Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier: Qo9DYia88FEqlMoV7u3TyypN8rwOvXqM+MHu0V+A+oc=
Subject key identifier: C8:13:87:A7:6A:3C:01:C2:A2:F6:E8:DE:6A:11:C4:78:B1:08:18:75
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 01A00281ED31BFE700D9043FF1E8906EDA23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number: 1A08
Signing time: Fri 14 Aug 2026 23:01:04 +0000
Manifest this update: Fri 14 Aug 2026 23:01:04 +0000
Manifest next update: Sat 15 Aug 2026 23:01:04 +0000
Files and hashes: 1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: CoBzzaOQPGpam7DJAXl1q9gGOZ2axQxWO+tMWnGR+rw=)
2: lSlG7rI2eJuiPKf-HzKcyhBPp1g.roa (hash: 53i2XoHaeuLLxKqYVRpE4lR9h2EBCgSQcRQiDH1i//M=)
3: scC5gNxexOD9_MYBJVYJT8pP6Ag.roa (hash: yC68S8mkaapsGvYB3k9kgiLL9Ie9a4V0LG7QX9QvJvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:ed:31:bf:e7:00:d9:04:3f:f1:e8:90:6e:da:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Aug 14 23:01:04 2026 GMT
Not After : Aug 15 23:01:04 2026 GMT
Subject: CN=c81387a76a3c01c2a2f6e8de6a11c478b1081875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:05:5f:b0:77:34:6c:ac:38:7e:04:85:fa:
f1:fc:95:d9:8e:63:59:86:cd:6e:e9:64:51:23:8f:
83:80:fa:35:92:11:19:47:66:c8:b5:73:e0:5f:e1:
cc:6e:48:0c:1b:cc:01:db:51:05:0e:25:2d:7b:09:
2f:84:e5:1c:67:da:4c:da:96:55:c3:2f:1a:1a:18:
99:2f:6f:68:f4:8c:bb:4e:5c:8b:76:50:b2:33:0c:
b9:a9:1b:eb:3a:7f:6c:25:02:60:f9:92:13:8f:3c:
66:39:99:3e:61:6c:93:fc:b8:70:f1:e1:20:e3:b3:
46:7c:63:9e:7c:0f:18:84:17:3a:38:1a:11:97:e9:
e4:66:8a:21:e7:e6:e0:d0:49:53:e9:09:d4:7c:17:
ba:e0:61:f4:a7:0d:1e:2c:c2:16:27:73:8c:4f:32:
c4:96:3a:a4:bd:33:3b:b1:65:8d:3a:91:57:b9:8f:
e0:e0:df:9b:8c:27:b4:41:26:4c:28:1a:da:69:c0:
75:b3:bd:80:fe:1f:ce:98:9c:4e:53:a5:dd:ca:79:
b7:f8:35:f7:f4:4f:49:e1:b5:df:88:72:6f:75:ae:
31:80:57:8e:dc:12:c4:3e:60:bc:62:87:17:c8:27:
26:7a:63:69:bc:4d:57:4b:be:80:ec:05:4c:60:30:
05:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:13:87:A7:6A:3C:01:C2:A2:F6:E8:DE:6A:11:C4:78:B1:08:18:75
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:dd:01:73:c7:29:b6:df:4a:9c:6f:6b:de:69:fc:91:3c:f3:
91:f4:df:6b:a2:3f:77:17:19:67:dd:0b:54:50:be:60:4a:af:
23:78:95:d9:d6:6f:c6:14:87:93:49:13:46:d3:c7:b2:25:db:
7d:60:b0:5f:0c:77:6f:d5:04:dd:76:35:23:37:3b:a9:b4:3c:
d4:a5:4c:38:d1:46:a3:b3:6c:80:38:70:f4:ca:e4:fe:ea:4c:
5a:c1:02:07:7c:2a:9a:bb:78:dd:d6:ba:c4:14:60:9c:25:b4:
88:75:48:38:72:67:dc:6f:de:8f:4f:90:21:a7:85:45:f7:e6:
36:b1:3c:65:73:5d:50:a7:69:e0:27:94:97:b6:be:b0:0c:7c:
b1:7f:67:f8:13:27:dc:60:f1:80:89:e9:1c:46:ff:21:5d:53:
be:a8:bd:ac:8a:6f:a4:d5:13:50:73:fe:8e:36:78:1f:4b:44:
9d:7f:43:8a:b2:ad:7d:cc:97:a8:4c:57:62:18:63:9a:20:6e:
5c:57:1e:4e:e9:d5:09:29:57:42:64:36:41:2a:97:26:87:0c:
14:71:d9:e1:9f:e0:97:a6:06:5e:22:eb:5e:8f:34:4d:46:69:
30:84:76:e2:11:d6:0f:e7:78:c6:31:4f:67:68:e4:d2:3d:b7:
fe:ae:b7:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACge0xv+cA2QQ/8eiQbtojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZGNmMjZmNzQ4NjA1ODhjYWM2YmFlMTdmOTlkZTIyZGJj
NDlhZTYwHhcNMjYwODE0MjMwMTA0WhcNMjYwODE1MjMwMTA0WjAzMTEwLwYDVQQD
EyhjODEzODdhNzZhM2MwMWMyYTJmNmU4ZGU2YTExYzQ3OGIxMDgxODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLgFX7B3NGysOH4Ehfrx/JXZjmNZ
hs1u6WRRI4+DgPo1khEZR2bItXPgX+HMbkgMG8wB21EFDiUtewkvhOUcZ9pM2pZV
wy8aGhiZL29o9Iy7TlyLdlCyMwy5qRvrOn9sJQJg+ZITjzxmOZk+YWyT/Lhw8eEg
47NGfGOefA8YhBc6OBoRl+nkZooh5+bg0ElT6QnUfBe64GH0pw0eLMIWJ3OMTzLE
ljqkvTM7sWWNOpFXuY/g4N+bjCe0QSZMKBraacB1s72A/h/OmJxOU6Xdynm3+DX3
9E9J4bXfiHJvda4xgFeO3BLEPmC8YocXyCcmemNpvE1XS76A7AVMYDAFGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgTh6dqPAHCovbo3moRxHixCBh1MB8GA1UdIwQY
MBaAFIzc8m90hgWIysa64X+Z3iLbxJrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kNWIxYTctNDY2ZC00NzFjLWE3MGMt
MmZiMjVhYmZkYzUzLzEvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9kNWIxYTctNDY2ZC00NzFjLWE3MGMtMmZiMjVhYmZkYzUz
LzEvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE90Bc8cp
tt9KnG9r3mn8kTzzkfTfa6I/dxcZZ90LVFC+YEqvI3iV2dZvxhSHk0kTRtPHsiXb
fWCwXwx3b9UE3XY1Izc7qbQ81KVMONFGo7NsgDhw9Mrk/upMWsECB3wqmrt43da6
xBRgnCW0iHVIOHJn3G/ej0+QIaeFRffmNrE8ZXNdUKdp4CeUl7a+sAx8sX9n+BMn
3GDxgInpHEb/IV1Tvqi9rIpvpNUTUHP+jjZ4H0tEnX9DirKtfcyXqExXYhhjmiBu
XFceTunVCSlXQmQ2QSqXJocMFHHZ4Z/gl6YGXiLrXo80TUZpMIR24hHWD+d4xjFP
Z2jk0j23/q63Ow==
-----END CERTIFICATE-----
Generated at Sat Aug 15 08:42:05 2026 by rpki-client