Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: TTHgdJOzZ5hdP8QT/6EjGPV+ZuYqlmIqMLg6Bm54Hl4=
Subject key identifier: 38:61:15:81:ED:4B:E7:A6:5E:0F:0F:7F:97:EE:9B:1A:2A:D0:44:89
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 01A001DD57D929CE5746D24730E47625EF13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 185B
Signing time: Fri 14 Aug 2026 20:01:18 +0000
Manifest this update: Fri 14 Aug 2026 20:01:18 +0000
Manifest next update: Sat 15 Aug 2026 20:01:18 +0000
Files and hashes: 1: 6H-9AoNqSrBI_cHU_8jwycSpvuQ.roa (hash: KiQDrwuKHeqxHDHuFUTDtaD1ZiwMGGrMOy/IRx+eThE=)
2: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: JIAodFFtBL12fc7QCuQmGiqLVw7La7MkmzZfLMyomcs=)
3: _zWse9VeR2Ks8Tmud0pKUxt54Rs.roa (hash: nVGx0eRXA+P6cmYQPgwiiD4iTa2vIfOtyuiTU3+mtfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:57:d9:29:ce:57:46:d2:47:30:e4:76:25:ef:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: Aug 14 20:01:18 2026 GMT
Not After : Aug 15 20:01:18 2026 GMT
Subject: CN=38611581ed4be7a65e0f0f7f97ee9b1a2ad04489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:d4:ab:c7:c4:ca:54:71:d0:3d:9e:98:1a:
ca:ac:80:b2:db:2c:0b:b4:3f:4c:a3:0d:22:ad:0c:
c6:c9:cd:aa:0d:17:4a:35:f8:fc:d1:d0:0a:13:be:
1f:1c:c7:88:fd:35:af:23:0f:72:57:34:b9:97:01:
69:f4:75:81:f0:ae:44:40:b7:1c:90:70:85:c9:90:
06:3c:bc:74:75:3d:2f:6e:0e:db:35:69:96:d6:11:
23:1b:51:6c:6c:1e:a2:a8:25:2f:51:07:81:78:e7:
d8:ef:a6:20:79:a8:70:51:be:ec:75:35:dd:c1:e3:
e8:64:ad:ce:e7:af:d5:c2:34:6f:fd:12:78:2a:3e:
1a:cc:04:68:62:39:84:f0:da:10:9c:be:5e:b8:2f:
c4:ab:48:98:49:2b:63:f7:9c:8d:28:49:74:a7:a5:
62:18:3b:46:ed:75:03:50:58:06:65:22:e5:e2:cf:
4c:d2:f1:87:88:88:a8:90:7a:fb:5d:ce:18:68:e7:
5d:2a:a7:7f:a0:4c:0f:41:48:2a:a7:e8:98:2d:9e:
bf:22:be:61:f3:60:d7:16:c2:a5:c2:64:ba:bc:5f:
db:56:a7:ca:ea:de:cd:ba:89:08:68:6e:b0:d1:95:
8c:ef:c9:38:75:61:03:b1:6f:fa:6f:82:79:29:7e:
42:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:61:15:81:ED:4B:E7:A6:5E:0F:0F:7F:97:EE:9B:1A:2A:D0:44:89
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fd:98:c9:a6:89:17:75:b6:e7:4d:ee:ed:42:0c:6a:15:73:
28:cd:58:03:30:79:57:ce:74:f1:01:e4:2e:f5:2f:78:4c:7d:
e3:69:b9:02:e8:2c:5f:bf:af:65:23:d6:e2:b8:59:25:da:c5:
a9:8f:9d:74:0e:77:d1:57:a7:7f:cb:3a:4d:a5:16:71:f0:3e:
fc:6a:30:cb:f3:e6:1f:8a:02:1b:a4:ea:66:41:65:f3:cc:56:
66:b7:11:a6:93:e6:b8:43:b7:51:6f:a8:18:30:d6:e7:06:22:
88:cd:87:33:33:76:c5:bc:1b:82:33:18:f0:93:fa:21:19:5e:
06:6b:b8:24:55:78:2d:ab:df:e8:b7:cd:88:7f:b9:2b:e3:73:
99:b4:bf:ed:f6:7c:9f:99:9a:f6:f8:dc:5c:92:f5:39:ba:c5:
96:d4:bb:12:4f:61:ea:18:21:e9:1c:d7:35:27:4b:27:60:03:
55:7b:f0:d9:de:b2:26:d1:81:58:33:2e:61:99:4f:f2:0a:a6:
da:e5:73:98:86:fa:45:d0:95:34:85:e4:12:10:f2:26:09:45:
5b:25:06:f3:4a:76:1a:68:bc:7f:e5:52:cb:26:96:70:44:d2:
ab:7f:15:ee:84:1a:5e:d5:73:77:02:fd:73:c9:11:19:7d:f5:
2b:7b:97:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3VfZKc5XRtJHMOR2Je8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDg2NDBjMzA1MTA3NzY2YTY0NmZiZjhlYzgxZGI0NWNl
MWYyNDkwHhcNMjYwODE0MjAwMTE4WhcNMjYwODE1MjAwMTE4WjAzMTEwLwYDVQQD
EygzODYxMTU4MWVkNGJlN2E2NWUwZjBmN2Y5N2VlOWIxYTJhZDA0NDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusvUq8fEylRx0D2emBrKrICy2ywL
tD9Mow0irQzGyc2qDRdKNfj80dAKE74fHMeI/TWvIw9yVzS5lwFp9HWB8K5EQLcc
kHCFyZAGPLx0dT0vbg7bNWmW1hEjG1FsbB6iqCUvUQeBeOfY76YgeahwUb7sdTXd
wePoZK3O56/VwjRv/RJ4Kj4azARoYjmE8NoQnL5euC/Eq0iYSStj95yNKEl0p6Vi
GDtG7XUDUFgGZSLl4s9M0vGHiIiokHr7Xc4YaOddKqd/oEwPQUgqp+iYLZ6/Ir5h
82DXFsKlwmS6vF/bVqfK6t7NuokIaG6w0ZWM78k4dWEDsW/6b4J5KX5C7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhhFYHtS+emXg8Pf5fumxoq0ESJMB8GA1UdIwQY
MBaAFCfYZAwwUQd2amRvv47IHbRc4fJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjloa0REQlJCM1pxWkctX2pzZ2R0RnpoOGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ODE3NWEtMTJjOC00NTkwLTgyZTAt
M2M2Zjg4YzkxNGIxLzEvSjloa0REQlJCM1pxWkctX2pzZ2R0RnpoOGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84ODE3NWEtMTJjOC00NTkwLTgyZTAtM2M2Zjg4YzkxNGIx
LzEvSjloa0REQlJCM1pxWkctX2pzZ2R0RnpoOGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVf2YyaaJ
F3W2503u7UIMahVzKM1YAzB5V8508QHkLvUveEx942m5AugsX7+vZSPW4rhZJdrF
qY+ddA530Venf8s6TaUWcfA+/Gowy/PmH4oCG6TqZkFl88xWZrcRppPmuEO3UW+o
GDDW5wYiiM2HMzN2xbwbgjMY8JP6IRleBmu4JFV4Lavf6LfNiH+5K+NzmbS/7fZ8
n5ma9vjcXJL1ObrFltS7Ek9h6hgh6RzXNSdLJ2ADVXvw2d6yJtGBWDMuYZlP8gqm
2uVzmIb6RdCVNIXkEhDyJglFWyUG80p2Gmi8f+VSyyaWcETSq38V7oQaXtVzdwL9
c8kRGX31K3uXCw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:52 2026 by rpki-client