Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
File: jbK0TyPcypwGBL7WkPKKatkBeZk.mft (raw, json)
Hash identifier: IfrJlmGtKm+1iwtl9p60Qnq8OUlyjJmAdTmRMq6bhfk=
Subject key identifier: 68:79:2B:F9:FE:5F:B8:72:43:5E:18:30:B3:F1:4A:20:71:77:3B:53
Authority key identifier: 8D:B2:B4:4F:23:DC:CA:9C:06:04:BE:D6:90:F2:8A:6A:D9:01:79:99
Certificate issuer: /CN=8db2b44f23dcca9c0604bed690f28a6ad9017999
Certificate serial: 01A08A8D6A9D423621E005A3E92A04DFC306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
Manifest number: 0328
Signing time: Thu 10 Sep 2026 09:01:58 +0000
Manifest this update: Thu 10 Sep 2026 09:01:58 +0000
Manifest next update: Fri 11 Sep 2026 09:01:58 +0000
Files and hashes: 1: H60TaHzgzIDq5bEuHBb2yyowYNw.roa (hash: MUV9kznaIpAsdXMNwJm4Ji4yLC8b4zqE7vuFtiUPGnQ=)
2: jbK0TyPcypwGBL7WkPKKatkBeZk.crl (hash: NrzTSm8LMxAVbLthRn6KSMKPbxNmqe45y36ARuA2xck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:6a:9d:42:36:21:e0:05:a3:e9:2a:04:df:c3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db2b44f23dcca9c0604bed690f28a6ad9017999
Validity
Not Before: Sep 10 09:01:58 2026 GMT
Not After : Sep 11 09:01:58 2026 GMT
Subject: CN=68792bf9fe5fb872435e1830b3f14a2071773b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:07:d9:5d:c0:8a:94:6d:36:1e:82:28:16:
d1:91:72:0b:2f:03:6c:2d:27:c4:8b:ce:e8:7d:0b:
75:8e:08:12:7f:db:a7:cf:ec:74:60:56:f9:cb:9e:
da:b6:69:15:07:3a:e2:14:d6:e6:7a:d2:0b:9f:27:
31:95:82:d1:00:43:0b:1a:28:76:4f:91:b2:79:e7:
aa:59:78:4b:90:72:9b:c5:56:35:a3:4e:33:da:35:
a0:9e:40:fe:74:b1:6e:21:25:70:98:d6:f5:71:97:
b6:86:73:f4:d0:e3:02:67:52:85:dc:04:82:0d:e5:
e8:6f:20:c1:5f:33:b7:30:60:de:21:1a:99:e6:11:
b9:40:63:49:29:67:fe:81:f4:3a:27:70:71:23:32:
16:82:e0:8a:19:de:2e:bb:d5:86:04:5f:d7:a1:c1:
cb:19:0f:63:83:7b:d6:d8:2d:dd:dc:28:e2:9b:0f:
78:93:06:b5:4a:72:c1:4f:06:83:dd:bb:14:c6:d8:
13:83:16:89:9b:bc:d8:ae:7c:d6:fa:88:3b:51:42:
50:73:9b:6b:b5:fd:f7:5e:9f:b8:f4:ac:25:87:d7:
08:55:9b:b4:62:89:78:dd:61:bb:82:0d:4a:d8:b0:
3d:3f:12:1e:e4:66:72:27:4f:8c:ad:e4:bb:d9:2c:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:79:2B:F9:FE:5F:B8:72:43:5E:18:30:B3:F1:4A:20:71:77:3B:53
X509v3 Authority Key Identifier:
keyid:8D:B2:B4:4F:23:DC:CA:9C:06:04:BE:D6:90:F2:8A:6A:D9:01:79:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d0:6a:83:d0:52:44:cf:74:57:89:ae:51:91:48:24:d1:af:
39:e3:54:a1:e3:d3:ae:d3:8f:8d:1a:fa:94:92:5b:f3:2d:93:
fb:8b:03:c5:09:9a:76:f7:88:98:38:0f:29:fd:24:4f:37:dd:
ed:3b:23:ce:a0:fc:9a:33:3c:ca:04:dd:c9:e5:4e:db:3b:24:
7e:73:d0:34:24:c1:a6:d0:b0:c8:01:71:8d:ae:90:cf:0f:07:
5b:8d:56:47:39:ce:89:5a:aa:5b:97:49:f5:1c:82:7e:ba:2a:
08:be:36:3a:ce:3a:51:cb:50:b7:e2:a4:29:44:74:a7:1b:5c:
b2:b4:80:71:68:1e:04:30:47:7f:e7:44:91:ed:72:cf:be:49:
ae:18:d4:11:34:12:04:7b:00:98:11:f5:13:2c:9a:58:74:d9:
13:19:1b:14:97:8c:cc:7c:3c:1d:3d:0e:d1:95:34:39:f2:39:
cb:3f:95:fb:af:e9:66:64:9a:51:51:ef:01:7c:9c:20:40:66:
d3:85:59:8c:3b:71:8b:b7:da:5f:3a:1d:00:d6:06:56:57:4b:
f9:37:a5:32:8a:89:dc:34:5c:60:27:ee:a5:09:de:5d:ce:44:
90:ce:f4:80:f7:13:a2:74:95:67:52:a8:8f:f2:45:f1:81:a4:
e4:6a:52:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjWqdQjYh4AWj6SoE38MGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYjJiNDRmMjNkY2NhOWMwNjA0YmVkNjkwZjI4YTZhZDkw
MTc5OTkwHhcNMjYwOTEwMDkwMTU4WhcNMjYwOTExMDkwMTU4WjAzMTEwLwYDVQQD
Eyg2ODc5MmJmOWZlNWZiODcyNDM1ZTE4MzBiM2YxNGEyMDcxNzczYjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR0H2V3AipRtNh6CKBbRkXILLwNs
LSfEi87ofQt1jggSf9unz+x0YFb5y57atmkVBzriFNbmetILnycxlYLRAEMLGih2
T5GyeeeqWXhLkHKbxVY1o04z2jWgnkD+dLFuISVwmNb1cZe2hnP00OMCZ1KF3ASC
DeXobyDBXzO3MGDeIRqZ5hG5QGNJKWf+gfQ6J3BxIzIWguCKGd4uu9WGBF/XocHL
GQ9jg3vW2C3d3Cjimw94kwa1SnLBTwaD3bsUxtgTgxaJm7zYrnzW+og7UUJQc5tr
tf33Xp+49Kwlh9cIVZu0Yol43WG7gg1K2LA9PxIe5GZyJ0+MreS72SxbZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGh5K/n+X7hyQ14YMLPxSiBxdztTMB8GA1UdIwQY
MBaAFI2ytE8j3MqcBgS+1pDyimrZAXmZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamJLMFR5UGN5cHdHQkw3V2tQS0thdGtCZVprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yMjdiNTMtNDczZC00NmFmLTgyMDEt
OThlODc5ZWEzNzI2LzEvamJLMFR5UGN5cHdHQkw3V2tQS0thdGtCZVprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yMjdiNTMtNDczZC00NmFmLTgyMDEtOThlODc5ZWEzNzI2
LzEvamJLMFR5UGN5cHdHQkw3V2tQS0thdGtCZVprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9Bqg9BS
RM90V4muUZFIJNGvOeNUoePTrtOPjRr6lJJb8y2T+4sDxQmadveImDgPKf0kTzfd
7TsjzqD8mjM8ygTdyeVO2zskfnPQNCTBptCwyAFxja6Qzw8HW41WRznOiVqqW5dJ
9RyCfroqCL42Os46UctQt+KkKUR0pxtcsrSAcWgeBDBHf+dEke1yz75JrhjUETQS
BHsAmBH1EyyaWHTZExkbFJeMzHw8HT0O0ZU0OfI5yz+V+6/pZmSaUVHvAXycIEBm
04VZjDtxi7faXzodANYGVldL+TelMoqJ3DRcYCfupQneXc5EkM70gPcTonSVZ1Ko
j/JF8YGk5GpSGg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:48:35 2026 by rpki-client