Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
File: jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json)
Hash identifier: aJLI2RJgsxihpwy0xhC3UmOHIUksjBCDfc8PoXinOx4=
Subject key identifier: 2B:67:83:36:38:A7:4C:BE:EF:56:B6:9B:02:B2:EE:D3:97:E0:21:2E
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 01A08C0D5AC65C0C7AA7912DC76DBD3182AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
Manifest number: 1A94
Signing time: Thu 10 Sep 2026 16:01:20 +0000
Manifest this update: Thu 10 Sep 2026 16:01:20 +0000
Manifest next update: Fri 11 Sep 2026 16:01:20 +0000
Files and hashes: 1: IPD7v-J9c376oyXeNIKc_aWnNmQ.roa (hash: EEItVG+CeXn/JupxjY6OK4AdQvnwdrYLgxk2U0ldhpY=)
2: LL3At7JbewVHNRXMTWxBEzOztjg.roa (hash: +WpNgZ2w7aJQTwGBk3CQne457+iBvPsYhfCTsL1+tUY=)
3: anTJWEQp0i6KTaSXHOsTHQh5WnE.roa (hash: ZtVU1H4tfyZrn5QvM+PL/R2U7WZ74D460z4PylgnXrM=)
4: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: 2C2dW3NXDCf7ve9HJvqFg8nqphFwzZosyPnAU/u0hqY=)
5: lkChSpn2Pj9BZbhbqhu03FMhDys.roa (hash: yYjtG9ThGBjd6+NRNSCZP/C1Ipp2hIAVQCQKfhenN+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:5a:c6:5c:0c:7a:a7:91:2d:c7:6d:bd:31:82:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Sep 10 16:01:20 2026 GMT
Not After : Sep 11 16:01:20 2026 GMT
Subject: CN=2b67833638a74cbeef56b69b02b2eed397e0212e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b9:b6:25:52:d1:6f:07:da:66:2a:00:9d:ee:
ba:75:82:a9:31:05:79:3a:b5:01:d3:69:ac:19:9d:
3a:9e:23:15:86:df:be:60:1d:0e:78:84:96:1f:da:
6e:45:ae:86:32:2f:96:4e:6b:71:49:12:a7:16:bf:
17:4c:0b:c4:b6:82:8c:2d:17:4f:1d:4a:bd:13:db:
e8:d1:36:86:18:3a:5b:5c:af:3a:9b:87:1a:49:66:
bd:61:af:8a:1c:1b:c6:27:0e:50:2d:ca:b3:e8:ce:
25:d2:f3:74:55:86:5e:cf:f9:99:e3:cc:87:bf:c0:
b1:db:d3:9f:9d:9c:ae:b8:c7:6d:29:e2:49:ae:9e:
37:43:5b:75:a9:12:4b:9a:62:22:26:e5:3a:9b:c1:
4b:d4:be:8e:58:ca:f6:1e:b0:46:72:a0:31:7a:b0:
f7:b6:1b:4d:e6:8a:70:a2:45:b8:ad:96:8d:49:8f:
b5:6f:3f:83:38:04:46:39:87:61:37:db:1e:81:fb:
ca:aa:8c:ec:ad:7c:b8:6f:09:09:5f:98:d9:a3:1f:
ad:84:21:fc:e5:8b:8b:a3:0b:1a:52:df:04:1e:d8:
ce:db:84:04:7e:43:4c:1f:8b:bb:1e:9d:7e:16:f0:
1e:09:d2:82:76:e6:dd:69:9c:83:3d:b6:7e:cf:75:
96:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:67:83:36:38:A7:4C:BE:EF:56:B6:9B:02:B2:EE:D3:97:E0:21:2E
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:33:4b:0a:38:b0:8f:b0:f0:06:45:e5:f1:a4:88:f0:72:7e:
64:8e:94:df:a9:73:1a:d9:45:06:e5:bb:00:ad:7b:17:14:27:
b1:f1:5e:a9:52:26:c7:33:a6:0c:9e:37:2b:84:c9:8f:88:b1:
19:47:b8:08:b9:0c:94:1b:7a:66:95:3c:65:1a:3b:a2:9f:6d:
d3:06:42:d3:bb:53:71:40:9a:b6:b5:d2:05:0f:d1:b0:0a:03:
e0:b3:1c:3e:1d:29:4f:f9:18:48:d2:5b:db:b8:78:62:fd:d2:
ca:c8:7d:2a:0d:7d:1c:2b:e3:c6:c7:3c:e8:93:56:73:d5:ad:
a0:a3:90:33:be:5c:14:71:2e:2d:94:2e:d8:fb:1d:45:0b:02:
c5:02:e8:c7:8f:80:0f:6b:b0:be:98:e0:08:5c:ff:b1:63:6e:
61:15:ca:10:e8:05:4d:1f:78:cc:7e:5b:8b:83:a6:ab:a1:16:
ac:17:96:ed:34:75:77:0a:fa:05:64:27:ed:97:7f:ec:a8:f9:
10:9e:cb:bb:2c:d1:a2:66:f7:b3:75:64:a8:61:a4:89:6f:cf:
06:a8:0e:50:dc:f9:5c:ee:13:f7:3d:70:a5:6f:15:df:e1:b5:
f5:65:33:6b:d0:54:88:18:b8:81:df:ef:28:be:4c:90:1f:3d:
06:45:49:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDVrGXAx6p5Etx229MYKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYjM0Nzc0YjAxOTc5Mjg0ZmQ5ZTc1NGZlYTY4ZmEzYzYx
NzgzZDAwHhcNMjYwOTEwMTYwMTIwWhcNMjYwOTExMTYwMTIwWjAzMTEwLwYDVQQD
EygyYjY3ODMzNjM4YTc0Y2JlZWY1NmI2OWIwMmIyZWVkMzk3ZTAyMTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bm2JVLRbwfaZioAne66dYKpMQV5
OrUB02msGZ06niMVht++YB0OeISWH9puRa6GMi+WTmtxSRKnFr8XTAvEtoKMLRdP
HUq9E9vo0TaGGDpbXK86m4caSWa9Ya+KHBvGJw5QLcqz6M4l0vN0VYZez/mZ48yH
v8Cx29OfnZyuuMdtKeJJrp43Q1t1qRJLmmIiJuU6m8FL1L6OWMr2HrBGcqAxerD3
thtN5opwokW4rZaNSY+1bz+DOARGOYdhN9segfvKqozsrXy4bwkJX5jZox+thCH8
5YuLowsaUt8EHtjO24QEfkNMH4u7Hp1+FvAeCdKCdubdaZyDPbZ+z3WWFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtngzY4p0y+71a2mwKy7tOX4CEuMB8GA1UdIwQY
MBaAFI2zR3SwGXkoT9nnVP6mj6PGF4PQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGIt
NjI2NTUyMWY2ZGY3LzEvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGItNjI2NTUyMWY2ZGY3
LzEvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDNLCjiw
j7DwBkXl8aSI8HJ+ZI6U36lzGtlFBuW7AK17FxQnsfFeqVImxzOmDJ43K4TJj4ix
GUe4CLkMlBt6ZpU8ZRo7op9t0wZC07tTcUCatrXSBQ/RsAoD4LMcPh0pT/kYSNJb
27h4Yv3Sysh9Kg19HCvjxsc86JNWc9WtoKOQM75cFHEuLZQu2PsdRQsCxQLox4+A
D2uwvpjgCFz/sWNuYRXKEOgFTR94zH5bi4Omq6EWrBeW7TR1dwr6BWQn7Zd/7Kj5
EJ7LuyzRomb3s3VkqGGkiW/PBqgOUNz5XO4T9z1wpW8V3+G19WUza9BUiBi4gd/v
KL5MkB89BkVJdw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:10:36 2026 by rpki-client