Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.mft
File: J9QGnis6k_cQuUMOpksNXsQXP80.mft (raw, json)
Hash identifier: zipUIXUhNfOR/vSm3lLHal8NjhlSCxwgm+aCci/FlSc=
Subject key identifier: 70:C5:C4:89:44:74:1A:E2:54:AC:CB:16:0F:AD:A0:48:6F:B4:7E:01
Authority key identifier: 27:D4:06:9E:2B:3A:93:F7:10:B9:43:0E:A6:4B:0D:5E:C4:17:3F:CD
Certificate issuer: /CN=27d4069e2b3a93f710b9430ea64b0d5ec4173fcd
Certificate serial: 01A0DCF2FAC3D37C4C261D8597EED78DAA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9QGnis6k_cQuUMOpksNXsQXP80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.mft
Manifest number: ED
Signing time: Sat 26 Sep 2026 09:01:46 +0000
Manifest this update: Sat 26 Sep 2026 09:01:46 +0000
Manifest next update: Sun 27 Sep 2026 09:01:46 +0000
Files and hashes: 1: HGkIWoXWSJAFqMPKvyGdKZB4SL4.roa (hash: nurfiqGU75vRrs8eoR9CqeesWK96CZD5f0FnSgTblxU=)
2: J9QGnis6k_cQuUMOpksNXsQXP80.crl (hash: Kzq55Lel3AjB8dZSDsC9yC3kwovrqUzezyCPPLZo2hQ=)
3: y8GOk3YpoemRpSbcw_OpCGQ6A4c.asa (hash: tkqfzOkazqk19m+RErJtf2vWmXAKEZzHmMWsgVkhH24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9QGnis6k_cQuUMOpksNXsQXP80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:fa:c3:d3:7c:4c:26:1d:85:97:ee:d7:8d:aa:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d4069e2b3a93f710b9430ea64b0d5ec4173fcd
Validity
Not Before: Sep 26 09:01:46 2026 GMT
Not After : Sep 27 09:01:46 2026 GMT
Subject: CN=70c5c48944741ae254accb160fada0486fb47e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:0c:a4:7d:59:31:97:92:6a:97:48:eb:11:
fa:f4:b8:9d:40:d6:ff:e3:05:ad:0d:d3:67:b3:ea:
eb:5b:2a:5f:66:b4:f6:87:e7:41:b1:f1:e1:d6:a3:
36:79:93:53:f7:7b:2f:fc:df:11:28:39:41:fa:39:
41:fd:8c:83:68:4f:2f:a9:23:85:90:06:b3:11:75:
5e:9a:b2:33:f7:5a:02:98:50:c3:5d:1f:8c:a2:cd:
a9:0c:d7:32:11:d8:f0:5a:94:f8:62:14:81:d4:d5:
7e:26:9f:76:5b:20:19:dd:a7:d6:f7:bf:b4:eb:dc:
27:39:57:b3:bf:a0:04:dd:e7:81:48:4c:6f:18:a8:
8c:51:12:ff:ca:c5:45:e9:51:24:85:98:49:da:c9:
91:f6:e0:8e:01:70:28:c7:3b:e9:db:ce:f0:ff:f9:
63:2c:4e:3b:e3:87:5e:1f:68:3a:ad:d5:84:4b:d7:
3b:b9:8b:f4:d3:af:aa:17:4e:cc:ca:61:9a:d8:86:
03:3b:c0:ef:2f:e1:65:a0:ec:18:de:18:1d:6e:28:
bc:f8:fa:9b:30:dc:fb:85:45:06:dc:c5:fe:ca:52:
5c:5b:a9:4b:c2:07:63:36:49:1b:81:e3:cb:59:59:
c1:8f:64:b3:f1:96:71:dd:23:41:2a:e8:8b:27:95:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C5:C4:89:44:74:1A:E2:54:AC:CB:16:0F:AD:A0:48:6F:B4:7E:01
X509v3 Authority Key Identifier:
keyid:27:D4:06:9E:2B:3A:93:F7:10:B9:43:0E:A6:4B:0D:5E:C4:17:3F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9QGnis6k_cQuUMOpksNXsQXP80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/J9QGnis6k_cQuUMOpksNXsQXP80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:73:15:a9:d7:63:15:e5:34:d4:a2:f6:75:24:c5:a4:9d:40:
81:24:82:39:a9:72:1b:f7:1b:59:19:42:1b:fd:cb:8b:8c:ae:
3d:a5:72:62:ad:82:fa:1f:6b:5f:4a:be:49:0b:59:fe:b3:c4:
86:12:90:26:9e:45:e1:d7:ca:ea:ba:b0:24:d9:25:c0:5f:74:
48:52:84:38:58:a0:65:37:85:ce:50:73:94:74:90:59:46:c1:
39:78:da:fc:7c:9a:7e:de:ff:0d:df:68:0b:2f:d5:75:1c:54:
1b:18:34:45:14:4b:f3:ce:ac:37:c4:98:7d:35:2e:68:d7:6c:
15:66:77:de:1a:75:03:f0:68:52:8f:67:68:33:03:d1:e9:55:
bd:79:b7:74:db:57:ce:62:81:41:da:3a:70:0a:bb:b0:19:bf:
50:e1:43:e2:0a:c1:7f:58:ae:7e:88:42:5a:46:09:65:c0:48:
dc:c0:15:41:be:11:1e:8f:45:f7:bc:d7:98:c4:e1:04:82:4e:
51:27:ad:8f:c0:09:d5:1f:bf:22:45:60:94:5d:9a:7d:1f:ff:
05:a5:a6:6b:ac:43:83:4c:bd:d8:0d:82:42:c8:6a:38:41:a0:
ec:76:fb:71:ce:9d:4d:98:34:dd:e5:15:c5:ed:02:1e:f1:45:
d7:52:9a:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDc8vrD03xMJh2Fl+7Xjap9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDQwNjllMmIzYTkzZjcxMGI5NDMwZWE2NGIwZDVlYzQx
NzNmY2QwHhcNMjYwOTI2MDkwMTQ2WhcNMjYwOTI3MDkwMTQ2WjAzMTEwLwYDVQQD
Eyg3MGM1YzQ4OTQ0NzQxYWUyNTRhY2NiMTYwZmFkYTA0ODZmYjQ3ZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpAMpH1ZMZeSapdI6xH69LidQNb/
4wWtDdNns+rrWypfZrT2h+dBsfHh1qM2eZNT93sv/N8RKDlB+jlB/YyDaE8vqSOF
kAazEXVemrIz91oCmFDDXR+Mos2pDNcyEdjwWpT4YhSB1NV+Jp92WyAZ3afW97+0
69wnOVezv6AE3eeBSExvGKiMURL/ysVF6VEkhZhJ2smR9uCOAXAoxzvp287w//lj
LE4744deH2g6rdWES9c7uYv006+qF07MymGa2IYDO8DvL+FloOwY3hgdbii8+Pqb
MNz7hUUG3MX+ylJcW6lLwgdjNkkbgePLWVnBj2Sz8ZZx3SNBKuiLJ5VgrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDFxIlEdBriVKzLFg+toEhvtH4BMB8GA1UdIwQY
MBaAFCfUBp4rOpP3ELlDDqZLDV7EFz/NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjlRR25pczZrX2NRdVVNT3Brc05Yc1FYUDgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8wMTYxNTYtMDkzZS00MDViLTliMmQt
YTU3NDlkMjM0NmU3LzEvSjlRR25pczZrX2NRdVVNT3Brc05Yc1FYUDgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8wMTYxNTYtMDkzZS00MDViLTliMmQtYTU3NDlkMjM0NmU3
LzEvSjlRR25pczZrX2NRdVVNT3Brc05Yc1FYUDgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHMVqddj
FeU01KL2dSTFpJ1AgSSCOalyG/cbWRlCG/3Li4yuPaVyYq2C+h9rX0q+SQtZ/rPE
hhKQJp5F4dfK6rqwJNklwF90SFKEOFigZTeFzlBzlHSQWUbBOXja/Hyaft7/Dd9o
Cy/VdRxUGxg0RRRL886sN8SYfTUuaNdsFWZ33hp1A/BoUo9naDMD0elVvXm3dNtX
zmKBQdo6cAq7sBm/UOFD4grBf1iufohCWkYJZcBI3MAVQb4RHo9F97zXmMThBIJO
USetj8AJ1R+/IkVglF2afR//BaWma6xDg0y92A2CQshqOEGg7Hb7cc6dTZg03eUV
xe0CHvFF11Kaug==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:30:24 2026 by rpki-client