Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
File: Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json)
Hash identifier: uWhF7TpjaLcqeWKWAHRBZNe4F8IgFKxxsrsMNqB1iPc=
Subject key identifier: 67:0D:72:60:F6:5F:E4:5A:B3:6E:3D:6A:8C:BE:2E:92:59:60:6A:01
Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Certificate serial: 01A119AB9E1E5AB1E126DEA2345E2DFB56E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
Manifest number: 1A91
Signing time: Thu 08 Oct 2026 04:00:39 +0000
Manifest this update: Thu 08 Oct 2026 04:00:39 +0000
Manifest next update: Fri 09 Oct 2026 04:00:39 +0000
Files and hashes: 1: 6MvEEf7_I3zO3ShtqYd8LKtfRq8.roa (hash: lIgvAYq1Ass4AfPtbYog1dJL/68LEdNig8uh3pGw9vM=)
2: EKgYi5uwmdQ3SbZogfsfQT2cobM.roa (hash: Y3gYmZwUht9JEwQTGH6EyDKQhtm/rC13n1867BeBzvQ=)
3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: AUFTDkXChuk/ZtWuzaG+nDuAOrEWFKnDn81YoG7LPD8=)
4: Jqk7oDaY0GyweY_m1dLexacLzPE.roa (hash: prybAkap/ary1cwam/oMqauOzBkuf1YCV2giq0/4yoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:ab:9e:1e:5a:b1:e1:26:de:a2:34:5e:2d:fb:56:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Validity
Not Before: Oct 8 04:00:39 2026 GMT
Not After : Oct 9 04:00:39 2026 GMT
Subject: CN=670d7260f65fe45ab36e3d6a8cbe2e9259606a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:84:38:8e:2a:af:31:26:a1:f6:d9:2e:8a:2d:
69:c0:c9:40:71:99:05:48:10:f1:35:be:1d:7e:b8:
ac:7e:36:fa:9a:1b:41:62:e0:93:43:e3:fc:a8:91:
19:69:21:f5:09:c6:3d:e9:63:40:4f:ef:bb:80:3b:
f8:d6:48:97:a7:a9:43:e2:ea:f3:fd:2a:2b:b1:8f:
14:f6:28:0e:df:b4:35:12:4e:2d:55:c0:38:2c:cd:
99:f5:c5:67:6a:03:72:13:09:ee:81:84:92:42:03:
e0:e3:a8:65:5f:a8:f7:d7:a7:c6:41:a1:1e:6f:a2:
ba:c5:ec:41:84:24:2a:7a:64:e9:70:68:59:49:1f:
7a:d5:ee:0b:d3:0b:16:4e:52:a8:4f:2d:4b:5c:66:
09:b0:e3:78:c2:de:00:6e:05:d9:37:65:77:bf:84:
95:72:69:b5:16:8e:41:24:ec:46:8c:8e:a4:cb:58:
56:41:c6:a9:f8:22:61:77:6c:0b:95:aa:fe:74:7c:
22:ba:2c:30:df:a3:4a:64:fa:26:0c:95:f1:7a:df:
f1:45:dd:1c:54:98:2b:7c:21:36:11:9e:2d:5e:ea:
54:18:09:6b:48:16:84:54:19:30:da:26:78:2b:df:
7b:b5:45:34:ec:42:f5:71:00:30:b7:52:30:24:99:
15:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0D:72:60:F6:5F:E4:5A:B3:6E:3D:6A:8C:BE:2E:92:59:60:6A:01
X509v3 Authority Key Identifier:
keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d8:3a:20:0f:30:43:6f:b9:f6:78:20:6b:3c:c9:7d:27:92:
9e:57:f3:4d:d7:9c:4b:88:65:08:45:fa:1f:56:58:ca:00:f6:
80:76:0c:f3:16:86:3b:1f:d2:a4:ca:80:b6:6b:9b:37:4d:b2:
f8:d0:93:c4:77:48:5b:b4:04:4a:fd:98:c8:01:a0:de:3b:be:
fc:d0:34:78:fa:46:4f:a0:e1:db:75:5f:43:2f:26:56:46:88:
22:f9:94:f3:b5:5c:07:d1:c5:ae:dc:c3:8f:c4:f9:21:b3:37:
7a:60:42:a3:67:9a:0c:c8:39:31:e8:a3:b9:e0:d7:0d:2d:e4:
ad:b9:56:01:d2:b4:5a:b5:56:be:c9:38:10:37:45:e6:18:3c:
1c:0d:63:10:50:9a:b1:17:f2:03:5b:25:ac:eb:03:f9:79:b8:
cf:1e:97:df:bb:a0:21:49:d5:2f:31:79:4a:33:76:f4:9d:46:
99:23:ce:78:7c:a6:f0:67:ee:c6:c1:5d:36:c6:95:e0:82:6a:
c4:40:f0:35:77:f2:7e:cf:9f:89:73:81:3b:08:a1:3f:a7:ac:
ea:e5:95:31:58:8b:7c:78:84:b6:74:60:f9:66:1b:14:c4:97:
84:43:8f:51:d3:d2:2c:5d:7c:10:7b:54:88:09:b1:8e:a5:6d:
aa:2e:2d:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEZq54eWrHhJt6iNF4t+1bkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YTg3OWQ2MjhmZTVlYzhhNzYxYzQ3NDg2Nzk5OTNmOWM2
OWY4YjQwHhcNMjYxMDA4MDQwMDM5WhcNMjYxMDA5MDQwMDM5WjAzMTEwLwYDVQQD
Eyg2NzBkNzI2MGY2NWZlNDVhYjM2ZTNkNmE4Y2JlMmU5MjU5NjA2YTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YQ4jiqvMSah9tkuii1pwMlAcZkF
SBDxNb4dfrisfjb6mhtBYuCTQ+P8qJEZaSH1CcY96WNAT++7gDv41kiXp6lD4urz
/SorsY8U9igO37Q1Ek4tVcA4LM2Z9cVnagNyEwnugYSSQgPg46hlX6j316fGQaEe
b6K6xexBhCQqemTpcGhZSR961e4L0wsWTlKoTy1LXGYJsON4wt4AbgXZN2V3v4SV
cmm1Fo5BJOxGjI6ky1hWQcap+CJhd2wLlar+dHwiuiww36NKZPomDJXxet/xRd0c
VJgrfCE2EZ4tXupUGAlrSBaEVBkw2iZ4K997tUU07EL1cQAwt1IwJJkVuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcNcmD2X+Ras249aoy+LpJZYGoBMB8GA1UdIwQY
MBaAFCWoedYo/l7Ip2HEdIZ5mT+cafi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMt
ZDg2YjRjYWVkMTFkLzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMtZDg2YjRjYWVkMTFk
LzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdg6IA8w
Q2+59nggazzJfSeSnlfzTdecS4hlCEX6H1ZYygD2gHYM8xaGOx/SpMqAtmubN02y
+NCTxHdIW7QESv2YyAGg3ju+/NA0ePpGT6Dh23VfQy8mVkaIIvmU87VcB9HFrtzD
j8T5IbM3emBCo2eaDMg5MeijueDXDS3krblWAdK0WrVWvsk4EDdF5hg8HA1jEFCa
sRfyA1slrOsD+Xm4zx6X37ugIUnVLzF5SjN29J1GmSPOeHym8GfuxsFdNsaV4IJq
xEDwNXfyfs+fiXOBOwihP6es6uWVMViLfHiEtnRg+WYbFMSXhEOPUdPSLF18EHtU
iAmxjqVtqi4t3g==
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:04:17 2026 by rpki-client