Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
File: JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json)
Hash identifier: p0c5gsAuNs3f7tmwRJE6bWa5LiRIXGJCKQxc6XS+OCg=
Subject key identifier: 85:9B:8B:3C:95:63:B2:F1:9C:58:E7:9F:73:3F:2B:2C:90:01:ED:29
Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
Certificate issuer: /CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Certificate serial: 01A102ED5AB49DDBE21DB52FB31EB82A276E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
Manifest number: 04BA
Signing time: Sat 03 Oct 2026 18:01:11 +0000
Manifest this update: Sat 03 Oct 2026 18:01:11 +0000
Manifest next update: Sun 04 Oct 2026 18:01:11 +0000
Files and hashes: 1: D17eb-YaN69zmYAWu9of4KG5E8Y.roa (hash: stGJZzeKt4km6Sv/uUT+Q3OWclxmp1dOYGAe5XGVe2w=)
2: FZgi84RMvT9_2vE42FDuM9M6yQo.roa (hash: MWv0A+a3Hv1l7nsYC0PKMV2mBEaDOEQF7nbo1KN1I5Q=)
3: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: bOIKx1Knf1/nskHQYHqqQNLne4gse9Yju64YideUwNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:ed:5a:b4:9d:db:e2:1d:b5:2f:b3:1e:b8:2a:27:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Validity
Not Before: Oct 3 18:01:11 2026 GMT
Not After : Oct 4 18:01:11 2026 GMT
Subject: CN=859b8b3c9563b2f19c58e79f733f2b2c9001ed29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:27:ae:1d:70:7d:38:78:c0:78:8d:1c:8d:2e:
b4:98:21:33:1f:11:b7:d7:f3:a2:98:bd:2c:87:69:
e4:32:ba:7c:24:d4:87:cb:30:bd:6d:ff:3b:6b:1f:
d4:60:c9:7d:54:cd:b1:d2:1a:05:a0:af:6d:a8:92:
2b:af:30:ba:18:71:e5:17:45:3a:56:0c:cc:6e:5d:
57:68:2c:de:6e:dc:78:e0:52:55:01:fb:dc:47:6e:
08:af:ee:b9:4b:fc:68:68:eb:8f:67:08:cd:47:fc:
ce:01:ea:06:8a:7e:87:b7:65:3f:de:2d:9b:f9:d8:
1f:e6:a3:97:52:51:fc:49:3d:d9:66:2c:77:6d:e8:
a3:7b:ee:68:67:99:96:d9:fb:bc:0c:7e:d0:c6:d3:
d6:2b:4f:47:e9:13:60:c9:4f:dc:68:e0:8c:33:73:
10:2c:9f:1b:3c:16:ff:c5:a4:9e:14:a9:54:ba:32:
a8:77:c1:6c:8a:09:bb:f2:f5:9f:31:a8:3c:46:61:
c9:49:12:1c:7d:72:ba:83:6f:73:65:50:76:a4:ea:
eb:d2:c9:fc:da:83:6e:b7:26:d6:8a:a3:a6:de:2c:
02:fb:2e:7f:82:08:a6:46:00:9b:bb:b4:c2:4e:78:
2d:e1:5b:0a:ca:ef:ae:18:34:15:0d:82:33:49:68:
b4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9B:8B:3C:95:63:B2:F1:9C:58:E7:9F:73:3F:2B:2C:90:01:ED:29
X509v3 Authority Key Identifier:
keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e4:5f:f5:27:52:a8:e9:ea:e0:c1:cb:e3:68:a2:f0:a5:ac:
03:45:cf:3d:7b:8c:21:58:40:26:5c:c6:72:24:22:dc:ad:8e:
1b:be:d6:a2:90:2f:ca:7a:2a:b3:98:44:ee:84:31:b5:c1:38:
77:40:c4:aa:5a:db:83:c3:57:fb:ed:b0:5b:51:3e:0a:6b:ad:
f7:32:73:d8:24:e0:5a:fb:cc:da:a0:b2:41:f3:61:4e:3f:1c:
0a:95:73:b8:66:47:49:7b:41:c0:b7:20:8a:87:7b:d4:5d:28:
cc:0b:09:68:81:fb:c4:a1:24:22:9e:bd:4b:25:8b:35:02:61:
b1:11:ac:9d:c6:3e:d7:df:f1:e4:c8:e1:3f:43:c9:3a:1a:ff:
33:f9:f9:7e:51:4f:0b:22:1a:53:d2:52:63:59:4f:33:16:27:
c4:b8:21:fc:48:12:0b:b6:77:64:45:d2:76:34:d0:2a:e8:cb:
63:4d:c8:45:85:b3:b3:8c:50:5b:b7:55:34:ae:bf:fc:4b:6d:
6e:94:4f:70:e8:49:6e:d2:55:d7:95:43:19:f8:87:da:d7:1e:
6d:21:2b:c9:3a:85:75:13:b7:4c:02:20:2d:8c:01:ec:4e:b4:
12:7f:0c:57:fd:08:bf:02:e0:b2:b7:b4:90:d4:b9:c9:7b:89:
7b:7b:28:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEC7Vq0ndviHbUvsx64KiduMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NWRlNjVmMzc1MTVkZjhjYzI0MmYzNmRiYmVmMzIwYzZk
OTBiNGYwHhcNMjYxMDAzMTgwMTExWhcNMjYxMDA0MTgwMTExWjAzMTEwLwYDVQQD
Eyg4NTliOGIzYzk1NjNiMmYxOWM1OGU3OWY3MzNmMmIyYzkwMDFlZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCeuHXB9OHjAeI0cjS60mCEzHxG3
1/OimL0sh2nkMrp8JNSHyzC9bf87ax/UYMl9VM2x0hoFoK9tqJIrrzC6GHHlF0U6
VgzMbl1XaCzebtx44FJVAfvcR24Ir+65S/xoaOuPZwjNR/zOAeoGin6Ht2U/3i2b
+dgf5qOXUlH8ST3ZZix3beije+5oZ5mW2fu8DH7QxtPWK09H6RNgyU/caOCMM3MQ
LJ8bPBb/xaSeFKlUujKod8Fsigm78vWfMag8RmHJSRIcfXK6g29zZVB2pOrr0sn8
2oNutybWiqOm3iwC+y5/ggimRgCbu7TCTngt4VsKyu+uGDQVDYIzSWi0mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWbizyVY7LxnFjnn3M/KyyQAe0pMB8GA1UdIwQY
MBaAFCRd5l83UV34zCQvNtu+8yDG2QtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mNmUwOTktOWI2NC00MDQxLTlkMTkt
MzE3Mjc5ODE4YWNjLzEvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9mNmUwOTktOWI2NC00MDQxLTlkMTktMzE3Mjc5ODE4YWNj
LzEvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeRf9SdS
qOnq4MHL42ii8KWsA0XPPXuMIVhAJlzGciQi3K2OG77WopAvynoqs5hE7oQxtcE4
d0DEqlrbg8NX++2wW1E+Cmut9zJz2CTgWvvM2qCyQfNhTj8cCpVzuGZHSXtBwLcg
iod71F0ozAsJaIH7xKEkIp69SyWLNQJhsRGsncY+19/x5MjhP0PJOhr/M/n5flFP
CyIaU9JSY1lPMxYnxLgh/EgSC7Z3ZEXSdjTQKujLY03IRYWzs4xQW7dVNK6//Ett
bpRPcOhJbtJV15VDGfiH2tcebSEryTqFdRO3TAIgLYwB7E60En8MV/0IvwLgsre0
kNS5yXuJe3soJA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 06:10:02 2026 by rpki-client