Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
File: jP3v7O1c7o8abJN5jlo0tiH23As.mft (raw, json)
Hash identifier: 7LewKri7EdEnkEFLQiXYdcmMtEFhP9Qrggs1c7cLPv4=
Subject key identifier: F8:54:E3:15:ED:4C:B2:BA:EE:DE:53:F8:97:3A:FA:FA:B8:AA:6D:75
Authority key identifier: 8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
Certificate issuer: /CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Certificate serial: 01A1735D1EFC9DD3C796DF7C380AA5A21EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
Manifest number: 0848
Signing time: Sun 25 Oct 2026 14:00:44 +0000
Manifest this update: Sun 25 Oct 2026 14:00:44 +0000
Manifest next update: Mon 26 Oct 2026 14:00:44 +0000
Files and hashes: 1: bILTlSPGWMGMY_1Qfmo1vE-bgOc.roa (hash: t48mqB2NaYieA0CKr3J9wx4iPJRQZqgCszx9KbMiWRM=)
2: d_e_JyIjKLPMENo5L-8CUih_VYg.asa (hash: y4fScZgWsT2DmITy30uJ8yrcaHxFdDvaL2MnILNovdw=)
3: jP3v7O1c7o8abJN5jlo0tiH23As.crl (hash: VDD49EMjhk/lCfNq78Li9LBLGD2k+FVv8sVjzOiIRVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:5d:1e:fc:9d:d3:c7:96:df:7c:38:0a:a5:a2:1e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Validity
Not Before: Oct 25 14:00:44 2026 GMT
Not After : Oct 26 14:00:44 2026 GMT
Subject: CN=f854e315ed4cb2baeede53f8973afafab8aa6d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7e:e3:62:b7:26:f2:b1:e9:48:87:d3:70:ea:
28:86:9c:e7:ca:73:fa:39:d1:4e:e3:48:fc:e0:76:
15:03:62:eb:e6:4c:33:c2:f7:5a:19:cc:04:67:13:
1f:1f:4a:f4:e5:bf:38:aa:d4:cc:79:14:49:92:ff:
f5:fb:09:5e:fd:62:0e:0e:66:9a:94:b9:2a:d1:ae:
a5:87:f6:0a:00:06:a7:4e:56:a1:65:92:f5:03:17:
56:d5:26:75:32:0e:11:f3:8d:82:b5:40:fa:38:1b:
d7:83:2a:f3:74:b5:b0:97:25:dd:48:00:e4:be:8d:
c8:de:f7:6d:e5:4b:4b:bd:63:bb:a0:a6:b9:27:4e:
90:05:c2:49:37:f3:58:8d:35:37:cd:2d:be:bf:47:
0a:48:d0:a4:3b:7a:af:a8:91:e1:d6:fc:5b:e2:8a:
3d:3e:ed:ff:8e:13:26:b0:4c:1c:56:e1:75:35:50:
6e:15:d1:70:ce:57:9a:89:01:7b:1a:89:14:20:b6:
99:e0:c4:66:13:99:0f:65:52:dc:01:e7:2f:94:9b:
e7:37:65:b7:ba:f1:f4:46:8f:f3:ee:91:e6:f4:4e:
1e:08:1d:11:8f:83:e8:8b:2c:09:a3:4b:84:30:d1:
e2:96:5d:8e:34:02:77:d2:24:50:45:bb:05:3b:af:
4c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:54:E3:15:ED:4C:B2:BA:EE:DE:53:F8:97:3A:FA:FA:B8:AA:6D:75
X509v3 Authority Key Identifier:
keyid:8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:08:68:f2:89:8c:2d:8b:bf:34:8f:d7:cf:3d:87:a0:80:cb:
9b:5e:8a:31:f5:00:f7:03:97:52:71:02:a5:1b:4c:e6:86:ba:
09:7f:14:2b:d8:63:de:97:c0:8e:bb:82:ce:ce:e3:5a:73:4f:
a0:9c:49:ba:a1:f5:c1:d2:ef:72:35:c9:79:f2:a2:a3:f5:29:
af:45:f8:4b:e8:68:be:aa:09:ce:a8:e1:7c:85:37:39:c5:4a:
8d:9e:75:24:51:bb:bb:78:7b:9d:dc:4a:4b:60:5b:ac:1e:cf:
7e:2b:28:2e:6f:7f:ab:4d:25:c6:4c:73:ab:e0:fa:2c:88:d4:
df:34:6f:76:a5:b0:53:70:2a:a8:42:c9:c5:f0:22:0b:62:b3:
6c:7c:79:65:53:af:61:f5:65:68:c3:7a:66:52:3e:48:fb:20:
0d:e7:9e:5d:09:2d:38:57:f8:2d:76:c8:3d:bd:3f:0e:af:f9:
53:ff:24:c1:b7:12:25:6e:92:bb:9d:e7:ea:70:d0:8e:8c:88:
b5:b3:10:f3:d8:eb:18:34:b0:45:7c:95:3d:59:f9:2b:b1:0d:
ba:01:0e:b1:d1:d3:2e:fe:0a:45:f3:d0:28:09:13:3f:75:a4:
38:1b:a7:01:37:af:64:4f:a4:a3:32:1c:e3:0d:7f:ea:11:07:
9d:fd:14:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFzXR78ndPHlt98OAqloh7qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZmRlZmVjZWQ1Y2VlOGYxYTZjOTM3OThlNWEzNGI2MjFm
NmRjMGIwHhcNMjYxMDI1MTQwMDQ0WhcNMjYxMDI2MTQwMDQ0WjAzMTEwLwYDVQQD
EyhmODU0ZTMxNWVkNGNiMmJhZWVkZTUzZjg5NzNhZmFmYWI4YWE2ZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH7jYrcm8rHpSIfTcOoohpznynP6
OdFO40j84HYVA2Lr5kwzwvdaGcwEZxMfH0r05b84qtTMeRRJkv/1+wle/WIODmaa
lLkq0a6lh/YKAAanTlahZZL1AxdW1SZ1Mg4R842CtUD6OBvXgyrzdLWwlyXdSADk
vo3I3vdt5UtLvWO7oKa5J06QBcJJN/NYjTU3zS2+v0cKSNCkO3qvqJHh1vxb4oo9
Pu3/jhMmsEwcVuF1NVBuFdFwzleaiQF7GokUILaZ4MRmE5kPZVLcAecvlJvnN2W3
uvH0Ro/z7pHm9E4eCB0Rj4PoiywJo0uEMNHill2ONAJ30iRQRbsFO69MZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhU4xXtTLK67t5T+Jc6+vq4qm11MB8GA1UdIwQY
MBaAFIz97+ztXO6PGmyTeY5aNLYh9twLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalAzdjdPMWM3bzhhYkpONWpsbzB0aUgyM0FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS85ZmI3YWItZjNjYi00N2ZjLTlhMTQt
MDZjZGViMzhmN2I2LzEvalAzdjdPMWM3bzhhYkpONWpsbzB0aUgyM0FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS85ZmI3YWItZjNjYi00N2ZjLTlhMTQtMDZjZGViMzhmN2I2
LzEvalAzdjdPMWM3bzhhYkpONWpsbzB0aUgyM0FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggho8omM
LYu/NI/Xzz2HoIDLm16KMfUA9wOXUnECpRtM5oa6CX8UK9hj3pfAjruCzs7jWnNP
oJxJuqH1wdLvcjXJefKio/Upr0X4S+hovqoJzqjhfIU3OcVKjZ51JFG7u3h7ndxK
S2BbrB7PfisoLm9/q00lxkxzq+D6LIjU3zRvdqWwU3AqqELJxfAiC2KzbHx5ZVOv
YfVlaMN6ZlI+SPsgDeeeXQktOFf4LXbIPb0/Dq/5U/8kwbcSJW6Su53n6nDQjoyI
tbMQ89jrGDSwRXyVPVn5K7ENugEOsdHTLv4KRfPQKAkTP3WkOBunATevZE+kozIc
4w1/6hEHnf0Uyw==
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:07:43 2026 by rpki-client