Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
File: j5h_qG-uztjKekRir38AXqsneag.mft (raw, json)
Hash identifier: Leq7rfsjzmaJG4kHhaZVKiA7THcdfvumfxUTNsBtjTg=
Subject key identifier: 2A:66:22:D3:8D:2F:75:8B:22:FB:18:A1:56:08:56:3B:09:AD:C3:A0
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial: 01A0D9F130BC400A681BC7013B14D80E8316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
Manifest number: 1152
Signing time: Fri 25 Sep 2026 19:00:57 +0000
Manifest this update: Fri 25 Sep 2026 19:00:57 +0000
Manifest next update: Sat 26 Sep 2026 19:00:57 +0000
Files and hashes: 1: S3xjSwjayGWQbrifgsC5G7Sh0Xg.roa (hash: tQnt0AxldpTLTefUEnKzHOLj+HzmMNDMI0YZ04Hh8vg=)
2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: Pd87uWSt6Gf+X0owxKq2+f9dKkmN5ul75aZsxnyoFWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:30:bc:40:0a:68:1b:c7:01:3b:14:d8:0e:83:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Validity
Not Before: Sep 25 19:00:57 2026 GMT
Not After : Sep 26 19:00:57 2026 GMT
Subject: CN=2a6622d38d2f758b22fb18a15608563b09adc3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:a4:33:b1:44:86:2e:1f:5e:c7:d4:c3:43:
f6:3b:b1:34:4d:7d:69:30:14:b0:e5:c0:dd:19:87:
a8:0f:0b:c3:cf:3d:24:1f:0d:01:e7:84:0e:81:03:
06:fc:9a:6d:0b:66:4c:63:e0:0a:b5:c8:84:8f:a6:
8e:41:2d:a5:29:d8:9a:19:16:27:c8:9a:06:7f:94:
21:5f:b7:4d:28:d1:9f:6a:23:74:0a:a3:23:ab:a2:
c1:35:89:16:70:03:17:a3:97:0b:e3:0c:c5:3b:cd:
ae:83:86:0b:a1:82:9b:2e:8a:58:c8:05:d3:59:70:
d3:db:d8:57:38:ea:1e:be:43:17:05:5d:2f:a9:49:
17:1c:5b:49:3b:59:e4:85:b0:6f:18:e9:ec:ab:02:
77:9b:60:25:3d:d4:a3:6c:60:f6:58:0f:6d:24:46:
f3:20:63:52:11:b4:99:2b:80:03:3a:a9:24:f5:29:
b1:cd:4e:f5:3d:85:7c:db:3a:0b:d7:07:cc:4f:86:
56:cd:39:bf:4c:a3:64:67:8b:70:60:36:24:d9:4a:
5e:57:d6:81:7b:79:9b:13:6a:ab:b1:f3:59:1e:49:
97:02:5b:64:d0:ed:78:9b:84:0d:4c:65:d6:65:dc:
e4:5d:2a:17:58:4e:e9:8d:ba:12:b4:bf:34:5b:69:
1f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:66:22:D3:8D:2F:75:8B:22:FB:18:A1:56:08:56:3B:09:AD:C3:A0
X509v3 Authority Key Identifier:
keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9b:b6:07:13:74:cd:0a:37:9a:1c:43:8e:17:50:61:94:b9:
c8:56:93:43:2a:27:80:6c:8c:5e:d0:19:75:b9:f9:d2:05:83:
26:c6:93:d4:c1:ad:7e:48:97:9a:93:b1:a5:24:d0:e8:e4:39:
40:18:8f:17:76:71:fc:6a:71:7c:f3:8b:f6:66:c6:04:33:f9:
76:10:04:4e:b5:fc:c9:f8:0d:4b:1b:78:6e:62:2e:5d:15:14:
0b:53:0e:86:aa:7a:0c:39:29:fa:7a:d0:55:ce:73:f1:85:1d:
8b:e0:85:bd:88:f7:e0:24:28:1c:ed:0f:81:d5:f9:0c:a5:09:
53:5a:06:86:e1:86:08:12:1d:7e:18:e8:c9:f4:b3:af:5a:14:
91:15:79:b0:9a:e8:40:46:a1:45:14:5c:e0:6d:56:e0:2d:cd:
cb:3f:31:20:61:56:28:1f:3a:27:9a:b2:2a:4a:b0:cd:d9:7f:
8f:75:bf:76:8e:dc:aa:69:32:21:3a:84:8d:a1:3c:69:d5:cf:
38:97:f3:e3:bc:f1:e9:1c:2a:c5:97:ce:0b:8a:94:3d:ff:fd:
02:ae:9d:80:43:9e:66:4b:9a:10:96:55:95:68:c6:e6:a1:d4:
45:1d:61:6a:38:8c:db:c5:36:06:9d:ff:2d:13:c2:55:9c:5c:
07:22:12:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZ8TC8QApoG8cBOxTYDoMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOTg3ZmE4NmZhZWNlZDhjYTdhNDQ2MmFmN2YwMDVlYWIy
Nzc5YTgwHhcNMjYwOTI1MTkwMDU3WhcNMjYwOTI2MTkwMDU3WjAzMTEwLwYDVQQD
EygyYTY2MjJkMzhkMmY3NThiMjJmYjE4YTE1NjA4NTYzYjA5YWRjM2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLSkM7FEhi4fXsfUw0P2O7E0TX1p
MBSw5cDdGYeoDwvDzz0kHw0B54QOgQMG/JptC2ZMY+AKtciEj6aOQS2lKdiaGRYn
yJoGf5QhX7dNKNGfaiN0CqMjq6LBNYkWcAMXo5cL4wzFO82ug4YLoYKbLopYyAXT
WXDT29hXOOoevkMXBV0vqUkXHFtJO1nkhbBvGOnsqwJ3m2AlPdSjbGD2WA9tJEbz
IGNSEbSZK4ADOqkk9SmxzU71PYV82zoL1wfMT4ZWzTm/TKNkZ4twYDYk2UpeV9aB
e3mbE2qrsfNZHkmXAltk0O14m4QNTGXWZdzkXSoXWE7pjboStL80W2kfOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpmItONL3WLIvsYoVYIVjsJrcOgMB8GA1UdIwQY
MBaAFI+Yf6hvrs7YynpEYq9/AF6rJ3moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAt
NmY2YzZjODIxNzgxLzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAtNmY2YzZjODIxNzgx
LzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJu2BxN0
zQo3mhxDjhdQYZS5yFaTQyongGyMXtAZdbn50gWDJsaT1MGtfkiXmpOxpSTQ6OQ5
QBiPF3Zx/GpxfPOL9mbGBDP5dhAETrX8yfgNSxt4bmIuXRUUC1MOhqp6DDkp+nrQ
Vc5z8YUdi+CFvYj34CQoHO0PgdX5DKUJU1oGhuGGCBIdfhjoyfSzr1oUkRV5sJro
QEahRRRc4G1W4C3Nyz8xIGFWKB86J5qyKkqwzdl/j3W/do7cqmkyITqEjaE8adXP
OJfz47zx6RwqxZfOC4qUPf/9Aq6dgEOeZkuaEJZVlWjG5qHURR1hajiM28U2Bp3/
LRPCVZxcByISZQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:46:31 2026 by rpki-client