Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
File: jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft (raw, json)
Hash identifier: 8NQXeGMyUwqv5BpkizkzQ8n5E6SMmD6klslhu597wVA=
Subject key identifier: 88:A9:6A:16:3E:FA:B6:10:34:EE:09:F0:23:3F:3E:BC:87:53:DC:0B
Authority key identifier: 8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
Certificate issuer: /CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Certificate serial: 01A13334F841918BD657C9A801CBC35F8D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
Manifest number: 1A32
Signing time: Tue 13 Oct 2026 03:01:11 +0000
Manifest this update: Tue 13 Oct 2026 03:01:11 +0000
Manifest next update: Wed 14 Oct 2026 03:01:11 +0000
Files and hashes: 1: albAVH6lwfzmwVJzDmkpKh655KQ.roa (hash: BpL6bwg3t5pCu5LLatPQum4u8725IbG+PO63ipkITdM=)
2: i-ANpr6wgO4krsxaS_Mr1pJHk_s.roa (hash: gL8PqoF8vFY4ZSfQKB1yxJH42nNfNmgI+ETePYwGBJ0=)
3: jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl (hash: tuYKh3YN6zLG8A46eABgjDgHiPqnmFqNOilJxQ/ri0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:34:f8:41:91:8b:d6:57:c9:a8:01:cb:c3:5f:8d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Validity
Not Before: Oct 13 03:01:11 2026 GMT
Not After : Oct 14 03:01:11 2026 GMT
Subject: CN=88a96a163efab61034ee09f0233f3ebc8753dc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:47:51:b9:ac:60:2e:05:ec:6a:9f:d8:c1:
86:3a:59:ff:c0:23:be:f3:66:e6:22:ba:a9:66:b6:
4f:a1:ea:21:63:11:99:12:64:a8:a6:e2:0c:57:f5:
f5:1d:48:79:ce:72:46:77:7a:1f:f6:d9:e3:22:9f:
fa:ad:67:fe:09:dc:a9:b9:93:29:5c:b9:be:c4:0c:
e2:77:02:fd:d7:b8:30:72:c2:00:e2:ce:c5:de:e8:
60:23:33:2e:f5:7b:7e:0f:d0:8a:0b:5b:41:2d:88:
fd:93:9d:8e:51:f6:25:ba:2a:7d:5f:ab:8d:75:7a:
12:9f:c9:8a:5d:a4:3e:8d:4b:e9:b9:8a:6a:11:92:
51:04:14:64:60:20:71:b3:fa:75:11:62:4f:f6:bb:
b5:3d:8f:f3:ac:b6:ae:3f:ce:59:49:96:d3:68:d3:
c3:5d:90:31:9c:d9:26:5f:90:4e:59:7a:35:26:a3:
b3:63:47:84:e1:8a:4a:23:89:89:ea:36:9d:0d:a1:
22:26:15:c9:e5:af:fb:f3:4a:92:71:15:35:f1:82:
72:e0:90:00:4c:9b:d1:00:f4:ee:77:14:2c:98:d2:
e7:c9:50:23:97:2d:d0:4a:7c:1a:56:60:b3:3f:51:
c6:f0:19:55:a7:7d:aa:88:20:f8:0d:ed:6a:da:19:
6d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A9:6A:16:3E:FA:B6:10:34:EE:09:F0:23:3F:3E:BC:87:53:DC:0B
X509v3 Authority Key Identifier:
keyid:8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:88:e5:c6:bc:9f:1d:0a:1a:f1:85:16:07:2f:09:55:e9:a8:
09:40:9d:ff:2e:9a:ea:3f:02:9a:d0:72:16:48:7e:fb:41:4c:
ce:0b:1a:09:c5:49:04:b8:ae:85:ac:d2:c6:de:4f:02:54:74:
25:0d:4f:1d:28:8f:97:0c:04:ba:b9:6e:f4:c1:ac:86:c3:58:
ec:12:49:0c:e3:10:8f:36:6f:36:fa:ef:6a:33:27:34:a8:0e:
94:21:90:86:6c:a9:f5:61:43:f0:f0:d4:62:78:fd:8c:72:17:
2f:79:22:c3:c9:81:7b:45:9e:c5:29:f3:d4:b9:46:ed:b7:9c:
fd:f5:5f:b7:f8:c1:44:62:ab:0e:cb:97:b3:8e:85:75:ae:1b:
52:2d:f7:c8:9b:ea:4b:f0:73:7f:49:5e:ce:88:8f:59:14:bd:
70:2c:0e:e5:40:3d:3e:15:c4:65:3d:42:65:e6:1c:ce:14:3f:
ee:00:3b:87:4e:8e:c7:b4:ea:47:1a:1d:8b:68:2c:b5:13:2f:
1a:2c:03:08:5f:c3:61:59:5c:a7:ae:6b:b4:86:af:3b:58:03:
b4:03:e5:59:a7:55:eb:ba:a6:2f:46:90:33:34:d7:d7:d4:7e:
d9:b5:dd:4a:48:72:9c:0d:f7:db:10:e7:20:d3:a1:1e:f7:51:
44:32:0a:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEzNPhBkYvWV8moAcvDX405MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMGM1NGIzYWFlMjUxOTE1ZmZjOThiZDM0YTU1MDE4MWZm
YWI0OWEwHhcNMjYxMDEzMDMwMTExWhcNMjYxMDE0MDMwMTExWjAzMTEwLwYDVQQD
Eyg4OGE5NmExNjNlZmFiNjEwMzRlZTA5ZjAyMzNmM2ViYzg3NTNkYzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ1HUbmsYC4F7Gqf2MGGOln/wCO+
82bmIrqpZrZPoeohYxGZEmSopuIMV/X1HUh5znJGd3of9tnjIp/6rWf+CdypuZMp
XLm+xAzidwL917gwcsIA4s7F3uhgIzMu9Xt+D9CKC1tBLYj9k52OUfYluip9X6uN
dXoSn8mKXaQ+jUvpuYpqEZJRBBRkYCBxs/p1EWJP9ru1PY/zrLauP85ZSZbTaNPD
XZAxnNkmX5BOWXo1JqOzY0eE4YpKI4mJ6jadDaEiJhXJ5a/780qScRU18YJy4JAA
TJvRAPTudxQsmNLnyVAjly3QSnwaVmCzP1HG8BlVp32qiCD4De1q2hltpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIipahY++rYQNO4J8CM/PryHU9wLMB8GA1UdIwQY
MBaAFI4MVLOq4lGRX/yYvTSlUBgf+rSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNjI1MGMtZTA2Mi00MDM3LWI4ZjMt
YmYxZTFkZTJlYTYzLzEvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iNjI1MGMtZTA2Mi00MDM3LWI4ZjMtYmYxZTFkZTJlYTYz
LzEvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYjlxryf
HQoa8YUWBy8JVemoCUCd/y6a6j8CmtByFkh++0FMzgsaCcVJBLiuhazSxt5PAlR0
JQ1PHSiPlwwEurlu9MGshsNY7BJJDOMQjzZvNvrvajMnNKgOlCGQhmyp9WFD8PDU
Ynj9jHIXL3kiw8mBe0WexSnz1LlG7bec/fVft/jBRGKrDsuXs46Fda4bUi33yJvq
S/Bzf0lezoiPWRS9cCwO5UA9PhXEZT1CZeYczhQ/7gA7h06Ox7TqRxodi2gstRMv
GiwDCF/DYVlcp65rtIavO1gDtAPlWadV67qmL0aQMzTX19R+2bXdSkhynA332xDn
INOhHvdRRDIKYA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 12:48:44 2026 by rpki-client