Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
File: JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft (raw, json)
Hash identifier: 9Yn/w0NQzg7iTrJ/ipuYLrbiVZBv6pQAAv8OU8fWHR4=
Subject key identifier: 83:46:D5:AF:77:0B:0E:36:D9:94:96:0A:A8:66:A3:D1:4B:5B:EC:79
Authority key identifier: 25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
Certificate issuer: /CN=255633182ddd558b41ba16c519ee461450ddddd9
Certificate serial: 01A11116CD1563765E777A2AAF1D110EA843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
Manifest number: 04B8
Signing time: Tue 06 Oct 2026 12:01:09 +0000
Manifest this update: Tue 06 Oct 2026 12:01:09 +0000
Manifest next update: Wed 07 Oct 2026 12:01:09 +0000
Files and hashes: 1: 0B6H5zkrFMKoeXCuwx2WOB_Z6tU.roa (hash: AMOeY2WBqIDOZyan24GKWqLsMD/oVDxNwHTF+9g2L3g=)
2: JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl (hash: Zxsv9kzJTBsvDvamKzals+DEVjB2wDKO0ZiB5Tx4/fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:16:cd:15:63:76:5e:77:7a:2a:af:1d:11:0e:a8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255633182ddd558b41ba16c519ee461450ddddd9
Validity
Not Before: Oct 6 12:01:09 2026 GMT
Not After : Oct 7 12:01:09 2026 GMT
Subject: CN=8346d5af770b0e36d994960aa866a3d14b5bec79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:d3:4d:c0:f4:6b:3f:20:8f:6f:38:e6:87:
75:31:bd:05:df:72:68:62:47:c8:83:55:c2:cd:55:
b5:3e:22:76:b4:b9:36:16:d4:20:18:98:f9:96:02:
d6:59:f5:f1:c4:91:69:ea:79:a2:27:f1:51:2c:4b:
22:50:9d:48:99:b7:6b:c8:80:0a:05:86:7f:1b:df:
28:85:ae:ce:b0:89:0d:78:14:31:c2:29:5e:43:88:
1a:6d:d4:6f:b8:09:43:d4:fa:be:64:f1:dc:46:f3:
ca:17:94:2b:d7:e0:94:fa:22:5f:cd:4c:66:23:07:
4e:7c:2e:9b:2c:5e:20:e2:42:5b:1a:31:76:4a:0b:
b4:58:7b:24:92:ed:1d:c8:a7:19:86:c8:ac:85:99:
d9:dd:1e:ec:68:46:a8:d6:f9:b0:7a:b3:47:84:92:
40:c8:3b:97:cc:3f:01:4c:a7:83:bb:a1:cf:d5:95:
6b:8c:b7:fc:19:b8:48:af:b8:3c:6c:ae:86:b4:f9:
1a:90:23:e7:b0:fc:95:7b:70:66:c0:f1:9a:0f:ea:
29:33:b7:c0:e3:61:d7:81:30:60:bb:cc:3b:34:a9:
15:9a:3a:34:0f:9c:62:13:fa:6e:ce:ec:22:a4:4f:
06:70:28:32:13:9a:9c:f8:88:76:1a:2a:bf:8d:47:
4b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:46:D5:AF:77:0B:0E:36:D9:94:96:0A:A8:66:A3:D1:4B:5B:EC:79
X509v3 Authority Key Identifier:
keyid:25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d8:fb:55:5a:22:c4:77:a9:82:5b:d5:41:b4:da:7b:da:0b:
d5:58:4b:da:dc:36:90:09:c1:48:82:27:ae:45:fd:5d:64:f3:
67:92:34:d5:87:d4:19:6d:5f:9d:35:46:a8:95:64:68:32:9e:
ff:52:26:60:83:0d:ae:96:cc:f6:fb:96:ea:f7:9d:a0:24:ea:
ae:8a:e4:e0:cd:96:1c:ff:52:d9:f8:dc:e6:53:a4:5f:63:0a:
8b:fb:39:91:4d:62:25:1d:f1:95:3b:d7:ea:e1:33:83:2d:63:
cb:bf:3b:a8:83:71:8e:55:eb:4b:52:0e:bf:ce:96:6e:f2:3c:
f5:51:02:05:87:39:c4:ec:e2:c7:3e:de:ce:92:ae:0d:27:8b:
50:0b:89:73:a1:e4:cb:8d:f5:f5:c4:18:ea:ff:e8:e9:e7:21:
c5:98:13:93:01:90:56:b8:d2:83:e6:83:cb:49:8c:2e:e9:53:
4a:e2:bb:d6:0f:ba:b2:22:65:17:f8:75:71:06:ed:a1:6c:df:
f5:e6:44:9b:7f:a2:f8:1c:2c:54:b3:7e:28:43:e4:2d:55:31:
b8:77:f9:07:7e:4a:b7:44:39:ee:16:d0:38:cf:48:fc:58:91:
5a:0c:13:37:0c:0e:d1:6f:9d:79:14:7f:67:36:67:c2:1b:da:
e8:e3:42:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaERFs0VY3Zed3oqrx0RDqhDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NTYzMzE4MmRkZDU1OGI0MWJhMTZjNTE5ZWU0NjE0NTBk
ZGRkZDkwHhcNMjYxMDA2MTIwMTA5WhcNMjYxMDA3MTIwMTA5WjAzMTEwLwYDVQQD
Eyg4MzQ2ZDVhZjc3MGIwZTM2ZDk5NDk2MGFhODY2YTNkMTRiNWJlYzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu97TTcD0az8gj2845od1Mb0F33Jo
YkfIg1XCzVW1PiJ2tLk2FtQgGJj5lgLWWfXxxJFp6nmiJ/FRLEsiUJ1ImbdryIAK
BYZ/G98oha7OsIkNeBQxwileQ4gabdRvuAlD1Pq+ZPHcRvPKF5Qr1+CU+iJfzUxm
IwdOfC6bLF4g4kJbGjF2Sgu0WHskku0dyKcZhsishZnZ3R7saEao1vmwerNHhJJA
yDuXzD8BTKeDu6HP1ZVrjLf8GbhIr7g8bK6GtPkakCPnsPyVe3BmwPGaD+opM7fA
42HXgTBgu8w7NKkVmjo0D5xiE/puzuwipE8GcCgyE5qc+Ih2Giq/jUdLmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFING1a93Cw422ZSWCqhmo9FLW+x5MB8GA1UdIwQY
MBaAFCVWMxgt3VWLQboWxRnuRhRQ3d3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lZmViMWEtMjliNS00NGE2LTkyZWEt
NWI1NDFmMzQ3MzJlLzEvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lZmViMWEtMjliNS00NGE2LTkyZWEtNWI1NDFmMzQ3MzJl
LzEvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdj7VVoi
xHepglvVQbTae9oL1VhL2tw2kAnBSIInrkX9XWTzZ5I01YfUGW1fnTVGqJVkaDKe
/1ImYIMNrpbM9vuW6vedoCTqrork4M2WHP9S2fjc5lOkX2MKi/s5kU1iJR3xlTvX
6uEzgy1jy787qINxjlXrS1IOv86WbvI89VECBYc5xOzixz7ezpKuDSeLUAuJc6Hk
y4319cQY6v/o6echxZgTkwGQVrjSg+aDy0mMLulTSuK71g+6siJlF/h1cQbtoWzf
9eZEm3+i+BwsVLN+KEPkLVUxuHf5B35Kt0Q57hbQOM9I/FiRWgwTNwwO0W+deRR/
ZzZnwhva6ONCxg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 14:54:28 2026 by rpki-client