Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: NhwFUELsLaBC1tgDCAQawJSay55i5aJEej/ayQsZgTo=
Subject key identifier: E4:D8:B8:AA:E2:A5:D2:AE:9C:34:37:DC:CE:99:47:4B:D1:D8:26:F0
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 01A1231D2599A34FBBC55039694B5804EE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 1644
Signing time: Sat 10 Oct 2026 00:01:15 +0000
Manifest this update: Sat 10 Oct 2026 00:01:15 +0000
Manifest next update: Sun 11 Oct 2026 00:01:15 +0000
Files and hashes: 1: 2zatrSnboczgSJyqZMZSlWLUtgU.roa (hash: X83ll2h7XLvQkyBb5b0DZRoRK6wcb/CaXhRs2FxEIUI=)
2: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: asQU2DII3lbUVLC1WFKjdn9CtkqH5E+kK2LBU57Rxew=)
3: RrW3iZFpgHFuK1USxDsMnM1LusA.roa (hash: /DqnuC18dHwT7Z+hUMZE9xD1UgRrxpE5xwXXr5v68Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:1d:25:99:a3:4f:bb:c5:50:39:69:4b:58:04:ee:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Oct 10 00:01:15 2026 GMT
Not After : Oct 11 00:01:15 2026 GMT
Subject: CN=e4d8b8aae2a5d2ae9c3437dcce99474bd1d826f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:a0:8f:80:8e:bf:f5:d1:be:38:74:11:ca:
9e:70:5e:c0:54:bb:58:3e:ce:16:30:fe:35:56:69:
39:cd:c7:52:70:ce:d4:1b:6e:00:29:93:25:c8:d2:
12:96:79:43:f7:b9:42:11:e2:91:c5:09:8b:15:a7:
5d:3e:60:d9:3f:ae:25:08:cf:f1:e9:52:46:35:25:
3a:a2:1a:5e:09:54:cf:b4:b6:18:05:d0:2c:db:72:
12:1a:1b:41:43:f8:7c:e9:75:ad:53:77:39:39:e9:
b4:3f:77:4e:66:6f:a4:5f:6c:7f:a6:b5:71:30:1a:
57:5a:8f:28:38:27:b3:1a:3d:a2:de:80:04:68:ec:
88:27:b4:e6:2e:60:16:bd:8d:80:db:30:5b:8e:8f:
7e:21:04:d0:b6:11:89:64:b8:db:b0:4c:6e:37:87:
ad:19:96:01:33:1c:11:58:3d:6f:33:02:89:93:5e:
a8:ff:cb:18:80:2f:b2:f7:89:d0:c0:70:54:0f:45:
72:98:ab:2c:25:66:93:d0:f8:ac:1e:44:4b:c1:62:
40:38:d7:bf:e7:0c:c1:75:ac:dd:54:e3:ba:28:e2:
88:f3:91:8f:98:2e:61:65:25:85:0c:5b:ca:d5:b9:
cb:94:4b:69:69:19:2b:e5:53:e1:b7:37:dc:88:03:
d3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D8:B8:AA:E2:A5:D2:AE:9C:34:37:DC:CE:99:47:4B:D1:D8:26:F0
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:91:6c:d7:b0:36:ee:87:da:9e:de:bd:ec:d2:cb:67:94:38:
4c:ac:a8:34:12:b7:2b:81:4b:28:92:fe:6b:e2:38:46:a5:d8:
4c:7e:33:a6:9e:42:29:c8:d8:fb:43:93:50:e1:35:35:5b:4c:
e6:49:04:0f:21:86:de:7b:96:fa:b6:b8:4f:29:02:dd:c6:8d:
d4:9e:1b:b8:3c:c2:ed:21:91:52:45:ab:f6:a4:57:e7:a2:4c:
1d:62:39:07:3e:4a:e3:be:f2:72:5d:ec:46:a8:c6:1b:33:85:
88:02:9c:88:3b:82:78:46:52:14:91:27:cc:d3:2d:1c:24:16:
8c:05:d6:05:ca:5e:ea:eb:9c:93:f6:37:d5:25:91:0a:2a:67:
f3:a9:5c:74:5b:86:c2:9a:f9:90:df:d3:8f:0d:77:7b:d9:7e:
2a:15:c5:e9:d1:7f:62:95:5a:31:32:94:b9:f6:0b:30:6f:85:
96:59:2a:fb:a2:d9:40:8a:a9:e4:2a:2d:4d:97:b2:31:96:12:
21:69:89:66:2e:84:b9:d5:c3:82:55:f0:7f:50:85:1f:79:a5:
bc:cc:10:42:6f:0f:d1:c3:9d:65:d4:e2:61:31:8c:35:e2:9c:
f4:a1:ae:2c:4a:a2:15:f2:22:6e:03:e4:4c:b4:4c:d6:0f:fe:
5e:be:82:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEjHSWZo0+7xVA5aUtYBO5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MmM0ZTJiZjVmMjEzODQ2MmVmNGE1ZDllMGY2ZTdhNzYz
NTMwZmUwHhcNMjYxMDEwMDAwMTE1WhcNMjYxMDExMDAwMTE1WjAzMTEwLwYDVQQD
EyhlNGQ4YjhhYWUyYTVkMmFlOWMzNDM3ZGNjZTk5NDc0YmQxZDgyNmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykqgj4COv/XRvjh0EcqecF7AVLtY
Ps4WMP41Vmk5zcdScM7UG24AKZMlyNISlnlD97lCEeKRxQmLFaddPmDZP64lCM/x
6VJGNSU6ohpeCVTPtLYYBdAs23ISGhtBQ/h86XWtU3c5Oem0P3dOZm+kX2x/prVx
MBpXWo8oOCezGj2i3oAEaOyIJ7TmLmAWvY2A2zBbjo9+IQTQthGJZLjbsExuN4et
GZYBMxwRWD1vMwKJk16o/8sYgC+y94nQwHBUD0VymKssJWaT0PisHkRLwWJAONe/
5wzBdazdVOO6KOKI85GPmC5hZSWFDFvK1bnLlEtpaRkr5VPhtzfciAPTJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTYuKripdKunDQ33M6ZR0vR2CbwMB8GA1UdIwQY
MBaAFCUsTiv18hOEYu9KXZ4Pbnp2NTD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlN4T0tfWHlFNFJpNzBwZG5nOXVlblkxTVA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iYmJhODgtMTM0NC00ZDg5LThmNTIt
NmRmN2JmNTllMzI2LzEvSlN4T0tfWHlFNFJpNzBwZG5nOXVlblkxTVA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iYmJhODgtMTM0NC00ZDg5LThmNTItNmRmN2JmNTllMzI2
LzEvSlN4T0tfWHlFNFJpNzBwZG5nOXVlblkxTVA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpFs17A2
7ofant697NLLZ5Q4TKyoNBK3K4FLKJL+a+I4RqXYTH4zpp5CKcjY+0OTUOE1NVtM
5kkEDyGG3nuW+ra4TykC3caN1J4buDzC7SGRUkWr9qRX56JMHWI5Bz5K477ycl3s
RqjGGzOFiAKciDuCeEZSFJEnzNMtHCQWjAXWBcpe6uuck/Y31SWRCipn86lcdFuG
wpr5kN/Tjw13e9l+KhXF6dF/YpVaMTKUufYLMG+Fllkq+6LZQIqp5CotTZeyMZYS
IWmJZi6EudXDglXwf1CFH3mlvMwQQm8P0cOdZdTiYTGMNeKc9KGuLEqiFfIibgPk
TLRM1g/+Xr6CNA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 10:37:47 2026 by rpki-client