Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
File: jDath5xkWu6YrEqJ_IALmpdOlB8.mft (raw, json)
Hash identifier: R8bn0GeQsB4Zgo9Qf1Hs28vtUGLf2Rv/TZfjJxJa6eU=
Subject key identifier: B0:2B:6B:A9:99:69:65:40:25:44:B4:35:E6:1C:43:94:45:9E:4B:72
Authority key identifier: 8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
Certificate issuer: /CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Certificate serial: 01A183ACF828B4A465C32F7EE82B1EE1E43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
Manifest number: 1ACA
Signing time: Wed 28 Oct 2026 18:01:53 +0000
Manifest this update: Wed 28 Oct 2026 18:01:53 +0000
Manifest next update: Thu 29 Oct 2026 18:01:53 +0000
Files and hashes: 1: QF8uybwGJvFTI6zPZaEwMnyLJao.roa (hash: pGY0CFO2xra97YkiSL42DPsL5Et7lf+M4AGkIXR7mbM=)
2: jDath5xkWu6YrEqJ_IALmpdOlB8.crl (hash: yezF5IHts7oFpIowb/YThEZL6159oqCzI1aeyu3NXPs=)
3: sVQfoQUtytZsvgvmAfEIvvKahSg.roa (hash: bzMbXKVYhkySvKWCrR/MwrdgAwPkPzpxm3VIOmD3ao4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:f8:28:b4:a4:65:c3:2f:7e:e8:2b:1e:e1:e4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Validity
Not Before: Oct 28 18:01:53 2026 GMT
Not After : Oct 29 18:01:53 2026 GMT
Subject: CN=b02b6ba9996965402544b435e61c4394459e4b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:2b:a2:d8:b5:dd:be:7a:c7:2c:bf:ff:7f:
b5:5b:74:56:0a:da:9e:b5:38:b9:bd:52:91:1f:e9:
8f:f0:f7:25:0a:35:e8:fe:7f:86:fc:95:b7:b7:0a:
4a:78:ff:4e:9d:3f:01:6f:11:34:c1:fe:5e:95:47:
9a:41:d7:86:e7:7d:fb:64:9d:a7:0f:20:b0:71:35:
cd:92:8a:54:84:9c:71:54:1c:b1:d6:30:88:7d:44:
47:c0:3c:fd:50:6f:d2:88:2a:8c:87:6e:86:0a:6f:
b6:7e:ff:d3:f0:5c:d3:5c:e7:66:60:4a:a8:36:ac:
f5:0d:12:26:6e:66:fa:b8:73:22:a5:e2:e0:6b:6d:
14:94:77:be:0b:fb:16:49:11:4c:72:eb:8f:f2:74:
a0:fe:f1:3c:49:fc:65:fc:01:35:99:fe:e6:9f:d5:
36:91:4c:fc:3f:1c:eb:96:a8:b7:9c:61:22:91:b1:
b9:75:09:13:14:61:a8:a9:51:a4:61:54:5e:ef:c3:
38:2c:48:6f:c7:41:f4:4a:5b:82:12:3b:a2:50:26:
61:57:ec:76:8c:12:40:a5:79:8f:03:29:3c:b6:7e:
d0:d9:22:03:7d:2b:20:40:d8:f3:d0:00:a5:41:ce:
9f:e2:84:18:84:15:a6:52:32:cc:49:7c:d6:a1:5f:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2B:6B:A9:99:69:65:40:25:44:B4:35:E6:1C:43:94:45:9E:4B:72
X509v3 Authority Key Identifier:
keyid:8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7a:ba:b7:20:b2:25:de:67:2a:ae:b9:2c:4a:10:38:8e:db:
09:76:cb:2a:48:0d:dd:de:89:b4:fb:45:35:6b:14:0d:fd:4b:
e3:df:c3:bf:88:37:f1:dd:3b:70:e6:37:32:c8:7d:84:ea:2a:
2d:6d:f2:b1:10:b5:95:f1:bf:2f:90:32:0a:91:37:19:e9:67:
8b:52:6d:f2:1d:55:a1:3a:bb:b4:56:02:98:92:06:de:9b:cf:
b9:35:c7:12:b4:d9:b0:65:c9:3d:81:aa:76:ec:1b:9d:d4:51:
b1:45:1e:0c:be:7b:65:dd:1e:02:fa:64:73:38:10:af:d3:85:
a9:77:a7:2e:64:eb:1a:ad:7a:4c:b1:43:cd:63:10:95:5a:4e:
91:ca:b4:1f:52:37:c4:d5:81:94:87:ce:94:77:74:01:31:ff:
1f:37:70:1b:00:47:9e:cc:e6:f4:a5:22:bb:c0:48:88:4c:ba:
5d:18:e7:33:08:62:1f:46:f6:0a:d5:c8:a3:2d:c6:48:7f:7e:
5b:86:cb:f1:54:59:bf:8e:17:50:e8:63:a3:1e:66:22:24:9f:
ea:26:ad:68:d5:84:04:d1:28:29:b1:91:84:dc:8b:96:20:08:
6c:0f:62:67:de:3f:40:ef:37:7c:01:17:61:59:c1:cb:4a:af:
ab:86:6a:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGDrPgotKRlwy9+6Cse4eQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMzZhZDg3OWM2NDVhZWU5OGFjNGE4OWZjODAwYjlhOTc0
ZTk0MWYwHhcNMjYxMDI4MTgwMTUzWhcNMjYxMDI5MTgwMTUzWjAzMTEwLwYDVQQD
EyhiMDJiNmJhOTk5Njk2NTQwMjU0NGI0MzVlNjFjNDM5NDQ1OWU0YjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv88roti13b56xyy//3+1W3RWCtqe
tTi5vVKRH+mP8PclCjXo/n+G/JW3twpKeP9OnT8BbxE0wf5elUeaQdeG5337ZJ2n
DyCwcTXNkopUhJxxVByx1jCIfURHwDz9UG/SiCqMh26GCm+2fv/T8FzTXOdmYEqo
Nqz1DRImbmb6uHMipeLga20UlHe+C/sWSRFMcuuP8nSg/vE8Sfxl/AE1mf7mn9U2
kUz8Pxzrlqi3nGEikbG5dQkTFGGoqVGkYVRe78M4LEhvx0H0SluCEjuiUCZhV+x2
jBJApXmPAyk8tn7Q2SIDfSsgQNjz0AClQc6f4oQYhBWmUjLMSXzWoV+xywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAra6mZaWVAJUS0NeYcQ5RFnktyMB8GA1UdIwQY
MBaAFIw2rYecZFrumKxKifyAC5qXTpQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakRhdGg1eGtXdTZZckVxSl9JQUxtcGRPbEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mNjYzYTMtNjg0ZS00Nzc5LTg4Yjkt
MTRlNmVjMDIwYmZhLzEvakRhdGg1eGtXdTZZckVxSl9JQUxtcGRPbEI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9mNjYzYTMtNjg0ZS00Nzc5LTg4YjktMTRlNmVjMDIwYmZh
LzEvakRhdGg1eGtXdTZZckVxSl9JQUxtcGRPbEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHq6tyCy
Jd5nKq65LEoQOI7bCXbLKkgN3d6JtPtFNWsUDf1L49/Dv4g38d07cOY3Msh9hOoq
LW3ysRC1lfG/L5AyCpE3Gelni1Jt8h1VoTq7tFYCmJIG3pvPuTXHErTZsGXJPYGq
duwbndRRsUUeDL57Zd0eAvpkczgQr9OFqXenLmTrGq16TLFDzWMQlVpOkcq0H1I3
xNWBlIfOlHd0ATH/HzdwGwBHnszm9KUiu8BIiEy6XRjnMwhiH0b2CtXIoy3GSH9+
W4bL8VRZv44XUOhjox5mIiSf6iataNWEBNEoKbGRhNyLliAIbA9iZ94/QO83fAEX
YVnBy0qvq4ZqAg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 22:49:45 2026 by rpki-client