Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier: qPr9JFwA2qFJ/Ho0e5UMt6cmDa8ABHdPpE+NC7OIOfU=
Subject key identifier: 87:AA:42:7E:EF:08:2F:7A:D5:BA:49:31:CD:55:5D:AF:6A:94:E5:BF
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 01A110E0181E93AA4E74262D19E3E22DD0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number: 1A8F
Signing time: Tue 06 Oct 2026 11:01:24 +0000
Manifest this update: Tue 06 Oct 2026 11:01:24 +0000
Manifest next update: Wed 07 Oct 2026 11:01:24 +0000
Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: HMHIr051cqXYGadQwdU+5vjaiF7ySQj8TTECeyZDP54=)
2: gZ_db6GfXmBOp4kcCy-i3uexrlk.roa (hash: ThO+Sk/jrlZwpr+FgeFErC3/Gl+3M/mev1BE/Xmuy2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:e0:18:1e:93:aa:4e:74:26:2d:19:e3:e2:2d:d0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: Oct 6 11:01:24 2026 GMT
Not After : Oct 7 11:01:24 2026 GMT
Subject: CN=87aa427eef082f7ad5ba4931cd555daf6a94e5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:97:3e:b8:58:47:2b:3a:ca:7a:69:ad:f9:e7:
ce:e7:1f:bc:30:1a:ef:db:e4:c1:9d:d7:a9:45:d1:
db:15:24:b5:9c:1b:c0:59:de:e9:1a:9a:da:52:f5:
d2:f3:ec:de:7b:0c:27:d6:c0:5b:95:3f:c8:e5:0c:
89:41:2b:cf:43:9a:f5:97:e1:01:7d:ec:ad:39:fc:
bb:5a:88:08:25:a8:cb:01:ca:6f:c7:dc:2a:31:93:
12:a4:72:96:25:28:7f:0e:c1:34:d0:5c:fb:fe:a4:
ec:ad:86:35:0e:b6:4a:98:3e:d0:45:51:7b:d9:a8:
2b:4a:68:a8:20:7e:3b:a2:b0:7e:85:ec:a0:1c:60:
7a:99:bc:79:d5:61:19:b7:72:9a:ff:45:18:d1:04:
8c:59:d9:61:99:a0:8a:57:e2:ca:cb:30:73:1d:1c:
54:09:4b:1a:1a:53:2e:b2:09:ce:e4:17:73:96:ad:
d5:1c:05:e1:72:0b:97:9e:7c:e8:22:2d:34:c6:94:
c7:a1:b9:0c:35:68:96:35:a8:27:72:5b:2c:96:8b:
1b:f2:14:92:d2:4d:8e:54:20:b9:e0:3f:0c:93:f3:
83:48:27:90:2a:53:a4:f0:9c:3b:99:e3:7e:26:af:
d3:e5:24:c1:a9:61:98:9d:10:87:98:42:6a:10:a4:
b1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AA:42:7E:EF:08:2F:7A:D5:BA:49:31:CD:55:5D:AF:6A:94:E5:BF
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0e:7f:9a:0f:c6:3f:36:ec:40:cc:e8:20:00:19:91:c9:de:
4f:5c:24:99:f0:b0:fd:c5:a7:af:f9:89:2d:61:b7:5f:31:29:
f9:77:24:5d:38:f9:f0:9a:f6:db:9c:08:91:c8:a9:34:3a:1b:
9a:97:7a:49:c2:3a:66:c9:f7:eb:c3:93:ad:66:62:ce:db:cb:
58:3d:40:99:82:eb:16:77:9d:53:5a:e7:1d:52:77:24:24:64:
d3:b3:57:d9:2d:44:ff:31:76:8f:bb:9b:fc:bc:16:f0:b6:ef:
4b:b9:ba:6e:d2:cd:b2:6e:64:19:72:e6:26:cd:9e:3e:dc:1d:
c0:aa:95:54:1f:9f:e3:f6:76:18:34:f0:b1:3b:72:05:b6:61:
d7:73:74:95:0c:5d:93:c6:30:c9:f6:d0:1c:bd:cf:2c:72:fd:
83:32:69:df:ec:51:df:95:42:9e:9a:da:01:97:40:2d:b9:1c:
90:5a:a0:cf:a8:40:2a:14:cd:39:bc:93:05:fd:75:0c:a8:03:
6a:e4:f0:fc:e8:a8:13:98:88:b1:d3:d2:bd:5b:ae:45:f2:dc:
ab:15:cb:23:74:d3:0e:97:cc:ed:38:9f:12:73:b3:c8:84:21:
23:45:3e:5f:c0:5f:a6:f3:05:17:79:d9:18:63:9f:b9:36:90:
80:11:59:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEQ4Bgek6pOdCYtGePiLdD1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZGQyNDc5YmFkY2I0MGEyNGE0MzZiMWVkY2MzNjFjM2Zh
NjJhZmIwHhcNMjYxMDA2MTEwMTI0WhcNMjYxMDA3MTEwMTI0WjAzMTEwLwYDVQQD
Eyg4N2FhNDI3ZWVmMDgyZjdhZDViYTQ5MzFjZDU1NWRhZjZhOTRlNWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15c+uFhHKzrKemmt+efO5x+8MBrv
2+TBndepRdHbFSS1nBvAWd7pGpraUvXS8+zeewwn1sBblT/I5QyJQSvPQ5r1l+EB
feytOfy7WogIJajLAcpvx9wqMZMSpHKWJSh/DsE00Fz7/qTsrYY1DrZKmD7QRVF7
2agrSmioIH47orB+heygHGB6mbx51WEZt3Ka/0UY0QSMWdlhmaCKV+LKyzBzHRxU
CUsaGlMusgnO5Bdzlq3VHAXhcguXnnzoIi00xpTHobkMNWiWNagnclsslosb8hSS
0k2OVCC54D8Mk/ODSCeQKlOk8Jw7meN+Jq/T5STBqWGYnRCHmEJqEKSxNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeqQn7vCC961bpJMc1VXa9qlOW/MB8GA1UdIwQY
MBaAFCfdJHm63LQKJKQ2se3MNhw/pir7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjkwa2VicmN0QW9rcERheDdjdzJIRC1tS3ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83OTRkZTMtMzllNi00ZjJjLTg2ZjEt
YmMyYzQ1M2MwZWM4LzEvSjkwa2VicmN0QW9rcERheDdjdzJIRC1tS3ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83OTRkZTMtMzllNi00ZjJjLTg2ZjEtYmMyYzQ1M2MwZWM4
LzEvSjkwa2VicmN0QW9rcERheDdjdzJIRC1tS3ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQ5/mg/G
PzbsQMzoIAAZkcneT1wkmfCw/cWnr/mJLWG3XzEp+XckXTj58Jr225wIkcipNDob
mpd6ScI6Zsn368OTrWZiztvLWD1AmYLrFnedU1rnHVJ3JCRk07NX2S1E/zF2j7ub
/LwW8LbvS7m6btLNsm5kGXLmJs2ePtwdwKqVVB+f4/Z2GDTwsTtyBbZh13N0lQxd
k8YwyfbQHL3PLHL9gzJp3+xR35VCnpraAZdALbkckFqgz6hAKhTNObyTBf11DKgD
auTw/OioE5iIsdPSvVuuRfLcqxXLI3TTDpfM7TifEnOzyIQhI0U+X8BfpvMFF3nZ
GGOfuTaQgBFZbQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:33:53 2026 by rpki-client