Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File: jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier: vds/X/mDOKEI811Y8e7sDdFtqZ7tvFnjmHcnMarkTEw=
Subject key identifier: F8:A8:66:50:FD:8B:D8:56:4B:1F:87:38:D4:F4:69:53:06:EB:4F:8E
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer: /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial: 019E1DFEC8E771032955EFCBD6A4EDBE9387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number: 14EB
Signing time: Tue 12 May 2026 21:01:37 +0000
Manifest this update: Tue 12 May 2026 21:01:37 +0000
Manifest next update: Wed 13 May 2026 21:01:37 +0000
Files and hashes: 1: 0yWPvFtMAYIcTAg5JfApwnsaFGI.roa (hash: 1p9eIfwmhKokMGTrk5iOiVMk3FImaB8EaoWESHMvCLQ=)
2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: bS4lz5+sLbcUsahDVqr6xF8WFpsGbmAYo8LTKY1nBvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:c8:e7:71:03:29:55:ef:cb:d6:a4:ed:be:93:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
Validity
Not Before: May 12 21:01:37 2026 GMT
Not After : May 13 21:01:37 2026 GMT
Subject: CN=f8a86650fd8bd8564b1f8738d4f4695306eb4f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:20:23:27:68:9f:0e:25:ae:c2:a3:52:80:
6d:1a:5d:de:d0:b8:fe:49:b1:fb:da:24:9c:c7:c9:
02:2b:3c:a0:b5:c2:d3:9c:f4:79:c4:23:d2:15:27:
28:01:ee:bb:c3:24:de:ac:f4:6b:9b:5e:f2:5c:2d:
fb:6b:15:b1:4c:ff:82:73:4f:4b:fd:70:7d:88:43:
77:1f:47:03:64:86:52:7e:73:ed:d1:f6:4e:6d:9f:
24:7c:12:7a:b9:32:e3:49:10:96:4b:ab:26:93:53:
61:f7:86:12:c3:c6:81:6f:aa:15:81:de:95:11:73:
fc:5c:57:58:2f:a6:b9:93:ea:5e:81:32:76:f7:ef:
7c:a4:80:e9:b3:2c:61:54:b1:ce:d3:7e:b2:69:79:
33:46:85:f4:14:2c:a1:a3:aa:29:5a:6b:05:e0:75:
69:95:0d:22:48:d9:d7:d0:52:6f:e7:f1:41:ac:67:
06:0b:f8:a8:43:72:92:99:c7:e8:ec:64:bc:b3:a1:
a4:3f:00:72:c9:28:df:e8:bc:bb:9e:7c:89:ee:af:
c8:f0:fc:76:65:84:31:37:83:01:4f:6e:90:0d:47:
ea:6f:36:93:5b:a0:a0:2a:2b:b8:7a:46:4f:7f:41:
71:88:33:cd:dd:3b:a1:57:4c:ee:af:fa:a3:12:a2:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A8:66:50:FD:8B:D8:56:4B:1F:87:38:D4:F4:69:53:06:EB:4F:8E
X509v3 Authority Key Identifier:
keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7f:f3:b8:c1:26:f7:78:0d:f3:cb:18:3c:d0:56:7e:8b:93:
bf:e8:8a:83:7c:92:59:f7:70:21:81:08:3b:93:a1:a1:88:75:
70:bd:f3:0d:33:f1:76:b0:58:ca:c0:4c:dd:cd:16:39:14:71:
3c:72:5f:9d:0b:8f:85:42:7f:96:0e:38:a4:ba:a3:d3:5e:4f:
1e:8e:1d:cc:17:9f:f4:09:84:c5:54:24:be:a7:3d:bb:a6:51:
e2:8f:c1:8e:bc:93:6c:88:7f:62:39:02:00:f8:65:98:50:83:
f7:20:d0:06:58:5f:43:97:ef:ca:86:0d:9e:04:70:87:65:50:
70:6f:b6:5c:0c:10:36:13:37:c1:a5:f8:85:b9:ee:21:6b:6f:
a7:3d:79:b9:5b:16:9a:e8:bb:d5:ad:b9:cc:a8:8e:fa:17:ff:
2a:12:fa:71:81:57:d8:e3:d9:f4:6d:ed:6e:47:e8:a8:3f:a7:
0f:43:6e:21:52:7c:18:c3:5f:29:38:9e:5c:92:f1:17:99:aa:
34:6f:7e:b4:9a:3f:97:51:b3:e8:a7:eb:59:cb:44:d9:0a:52:
40:d3:f8:dd:d9:3a:6e:e7:f7:02:10:fc:f0:27:d0:44:62:ad:
6d:7e:0b:bb:43:cd:6b:6d:4c:1f:ee:34:e9:04:75:6f:62:37:
9c:33:2a:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/sjncQMpVe/L1qTtvpOHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYWQ0NWUzMTcyNTdlMTcwYTIwMzBlNzliMGY1Zjc0NDA2
YTc4NDIwHhcNMjYwNTEyMjEwMTM3WhcNMjYwNTEzMjEwMTM3WjAzMTEwLwYDVQQD
EyhmOGE4NjY1MGZkOGJkODU2NGIxZjg3MzhkNGY0Njk1MzA2ZWI0ZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVkgIydonw4lrsKjUoBtGl3e0Lj+
SbH72iScx8kCKzygtcLTnPR5xCPSFScoAe67wyTerPRrm17yXC37axWxTP+Cc09L
/XB9iEN3H0cDZIZSfnPt0fZObZ8kfBJ6uTLjSRCWS6smk1Nh94YSw8aBb6oVgd6V
EXP8XFdYL6a5k+pegTJ29+98pIDpsyxhVLHO036yaXkzRoX0FCyho6opWmsF4HVp
lQ0iSNnX0FJv5/FBrGcGC/ioQ3KSmcfo7GS8s6GkPwByySjf6Ly7nnyJ7q/I8Px2
ZYQxN4MBT26QDUfqbzaTW6CgKiu4ekZPf0FxiDPN3TuhV0zur/qjEqJz6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPioZlD9i9hWSx+HONT0aVMG60+OMB8GA1UdIwQY
MBaAFI6tReMXJX4XCiAw55sPX3RAanhCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanExRjR4Y2xmaGNLSUREbm13OWZkRUJxZUVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84MWVhZjYtNjZjZi00YjIxLThmZmIt
MDhiZGNkNTMzYjYxLzEvanExRjR4Y2xmaGNLSUREbm13OWZkRUJxZUVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS84MWVhZjYtNjZjZi00YjIxLThmZmItMDhiZGNkNTMzYjYx
LzEvanExRjR4Y2xmaGNLSUREbm13OWZkRUJxZUVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPH/zuMEm
93gN88sYPNBWfouTv+iKg3ySWfdwIYEIO5OhoYh1cL3zDTPxdrBYysBM3c0WORRx
PHJfnQuPhUJ/lg44pLqj015PHo4dzBef9AmExVQkvqc9u6ZR4o/BjryTbIh/YjkC
APhlmFCD9yDQBlhfQ5fvyoYNngRwh2VQcG+2XAwQNhM3waX4hbnuIWtvpz15uVsW
mui71a25zKiO+hf/KhL6cYFX2OPZ9G3tbkfoqD+nD0NuIVJ8GMNfKTieXJLxF5mq
NG9+tJo/l1Gz6KfrWctE2QpSQNP43dk6buf3AhD88CfQRGKtbX4Lu0PNa21MH+40
6QR1b2I3nDMqYg==
-----END CERTIFICATE-----
Generated at Wed May 13 01:27:06 2026 by rpki-client