Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
File: jLz5N0OA69GF0hGPVRyFWa4jNUE.mft (raw, json)
Hash identifier: keg0gr2kVD6366tDwaEwXIJxJZqp+cZWVCPW9Rgob+Y=
Subject key identifier: CF:0E:C9:E9:82:FD:04:43:D4:9F:64:DA:E2:28:C7:83:42:7A:E8:9D
Authority key identifier: 8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
Certificate issuer: /CN=8cbcf9374380ebd185d2118f551c8559ae233541
Certificate serial: 01A00213A402618BEB61DA2C6665CD66340F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
Manifest number: 0FE5
Signing time: Fri 14 Aug 2026 21:00:36 +0000
Manifest this update: Fri 14 Aug 2026 21:00:36 +0000
Manifest next update: Sat 15 Aug 2026 21:00:36 +0000
Files and hashes: 1: L2W5oJj2sIZeOCADA_xFuQfAn7Q.roa (hash: upS3aOnw/wQ7yjWNv575VRnG3gYRLnA5O/bTU3MDbbk=)
2: jLz5N0OA69GF0hGPVRyFWa4jNUE.crl (hash: hY9RrcPw8PqSlafxmU3WuoyBCSaNdjOjUv1G2eEi/fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:a4:02:61:8b:eb:61:da:2c:66:65:cd:66:34:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbcf9374380ebd185d2118f551c8559ae233541
Validity
Not Before: Aug 14 21:00:36 2026 GMT
Not After : Aug 15 21:00:36 2026 GMT
Subject: CN=cf0ec9e982fd0443d49f64dae228c783427ae89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:e7:ea:9c:0f:3e:49:64:36:9e:74:22:e8:
45:18:97:ca:d3:20:49:b0:a2:f1:0a:51:00:f6:f4:
20:59:04:d3:61:e5:c5:3d:c0:b9:95:92:24:a0:88:
cc:eb:c4:3b:67:68:6c:7c:42:fb:14:e2:6b:58:6a:
d9:bb:5d:80:27:72:fb:23:0f:f2:90:e1:aa:d9:38:
44:b6:3d:55:11:f7:72:02:e8:2c:50:60:67:d1:9e:
d3:a8:34:2e:f3:6b:8e:85:d2:72:33:60:6f:ed:79:
35:10:1e:7d:7a:74:79:a3:1f:a9:82:49:0e:39:bc:
49:45:44:eb:bc:33:91:77:47:25:e8:b3:f1:19:5a:
4a:e1:c0:f1:a3:6c:1a:20:6b:37:cd:14:3e:6f:6d:
3b:25:5d:fb:83:ae:f3:a0:cd:52:4a:bf:a3:23:7c:
fe:82:1f:b4:1a:52:f5:e4:21:57:82:bf:cd:8c:ed:
f4:c5:d5:8b:ef:a4:b0:df:6d:34:ba:68:35:78:ae:
81:f4:11:fa:ed:d5:e7:45:90:22:10:53:5c:02:c9:
24:e5:4a:04:28:59:ce:f9:13:39:96:58:8e:28:9e:
4d:0a:df:66:72:bb:41:80:86:21:1c:f5:db:4a:03:
12:30:56:d6:ff:aa:94:f3:ae:c1:29:a5:78:ba:fc:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0E:C9:E9:82:FD:04:43:D4:9F:64:DA:E2:28:C7:83:42:7A:E8:9D
X509v3 Authority Key Identifier:
keyid:8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9b:dc:69:fa:c7:01:c8:ca:66:46:60:32:f7:74:54:47:ca:
39:01:e3:64:b2:5c:d1:d9:e3:fc:95:2b:84:49:03:fe:3c:9c:
d5:f9:ab:77:60:02:79:c4:18:c9:e6:3f:9e:ba:a5:87:ba:61:
bd:29:0f:59:b8:a5:ff:00:6b:c3:13:a2:61:ab:32:c7:1b:c4:
ca:c1:a1:ed:38:e6:15:c8:b7:41:bc:f0:8d:59:76:0b:f8:fe:
e5:9e:13:17:b7:62:45:c9:ba:74:2b:de:db:90:71:2c:af:6c:
26:34:48:83:c2:0e:63:6a:36:b6:f8:3d:71:1f:d1:5b:ed:d6:
8c:8a:a2:e3:3d:91:d8:db:c7:72:ed:2d:d4:80:fb:e6:99:48:
ae:b4:8b:51:19:cf:08:db:60:26:f4:c1:5f:a7:d8:d7:d9:de:
2f:fd:34:d0:44:c1:a6:a0:37:1c:7a:65:11:e3:52:6f:ef:48:
ad:b5:a6:65:e5:95:f9:c7:b6:cb:bd:58:7c:c0:e1:9c:87:53:
15:a9:95:5c:d7:d6:65:82:c9:40:8a:d3:64:d8:32:d2:ee:75:
cf:98:1a:5b:94:e0:69:6a:65:19:9f:b6:50:8e:c1:f5:e8:25:
a4:7a:76:8e:5e:0c:ff:b2:94:42:83:52:3d:2e:ae:b0:de:5b:
0d:91:7e:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACE6QCYYvrYdosZmXNZjQPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjYmNmOTM3NDM4MGViZDE4NWQyMTE4ZjU1MWM4NTU5YWUy
MzM1NDEwHhcNMjYwODE0MjEwMDM2WhcNMjYwODE1MjEwMDM2WjAzMTEwLwYDVQQD
EyhjZjBlYzllOTgyZmQwNDQzZDQ5ZjY0ZGFlMjI4Yzc4MzQyN2FlODlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPjn6pwPPklkNp50IuhFGJfK0yBJ
sKLxClEA9vQgWQTTYeXFPcC5lZIkoIjM68Q7Z2hsfEL7FOJrWGrZu12AJ3L7Iw/y
kOGq2ThEtj1VEfdyAugsUGBn0Z7TqDQu82uOhdJyM2Bv7Xk1EB59enR5ox+pgkkO
ObxJRUTrvDORd0cl6LPxGVpK4cDxo2waIGs3zRQ+b207JV37g67zoM1SSr+jI3z+
gh+0GlL15CFXgr/NjO30xdWL76Sw3200umg1eK6B9BH67dXnRZAiEFNcAskk5UoE
KFnO+RM5lliOKJ5NCt9mcrtBgIYhHPXbSgMSMFbW/6qU867BKaV4uvy8bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8OyemC/QRD1J9k2uIox4NCeuidMB8GA1UdIwQY
MBaAFIy8+TdDgOvRhdIRj1UchVmuIzVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakx6NU4wT0E2OUdGMGhHUFZSeUZXYTRqTlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OWExZjAtNjlkYy00YzEzLWI5N2It
MzUyMDNkNmIwZDU3LzEvakx6NU4wT0E2OUdGMGhHUFZSeUZXYTRqTlVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC84OWExZjAtNjlkYy00YzEzLWI5N2ItMzUyMDNkNmIwZDU3
LzEvakx6NU4wT0E2OUdGMGhHUFZSeUZXYTRqTlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJvcafrH
AcjKZkZgMvd0VEfKOQHjZLJc0dnj/JUrhEkD/jyc1fmrd2ACecQYyeY/nrqlh7ph
vSkPWbil/wBrwxOiYasyxxvEysGh7TjmFci3QbzwjVl2C/j+5Z4TF7diRcm6dCve
25BxLK9sJjRIg8IOY2o2tvg9cR/RW+3WjIqi4z2R2NvHcu0t1ID75plIrrSLURnP
CNtgJvTBX6fY19neL/000ETBpqA3HHplEeNSb+9IrbWmZeWV+ce2y71YfMDhnIdT
FamVXNfWZYLJQIrTZNgy0u51z5gaW5TgaWplGZ+2UI7B9eglpHp2jl4M/7KUQoNS
PS6usN5bDZF+UQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:00:24 2026 by rpki-client