Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
File: Jr3a4E28sfgvVbB4MHuksIS5lLs.mft (raw, json)
Hash identifier: m3j/t5ujFwNuSwG67suZn4R8O7p8DnwNuPcQqBNu7D4=
Subject key identifier: 99:D7:E8:A5:7D:9C:B3:A1:8C:71:52:B9:A4:A2:E0:DC:0D:4E:91:96
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Certificate issuer: /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial: 01A0F8AAA8BC3C3A6C4D10EEC0539F7F33F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
Manifest number: 1A89
Signing time: Thu 01 Oct 2026 18:12:08 +0000
Manifest this update: Thu 01 Oct 2026 18:12:08 +0000
Manifest next update: Fri 02 Oct 2026 18:12:08 +0000
Files and hashes: 1: Jr3a4E28sfgvVbB4MHuksIS5lLs.crl (hash: vxyxcs3a7lpwW/yOSwnaJNP+e2KehOVZPP/kPOD8Qkk=)
2: LSc0zZT14Jo7EI4R2womLi4BWXw.roa (hash: /t+Y52iuLvhD9G1Nt7yXlLrqwqdhR3k7UUDI+0b7Jck=)
3: RJf7_BZh630LGIaBvGR48OfaOYM.roa (hash: vStLRSl6R9d4MF0nfflCotGK33XI7Q9JgJmQ0UQ6+co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:aa:a8:bc:3c:3a:6c:4d:10:ee:c0:53:9f:7f:33:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Validity
Not Before: Oct 1 18:12:08 2026 GMT
Not After : Oct 2 18:12:08 2026 GMT
Subject: CN=99d7e8a57d9cb3a18c7152b9a4a2e0dc0d4e9196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:56:6d:47:7e:d4:73:95:8e:c9:9c:34:3a:
93:36:31:7b:14:0c:d6:14:5a:b7:ce:21:62:aa:b8:
2c:11:71:13:9e:dd:49:ec:f7:26:3d:ea:4b:0e:e0:
c8:14:6e:16:64:cc:4f:9d:15:52:f3:34:fd:49:69:
4d:51:43:5e:5a:14:27:b7:b4:0a:da:17:da:c0:59:
53:e2:4a:fc:32:a2:b6:12:06:c7:69:2c:ef:9a:1d:
4f:fc:88:2a:79:21:39:06:ad:ca:83:b7:81:e0:7e:
65:22:d2:c6:3a:ea:9d:a7:47:e6:22:2d:58:b3:97:
aa:04:f4:7b:70:19:0d:a2:97:e6:20:42:52:15:4c:
1e:c8:43:a3:77:b5:c8:4b:ca:6e:20:51:12:c1:de:
47:7a:7e:c6:a0:d9:51:d4:88:fb:02:47:0e:fe:08:
84:c0:f9:56:4e:dd:20:d4:cb:bf:00:ae:5e:30:b8:
8a:9b:ec:d7:02:b4:1f:0d:a1:88:7e:7a:01:34:b4:
23:85:19:06:75:0c:9e:60:7e:0f:81:f4:7b:14:f8:
c6:ae:2b:ec:b2:65:77:51:3b:02:22:b4:10:22:84:
6d:65:d9:e1:ac:17:1d:68:54:b0:1a:ea:28:4e:5f:
ae:d9:0a:04:6b:71:8c:b9:da:0e:cf:ce:ad:c4:bc:
ab:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D7:E8:A5:7D:9C:B3:A1:8C:71:52:B9:A4:A2:E0:DC:0D:4E:91:96
X509v3 Authority Key Identifier:
keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6b:0f:0e:61:83:94:4b:62:68:9e:39:bb:2c:e2:1d:b1:72:
dc:f9:e0:c9:75:1c:ad:d0:07:a9:05:ed:08:40:56:54:e2:cd:
56:4f:23:c8:89:0a:f7:04:74:03:e8:37:c1:bb:c0:1e:de:50:
7f:1f:cd:ec:e1:85:e3:3e:85:b5:6f:96:5a:98:20:23:17:f2:
ef:bd:fd:98:4a:69:04:22:28:11:85:87:04:58:5d:4e:3e:56:
06:f1:76:12:8e:c9:be:6b:3f:4d:c8:7e:ff:59:40:95:33:16:
0a:f0:e3:87:cd:76:f5:a1:ac:5a:f3:cc:de:9c:ec:98:ff:2b:
29:f8:65:f1:50:d5:00:e0:7a:38:fc:fc:75:ce:06:0b:1c:c8:
08:90:d9:0d:ca:17:8e:34:93:e6:63:1b:8c:01:44:87:ac:93:
38:33:76:2f:cb:43:0d:a4:46:02:01:31:1f:30:d2:02:d1:a6:
15:8b:42:67:23:c9:26:cb:58:78:bd:e3:41:7f:d0:e1:81:85:
a8:7c:55:39:af:da:a2:4e:c7:11:b4:17:ec:ed:5a:ef:e5:8c:
bb:0e:f7:14:c5:65:9b:7b:a8:1a:90:8a:c9:a1:e3:7f:ad:c5:
fc:4a:cc:da:e9:a7:85:fc:84:d9:d0:22:7f:c5:c5:b9:d4:3b:
e2:12:11:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD4qqi8PDpsTRDuwFOffzP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YmRkYWUwNGRiY2IxZjgyZjU1YjA3ODMwN2JhNGIwODRi
OTk0YmIwHhcNMjYxMDAxMTgxMjA4WhcNMjYxMDAyMTgxMjA4WjAzMTEwLwYDVQQD
Eyg5OWQ3ZThhNTdkOWNiM2ExOGM3MTUyYjlhNGEyZTBkYzBkNGU5MTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbpWbUd+1HOVjsmcNDqTNjF7FAzW
FFq3ziFiqrgsEXETnt1J7PcmPepLDuDIFG4WZMxPnRVS8zT9SWlNUUNeWhQnt7QK
2hfawFlT4kr8MqK2EgbHaSzvmh1P/IgqeSE5Bq3Kg7eB4H5lItLGOuqdp0fmIi1Y
s5eqBPR7cBkNopfmIEJSFUweyEOjd7XIS8puIFESwd5Hen7GoNlR1Ij7AkcO/giE
wPlWTt0g1Mu/AK5eMLiKm+zXArQfDaGIfnoBNLQjhRkGdQyeYH4PgfR7FPjGrivs
smV3UTsCIrQQIoRtZdnhrBcdaFSwGuooTl+u2QoEa3GMudoOz86txLyrVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnX6KV9nLOhjHFSuaSi4NwNTpGWMB8GA1UdIwQY
MBaAFCa92uBNvLH4L1WweDB7pLCEuZS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnIzYTRFMjhzZmd2VmJCNE1IdWtzSVM1bExzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mZWIzYmEtZWU5MC00ZjAzLTllMDAt
ZjYxNzlhOTEwYjE1LzEvSnIzYTRFMjhzZmd2VmJCNE1IdWtzSVM1bExzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mZWIzYmEtZWU5MC00ZjAzLTllMDAtZjYxNzlhOTEwYjE1
LzEvSnIzYTRFMjhzZmd2VmJCNE1IdWtzSVM1bExzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2sPDmGD
lEtiaJ45uyziHbFy3PngyXUcrdAHqQXtCEBWVOLNVk8jyIkK9wR0A+g3wbvAHt5Q
fx/N7OGF4z6FtW+WWpggIxfy7739mEppBCIoEYWHBFhdTj5WBvF2Eo7Jvms/Tch+
/1lAlTMWCvDjh8129aGsWvPM3pzsmP8rKfhl8VDVAOB6OPz8dc4GCxzICJDZDcoX
jjST5mMbjAFEh6yTODN2L8tDDaRGAgExHzDSAtGmFYtCZyPJJstYeL3jQX/Q4YGF
qHxVOa/aok7HEbQX7O1a7+WMuw73FMVlm3uoGpCKyaHjf63F/ErM2umnhfyE2dAi
f8XFudQ74hIR8g==
-----END CERTIFICATE-----
Generated at Fri Oct 2 13:25:00 2026 by rpki-client