Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json)
Hash identifier: jgaai6gLt2FQSsWU1fBjEpp7M8rWNBu2IjIHLeyFPoc=
Subject key identifier: 84:2A:43:66:B5:5A:81:49:C2:3B:14:3E:90:6A:37:EA:19:0C:F0:F1
Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Certificate serial: 01A0897992EB0E88E432A23FAE7AA03AB3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
Manifest number: 153B
Signing time: Thu 10 Sep 2026 04:00:41 +0000
Manifest this update: Thu 10 Sep 2026 04:00:41 +0000
Manifest next update: Fri 11 Sep 2026 04:00:41 +0000
Files and hashes: 1: L24zb2GPwHD-aPGno9VtNYT_9UA.roa (hash: TV8bwr8KXxyIpZ3hz+LfUH4wszhJw0hokfRXNpqsBSk=)
2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: 68ZEQ/3qOx6zJ+XrfSVZldf5Venxntkc+obgX+X9Nro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:79:92:eb:0e:88:e4:32:a2:3f:ae:7a:a0:3a:b3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Validity
Not Before: Sep 10 04:00:41 2026 GMT
Not After : Sep 11 04:00:41 2026 GMT
Subject: CN=842a4366b55a8149c23b143e906a37ea190cf0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:13:0e:98:cd:3d:75:6f:3b:da:21:9f:3f:
c1:08:42:dd:a7:5a:a7:9b:c6:77:73:57:3b:da:67:
41:ae:6d:18:2d:29:63:79:3d:f5:ba:d3:32:c3:93:
72:db:68:0c:df:df:08:aa:a7:0d:c8:cf:99:fb:81:
92:ff:34:d7:68:b9:d3:f7:91:75:45:7b:43:6b:2f:
e6:05:2c:ef:df:3c:a5:5b:f7:36:0f:ae:13:2a:e0:
28:85:e0:09:5a:bb:d6:b6:b8:58:54:e8:b3:60:7f:
9a:62:06:e9:c8:8d:f7:de:db:13:9a:de:d6:c2:a3:
12:ac:70:7d:bf:f6:bb:92:bc:41:03:b3:83:d8:a6:
b7:05:d8:a1:3d:1d:51:0d:e8:c4:1f:1f:35:d7:41:
b7:cb:fc:db:13:54:78:c3:14:3e:bb:ad:17:b4:7b:
c2:e5:e0:76:c0:e3:62:ca:28:56:de:69:e6:0b:d7:
bc:22:43:a3:85:96:23:fb:f7:1d:07:83:43:4a:d7:
35:b1:0b:a2:15:ab:31:78:6b:54:39:80:f2:f1:83:
21:75:b7:e2:67:c9:69:c6:1c:36:fd:26:d2:06:07:
b3:07:f4:2f:a5:42:d3:6c:dd:e8:48:92:fc:d7:1c:
ec:c9:ce:9d:7c:22:5d:13:87:a3:20:b8:4f:15:a0:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2A:43:66:B5:5A:81:49:C2:3B:14:3E:90:6A:37:EA:19:0C:F0:F1
X509v3 Authority Key Identifier:
keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e9:f2:28:7a:f1:09:0c:bd:ac:35:55:56:34:94:36:e5:dd:
b9:98:72:64:63:1f:f9:30:25:9d:2c:7f:38:a7:fd:86:55:9b:
a8:06:f0:f9:fd:54:26:68:f5:91:06:16:a3:73:c8:8c:cb:38:
50:a3:17:3a:d3:62:9c:02:6c:3c:c9:a2:7a:f8:84:bf:ba:33:
b1:4b:cf:e4:95:aa:74:a4:1b:8f:91:28:54:3c:af:aa:c9:0d:
79:ca:d7:59:b9:ad:2b:e0:13:bd:48:f0:b5:eb:81:ec:e9:78:
4c:9c:49:96:6c:eb:f9:e6:32:b0:75:fe:a8:b8:5b:25:f5:47:
1b:65:90:95:32:c2:5b:1b:28:5f:b9:f2:cc:86:07:66:80:46:
59:58:f6:94:60:ae:16:da:52:f1:6b:db:68:86:18:bf:9e:e5:
05:49:aa:d9:a3:3b:58:1e:b0:44:cb:c5:e0:16:57:b2:8b:6f:
4b:85:e4:fc:97:c2:35:d2:6b:63:6a:e5:a6:0b:0c:b9:40:b9:
ec:93:94:47:bc:f3:49:82:9d:57:0b:82:4a:5b:bd:21:f3:cd:
1f:1f:20:2a:2c:02:f1:43:6e:da:1c:ea:0a:3c:b1:46:d6:39:
5a:20:38:3e:c9:a2:c3:74:ef:ee:c1:b1:08:42:76:7e:8f:65:
a9:66:b5:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJeZLrDojkMqI/rnqgOrPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlODk1ZjFlMjcwYzYzNWVjNjFkZjlhOTdmYzBmNjY4YzBh
OGY1NDgwHhcNMjYwOTEwMDQwMDQxWhcNMjYwOTExMDQwMDQxWjAzMTEwLwYDVQQD
Eyg4NDJhNDM2NmI1NWE4MTQ5YzIzYjE0M2U5MDZhMzdlYTE5MGNmMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz4TDpjNPXVvO9ohnz/BCELdp1qn
m8Z3c1c72mdBrm0YLSljeT31utMyw5Ny22gM398IqqcNyM+Z+4GS/zTXaLnT95F1
RXtDay/mBSzv3zylW/c2D64TKuAoheAJWrvWtrhYVOizYH+aYgbpyI333tsTmt7W
wqMSrHB9v/a7krxBA7OD2Ka3BdihPR1RDejEHx8110G3y/zbE1R4wxQ+u60XtHvC
5eB2wONiyihW3mnmC9e8IkOjhZYj+/cdB4NDStc1sQuiFasxeGtUOYDy8YMhdbfi
Z8lpxhw2/SbSBgezB/QvpULTbN3oSJL81xzsyc6dfCJdE4ejILhPFaBESwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQqQ2a1WoFJwjsUPpBqN+oZDPDxMB8GA1UdIwQY
MBaAFI6JXx4nDGNexh35qX/A9mjAqPVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam9sZkhpY01ZMTdHSGZtcGY4RDJhTUNvOVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iYzUzZDItOTEzNy00Nzk5LTllNDEt
ZTY5YTAxNzQ4NWZiLzEvam9sZkhpY01ZMTdHSGZtcGY4RDJhTUNvOVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9iYzUzZDItOTEzNy00Nzk5LTllNDEtZTY5YTAxNzQ4NWZi
LzEvam9sZkhpY01ZMTdHSGZtcGY4RDJhTUNvOVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMunyKHrx
CQy9rDVVVjSUNuXduZhyZGMf+TAlnSx/OKf9hlWbqAbw+f1UJmj1kQYWo3PIjMs4
UKMXOtNinAJsPMmieviEv7ozsUvP5JWqdKQbj5EoVDyvqskNecrXWbmtK+ATvUjw
teuB7Ol4TJxJlmzr+eYysHX+qLhbJfVHG2WQlTLCWxsoX7nyzIYHZoBGWVj2lGCu
FtpS8WvbaIYYv57lBUmq2aM7WB6wRMvF4BZXsotvS4Xk/JfCNdJrY2rlpgsMuUC5
7JOUR7zzSYKdVwuCSlu9IfPNHx8gKiwC8UNu2hzqCjyxRtY5WiA4Psmiw3Tv7sGx
CEJ2fo9lqWa17g==
-----END CERTIFICATE-----
Generated at Thu Sep 10 09:36:56 2026 by rpki-client