3SHW56iDu1ZP9jbGp26P92Eyq4+86SkrCqeKGU=)
2: A_-h6j62GakTf8sVYSZUPDVBMR8.roa (hash: csIAxW9bXtziqhqyhaEg7C2GF8tHOgSMTxW10V1Xvoc=)
3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: h4sLn6p9tKZUSF86Ty1Q/g5L61vjkznhZNQmh7NoyMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:35:bf:15:fd:fb:66:64:19:eb:77:c4:80:54:e7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Oct 13 17:00:54 2026 GMT
Not After : Oct 14 17:00:54 2026 GMT
Subject: CN=9fd86edc29cdc355445357e7865c294d0fe62ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:87:d8:0f:0b:25:56:94:26:93:df:23:11:
b3:6d:45:d8:18:03:d4:8d:fc:0f:ca:3a:7d:1b:37:
67:33:4f:23:36:c8:da:0b:70:07:93:22:dd:e3:63:
20:93:0a:0f:e6:a6:c7:11:08:0a:34:1b:a8:e1:4a:
07:f8:24:37:92:8c:b4:a4:d8:ad:36:c8:6e:b0:9c:
83:f1:07:02:4e:c4:e3:45:6f:35:a3:9f:03:9f:74:
bd:da:dd:d8:16:8e:e4:9c:6f:00:3a:02:41:d1:42:
90:03:59:7c:df:96:17:ce:31:2a:8c:2f:9a:31:38:
7b:4d:2e:7d:ab:21:19:69:e6:e8:2e:b7:07:32:e2:
09:72:06:21:17:a7:85:63:de:cf:81:9b:42:05:bd:
13:e8:84:76:d6:e2:a9:99:6b:61:7a:de:ed:99:b2:
7d:ad:88:27:10:a3:cb:aa:76:c5:6e:23:80:fa:5b:
10:94:d4:bb:0a:4e:ad:7c:f9:9e:ae:e8:9d:47:d7:
70:4a:a9:8f:bc:c0:4b:40:d8:e3:a7:83:64:91:bf:
79:a8:be:ea:bf:c3:21:29:cb:87:1f:6d:77:c5:c2:
79:8e:2c:b1:31:2e:09:e6:9f:02:1a:7b:32:53:61:
c8:4b:ed:8f:29:ca:d6:3d:68:b5:e2:9e:da:77:c1:
18:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D8:6E:DC:29:CD:C3:55:44:53:57:E7:86:5C:29:4D:0F:E6:2F:F3
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:51:19:a8:42:eb:5b:90:0d:21:4e:30:a9:c6:b1:89:a0:52:
77:1d:73:f9:5f:23:b3:41:a2:ca:f0:96:fc:e4:ce:8a:66:b1:
6d:ed:b6:a6:97:b3:e3:0b:59:1f:02:c6:06:70:b2:d7:a8:fe:
0e:24:08:7f:0f:eb:a6:09:38:7b:3a:7e:9c:f8:ea:2a:5e:a9:
c7:5c:6f:48:56:1a:0e:96:33:cd:67:51:0c:3b:07:dc:48:37:
eb:a6:af:49:b1:9b:49:8b:fb:03:45:c5:b4:51:e9:f6:92:ac:
32:f0:ea:85:7e:e9:0b:75:ea:59:0c:65:c9:b5:e5:74:f8:e9:
13:e5:18:77:7d:07:a3:51:34:f3:1b:44:0e:e9:96:47:99:6f:
a9:23:bc:24:69:03:38:9d:50:77:ae:44:d3:1e:73:87:fa:99:
91:b9:62:a1:7b:0e:fa:87:e9:8d:50:a9:d4:a8:81:5a:a6:ef:
3b:28:af:b7:61:6f:0b:17:1d:3a:79:b3:56:92:17:b1:ec:5a:
a4:c9:a5:7a:cd:76:37:b0:c3:f1:aa:ec:bf:62:d5:69:f3:d4:
fa:84:d0:35:2a:0d:fb:60:fd:d7:cd:79:41:6a:15:d1:a5:ef:
c4:b7:af:68:7e:fe:45:04:19:16:c7:d2:c9:93:bd:3f:c2:e6:
40:19:31:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE2Nb8V/ftmZBnrd8SAVOd6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OThjOTdiMTRjMzc0YTUyODMzZGI2YTQwMDdiNTRiNDY2
MmM1YTkwHhcNMjYxMDEzMTcwMDU0WhcNMjYxMDE0MTcwMDU0WjAzMTEwLwYDVQQD
Eyg5ZmQ4NmVkYzI5Y2RjMzU1NDQ1MzU3ZTc4NjVjMjk0ZDBmZTYyZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom2H2A8LJVaUJpPfIxGzbUXYGAPU
jfwPyjp9GzdnM08jNsjaC3AHkyLd42MgkwoP5qbHEQgKNBuo4UoH+CQ3koy0pNit
NshusJyD8QcCTsTjRW81o58Dn3S92t3YFo7knG8AOgJB0UKQA1l835YXzjEqjC+a
MTh7TS59qyEZaeboLrcHMuIJcgYhF6eFY97PgZtCBb0T6IR21uKpmWthet7tmbJ9
rYgnEKPLqnbFbiOA+lsQlNS7Ck6tfPmeruidR9dwSqmPvMBLQNjjp4Nkkb95qL7q
v8MhKcuHH213xcJ5jiyxMS4J5p8CGnsyU2HIS+2PKcrWPWi14p7ad8EYDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/YbtwpzcNVRFNX54ZcKU0P5i/zMB8GA1UdIwQY
MBaAFLSYyXsUw3SlKDPbakAHtUtGYsWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzct
ODY1NDI2NjQ1N2M2LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzctODY1NDI2NjQ1N2M2
LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1EZqELr
W5ANIU4wqcaxiaBSdx1z+V8js0GiyvCW/OTOimaxbe22ppez4wtZHwLGBnCy16j+
DiQIfw/rpgk4ezp+nPjqKl6px1xvSFYaDpYzzWdRDDsH3Eg366avSbGbSYv7A0XF
tFHp9pKsMvDqhX7pC3XqWQxlybXldPjpE+UYd30Ho1E08xtEDumWR5lvqSO8JGkD
OJ1Qd65E0x5zh/qZkblioXsO+ofpjVCp1KiBWqbvOyivt2FvCxcdOnmzVpIXsexa
pMmles12N7DD8arsv2LVafPU+oTQNSoN+2D91815QWoV0aXvxLevaH7+RQQZFsfS
yZO9P8LmQBkx/Q==
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:48:35 2026 by rpki-client