Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json)
Hash identifier: F8XeEtU8Ns9HHj2/vKlcG21zh4+GQouIn+jD0PUszUQ=
Subject key identifier: EE:90:C7:7E:84:7B:00:A4:8A:92:F3:F2:19:9B:E9:F0:2F:81:60:8C
Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439
Certificate serial: 01A13E260F3A8CD977F328EF23EC3602C259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
Manifest number: 0DD4
Signing time: Thu 15 Oct 2026 06:00:43 +0000
Manifest this update: Thu 15 Oct 2026 06:00:43 +0000
Manifest next update: Fri 16 Oct 2026 06:00:43 +0000
Files and hashes: 1: 0pyZ3-vMnTAKCT-4LOO6eDsOhcw.roa (hash: k/rzNKop48uQMb7AE0nMU7aM7Ne9RnAWwxkHE7UZejk=)
2: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: QfndoFUl4qWDFra2MnVmj0vjZbDsPpPQc/T3Sy6Pspo=)
3: KRcyCCYfWjqOexCvOzIazT3vyF0.roa (hash: Xflkf+SBr0N9aoeaiAaOKwpAiGgoQ6BSyRkyGn+zEmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:0f:3a:8c:d9:77:f3:28:ef:23:ec:36:02:c2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439
Validity
Not Before: Oct 15 06:00:43 2026 GMT
Not After : Oct 16 06:00:43 2026 GMT
Subject: CN=ee90c77e847b00a48a92f3f2199be9f02f81608c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:81:7c:ac:c5:b9:21:28:04:f1:f5:44:eb:
d8:75:52:e8:0f:19:8d:dc:2d:ff:c2:99:57:21:f0:
c9:f6:78:e2:b6:fe:d7:29:9a:79:ed:c7:80:b6:e8:
a7:6f:97:c6:ee:24:6f:d4:dc:d9:b6:cb:81:06:c9:
6d:ef:fc:96:ab:92:57:83:90:57:06:45:33:de:46:
f1:c8:f4:4d:33:8e:e4:03:39:7d:13:17:c3:92:78:
eb:7b:73:8e:92:88:39:56:ee:85:d8:1a:6d:51:62:
24:cc:32:1d:b1:eb:ba:48:10:ab:df:4d:f1:e1:25:
d0:d8:40:1a:d6:c7:5a:e3:d7:9b:1b:89:cb:b3:06:
60:2b:39:c2:fb:47:63:5e:a4:ab:b4:68:c0:51:78:
01:46:bb:92:ee:2f:e3:85:aa:c5:1f:0b:56:ee:3a:
db:96:24:19:ad:a4:e0:73:31:20:01:00:25:e1:ed:
22:65:25:d1:85:13:3e:1c:6b:5f:b4:8e:e0:06:8b:
28:ca:e0:c7:ee:65:12:d1:de:52:48:28:b8:c4:67:
12:77:b5:31:66:e8:6e:3a:83:d5:18:6c:20:cb:f3:
61:f6:b1:a7:35:fd:3c:6b:d4:d5:fc:ab:8c:73:10:
95:5d:e8:a1:96:0a:69:13:57:18:21:96:ba:56:fa:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:90:C7:7E:84:7B:00:A4:8A:92:F3:F2:19:9B:E9:F0:2F:81:60:8C
X509v3 Authority Key Identifier:
keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4d:7e:77:ac:5b:44:bb:6a:ea:ff:13:31:26:8b:2f:e0:7e:
52:3f:3a:88:3b:26:32:5a:01:99:88:90:20:fd:d1:ea:10:3d:
3f:4e:bc:c4:1e:2d:41:9d:7c:5d:37:3a:38:11:66:62:02:6f:
ee:c9:16:4b:50:6b:72:8e:02:02:69:11:3b:a7:60:78:1f:22:
0b:63:75:f1:9a:55:ca:fa:07:4a:b0:bd:b0:8b:6f:e3:07:7c:
dd:c3:09:03:10:19:ce:44:c1:9a:4c:52:2f:e7:3c:49:33:9a:
48:6f:92:00:c5:d8:fc:51:05:ff:73:ca:1a:1d:05:b3:21:fb:
61:52:2a:26:77:d2:c2:0d:ca:ef:22:79:f5:f6:8b:80:fb:8a:
02:99:8a:65:17:34:7f:fa:d6:cd:8d:cf:a4:a1:86:3a:2e:05:
d3:43:f4:4f:98:be:ce:da:91:27:1d:00:31:dd:5b:6a:d3:28:
52:35:28:ee:a0:bd:8b:d0:9d:db:09:eb:0d:d8:ef:f5:a3:68:
00:d7:c1:53:d5:ab:ca:7f:84:f3:27:05:9b:38:ca:da:ee:2e:
b8:3e:e7:27:25:a6:e5:3a:d2:df:bf:37:8d:a7:12:af:dc:d6:
f2:74:a4:ca:df:55:e8:03:6d:fe:83:e6:c9:aa:af:f4:58:66:
26:94:d8:5b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaE+Jg86jNl38yjvI+w2AsJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhM2M0ODE2MDc2MTljODM1ZDA5ZjI0NzFkOTc2ZDdjZjc0
YTA0MzkwHhcNMjYxMDE1MDYwMDQzWhcNMjYxMDE2MDYwMDQzWjAzMTEwLwYDVQQD
EyhlZTkwYzc3ZTg0N2IwMGE0OGE5MmYzZjIxOTliZTlmMDJmODE2MDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNSBfKzFuSEoBPH1ROvYdVLoDxmN
3C3/wplXIfDJ9njitv7XKZp57ceAtuinb5fG7iRv1NzZtsuBBslt7/yWq5JXg5BX
BkUz3kbxyPRNM47kAzl9ExfDknjre3OOkog5Vu6F2BptUWIkzDIdseu6SBCr303x
4SXQ2EAa1sda49ebG4nLswZgKznC+0djXqSrtGjAUXgBRruS7i/jharFHwtW7jrb
liQZraTgczEgAQAl4e0iZSXRhRM+HGtftI7gBosoyuDH7mUS0d5SSCi4xGcSd7Ux
ZuhuOoPVGGwgy/Nh9rGnNf08a9TV/KuMcxCVXeihlgppE1cYIZa6VvpGvQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFO6Qx36EewCkipLz8hmb6fAvgWCMMB8GA1UdIwQY
MBaAFPo8SBYHYZyDXQnyRx2XbXz3SgQ5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qeElGZ2RobklOZENmSkhIWmR0ZlBkS0JEay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTk4NDhiLWM0ZjgtNDZhYi04OTIz
LTEzMDQ0NTRiZjI5ZC8xLzEtanhJRmdkaG5JTmRDZkpISFpkdGZQZEtCRGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRmLzk5ODQ4Yi1jNGY4LTQ2YWItODkyMy0xMzA0NDU0YmYy
OWQvMS8xLWp4SUZnZGhuSU5kQ2ZKSEhaZHRmUGRLQkRrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUU1+
d6xbRLtq6v8TMSaLL+B+Uj86iDsmMloBmYiQIP3R6hA9P068xB4tQZ18XTc6OBFm
YgJv7skWS1Brco4CAmkRO6dgeB8iC2N18ZpVyvoHSrC9sItv4wd83cMJAxAZzkTB
mkxSL+c8STOaSG+SAMXY/FEF/3PKGh0FsyH7YVIqJnfSwg3K7yJ59faLgPuKApmK
ZRc0f/rWzY3PpKGGOi4F00P0T5i+ztqRJx0AMd1batMoUjUo7qC9i9Cd2wnrDdjv
9aNoANfBU9Wryn+E8ycFmzjK2u4uuD7nJyWm5TrS3783jacSr9zW8nSkyt9V6ANt
/oPmyaqv9FhmJpTYWw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:39:08 2026 by rpki-client