Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
File: jmOEMlhq5gL_Datn0JsZUVJOggU.mft (raw, json)
Hash identifier: Ji6IFFpXub/LrXQu18/L9uiVmMBirhnL+VmqLOS1D8s=
Subject key identifier: D4:C6:B8:98:12:EA:3B:73:DE:F9:DA:A9:5E:27:16:61:BF:81:70:01
Authority key identifier: 8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
Certificate issuer: /CN=8e638432586ae602ff0dab67d09b1951524e8205
Certificate serial: 01A178F197A9E7924482663CD09BAE2A4FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
Manifest number: 04E6
Signing time: Mon 26 Oct 2026 16:01:01 +0000
Manifest this update: Mon 26 Oct 2026 16:01:01 +0000
Manifest next update: Tue 27 Oct 2026 16:01:01 +0000
Files and hashes: 1: U6fyPIg5ovdf3i2qfPC2WuuXRmU.roa (hash: 51JfirD5ph0Mlaqz0ZFat9LDvr0NCB5fGDpKtCYppz0=)
2: jmOEMlhq5gL_Datn0JsZUVJOggU.crl (hash: Qgrmspb2NnFTM2QKZDHNRZuEPHo7R7tzA5RiZQFMzVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:97:a9:e7:92:44:82:66:3c:d0:9b:ae:2a:4f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e638432586ae602ff0dab67d09b1951524e8205
Validity
Not Before: Oct 26 16:01:01 2026 GMT
Not After : Oct 27 16:01:01 2026 GMT
Subject: CN=d4c6b89812ea3b73def9daa95e271661bf817001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e3:00:78:de:b0:c0:38:fe:10:64:d0:3a:8e:
fc:56:bb:4c:83:07:8d:a6:e7:93:5c:97:4c:a3:8e:
17:83:93:54:e5:83:41:0f:8d:33:9b:2f:65:db:8c:
e6:5d:87:12:54:f9:08:c4:a6:45:b5:82:fc:34:26:
c9:18:d8:e3:a3:1d:17:9b:7b:00:7c:5f:db:a5:74:
93:d7:ac:e1:ce:98:0b:0f:2f:8c:1f:3a:bc:26:c8:
6b:11:f5:a1:dd:fc:81:eb:6a:ea:ad:04:62:d0:f8:
c7:15:04:d1:c1:2b:89:d4:89:67:ac:30:f1:db:a1:
4b:dc:bf:b5:4d:4f:89:70:13:7c:5f:83:44:c6:dc:
85:29:b8:1f:22:2c:8a:3d:df:e3:c3:04:9d:79:63:
92:f2:4f:d8:08:5f:5d:42:29:5a:5a:cc:4e:c5:6a:
bb:18:bb:a0:ff:f2:be:13:0d:76:43:ef:0c:71:35:
30:8b:f9:5e:f8:76:3b:3b:42:01:67:dc:9b:e9:11:
d5:27:30:87:ec:be:e1:dc:7d:08:a8:2d:67:0c:2d:
37:12:37:2b:0d:55:33:5d:28:d4:39:dd:16:dc:bb:
53:c0:c7:7d:03:62:e4:26:6e:fb:d0:6d:4f:c5:1b:
80:e6:49:c9:2f:91:7d:67:11:f7:fa:ab:5e:3a:c2:
d0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C6:B8:98:12:EA:3B:73:DE:F9:DA:A9:5E:27:16:61:BF:81:70:01
X509v3 Authority Key Identifier:
keyid:8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:93:24:d6:55:d2:27:bd:44:bb:2a:95:89:1a:80:d4:40:d9:
61:9e:ec:49:53:4c:e4:4e:b6:78:4b:a5:dc:22:7a:a3:ca:ca:
dd:7f:a6:0e:63:1a:58:de:fe:29:ac:93:4b:bd:9b:ea:8c:ae:
cc:70:80:ba:c0:8f:56:3c:7c:91:09:5e:4f:2d:03:86:fb:a1:
f6:69:d6:7d:9f:c3:3c:d2:df:19:ba:d8:38:82:75:57:b5:f1:
cb:65:c6:5b:5d:0e:77:86:66:39:54:ff:e0:4c:86:41:a3:92:
3b:ad:0a:4b:26:fc:dc:d8:17:87:b6:76:c5:0b:ab:a1:35:c0:
0f:90:e1:cc:c6:fd:cd:08:e8:1c:10:4d:ba:85:c1:34:cc:a3:
e5:1a:5b:60:78:7d:bd:bd:3f:29:e3:fc:c7:17:34:48:28:69:
f5:b1:0d:ac:c8:09:06:aa:aa:c8:9a:63:28:e5:b5:61:83:ae:
17:3f:11:89:3e:5a:b2:14:01:4d:d6:06:44:92:70:f8:94:da:
dd:b7:7f:54:da:bc:7b:c1:e4:85:f2:d3:d5:a7:be:46:ad:16:
c9:d0:d8:a9:b4:42:4a:2f:f2:4f:65:f1:23:eb:43:85:bc:43:
28:08:de:c3:b6:4b:b4:4f:2f:cc:4d:ae:40:ad:9b:df:8b:dc:
76:70:9c:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF48Zep55JEgmY80JuuKk+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjM4NDMyNTg2YWU2MDJmZjBkYWI2N2QwOWIxOTUxNTI0
ZTgyMDUwHhcNMjYxMDI2MTYwMTAxWhcNMjYxMDI3MTYwMTAxWjAzMTEwLwYDVQQD
EyhkNGM2Yjg5ODEyZWEzYjczZGVmOWRhYTk1ZTI3MTY2MWJmODE3MDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOMAeN6wwDj+EGTQOo78VrtMgweN
pueTXJdMo44Xg5NU5YNBD40zmy9l24zmXYcSVPkIxKZFtYL8NCbJGNjjox0Xm3sA
fF/bpXST16zhzpgLDy+MHzq8JshrEfWh3fyB62rqrQRi0PjHFQTRwSuJ1IlnrDDx
26FL3L+1TU+JcBN8X4NExtyFKbgfIiyKPd/jwwSdeWOS8k/YCF9dQilaWsxOxWq7
GLug//K+Ew12Q+8McTUwi/le+HY7O0IBZ9yb6RHVJzCH7L7h3H0IqC1nDC03Ejcr
DVUzXSjUOd0W3LtTwMd9A2LkJm770G1PxRuA5knJL5F9ZxH3+qteOsLQBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTGuJgS6jtz3vnaqV4nFmG/gXABMB8GA1UdIwQY
MBaAFI5jhDJYauYC/w2rZ9CbGVFSToIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wM2M5OWQtOTNjNS00NTA4LWI1NGEt
ZWQzOGM0N2ZiYWM2LzEvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wM2M5OWQtOTNjNS00NTA4LWI1NGEtZWQzOGM0N2ZiYWM2
LzEvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5Mk1lXS
J71EuyqViRqA1EDZYZ7sSVNM5E62eEul3CJ6o8rK3X+mDmMaWN7+KayTS72b6oyu
zHCAusCPVjx8kQleTy0Dhvuh9mnWfZ/DPNLfGbrYOIJ1V7Xxy2XGW10Od4ZmOVT/
4EyGQaOSO60KSyb83NgXh7Z2xQuroTXAD5DhzMb9zQjoHBBNuoXBNMyj5RpbYHh9
vb0/KeP8xxc0SChp9bENrMgJBqqqyJpjKOW1YYOuFz8RiT5ashQBTdYGRJJw+JTa
3bd/VNq8e8HkhfLT1ae+Rq0WydDYqbRCSi/yT2XxI+tDhbxDKAjew7ZLtE8vzE2u
QK2b34vcdnCcKA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:54:51 2026 by rpki-client