Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.mft
File: jh2gFsQyBxOU1vaZrX7iQPvAd3o.mft (raw, json)
Hash identifier: AIo9nRe+lxhwoWQQosqAXNztAa1C2hSybcblzKYJN0Y=
Subject key identifier: B2:0C:49:EA:19:05:D1:D3:35:D6:94:CA:20:CA:6F:82:FD:C7:64:3C
Authority key identifier: 8E:1D:A0:16:C4:32:07:13:94:D6:F6:99:AD:7E:E2:40:FB:C0:77:7A
Certificate issuer: /CN=8e1da016c432071394d6f699ad7ee240fbc0777a
Certificate serial: 01A160E8CED7D10A55F825489A118B6DDED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh2gFsQyBxOU1vaZrX7iQPvAd3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.mft
Manifest number: 0130
Signing time: Thu 22 Oct 2026 00:00:32 +0000
Manifest this update: Thu 22 Oct 2026 00:00:32 +0000
Manifest next update: Fri 23 Oct 2026 00:00:32 +0000
Files and hashes: 1: XJya-NN--kVHLC8Eeq45UT2PGho.roa (hash: u0qg1SxkbakG4KokOoISrPOk++v8JDawI8U08mxXhpk=)
2: jh2gFsQyBxOU1vaZrX7iQPvAd3o.crl (hash: MndoE7hHwra/XTLgTZA2p6HBc3HqDgy4INzJmXy+e9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jh2gFsQyBxOU1vaZrX7iQPvAd3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:e8:ce:d7:d1:0a:55:f8:25:48:9a:11:8b:6d:de:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1da016c432071394d6f699ad7ee240fbc0777a
Validity
Not Before: Oct 22 00:00:32 2026 GMT
Not After : Oct 23 00:00:32 2026 GMT
Subject: CN=b20c49ea1905d1d335d694ca20ca6f82fdc7643c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cb:07:55:ec:94:64:3e:09:c6:d0:62:b1:e6:
a2:98:a3:1f:d8:af:f1:86:80:35:fa:65:c3:dc:c1:
e0:2e:45:8c:d3:4c:b4:e7:fc:5e:5a:f5:4a:fd:4d:
13:77:86:60:92:ad:bc:74:3c:75:24:c3:eb:ae:e8:
a4:a4:ff:b5:2a:de:e5:9e:e1:9e:2d:13:d7:97:69:
43:6b:86:34:21:63:de:27:87:db:69:70:e4:1c:98:
04:ef:9f:05:02:74:c1:b4:9a:5d:cd:37:64:68:45:
64:8e:41:0c:cd:b4:59:dd:b8:f7:d1:24:50:cc:26:
fc:86:66:0c:dd:9e:0a:7f:65:2c:32:87:22:28:14:
da:ab:a8:42:94:e1:59:cc:6d:26:c8:01:3b:15:3b:
9c:1c:3e:70:9c:77:b1:fd:7e:c3:cd:73:69:59:b2:
66:91:63:48:9d:f3:8f:1f:85:6d:d5:10:d5:11:f7:
8f:33:14:f2:de:4f:1f:04:a5:4a:40:0b:e2:b7:e6:
6a:39:40:c3:6e:74:33:9b:c3:c8:12:00:ef:ff:71:
e3:8d:57:68:eb:b1:ac:c4:80:72:fc:aa:23:59:8e:
c1:8f:35:8b:10:48:fd:9b:66:7d:f9:0a:cf:a5:8a:
2a:a5:7d:36:0c:6c:32:79:01:89:06:b0:19:0a:ea:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0C:49:EA:19:05:D1:D3:35:D6:94:CA:20:CA:6F:82:FD:C7:64:3C
X509v3 Authority Key Identifier:
keyid:8E:1D:A0:16:C4:32:07:13:94:D6:F6:99:AD:7E:E2:40:FB:C0:77:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh2gFsQyBxOU1vaZrX7iQPvAd3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c8:b7:3f:d5:f8:7f:29:12:79:5c:7c:b8:be:b7:da:e8:60:
df:9a:f9:d4:87:1e:bd:a1:b3:28:fe:5e:d2:6a:4a:59:98:f8:
26:32:60:72:06:a7:ca:89:4e:95:cf:5a:6d:97:08:1d:fb:35:
fb:bd:3b:af:0f:47:1d:4e:f3:c8:ef:39:b4:0b:4d:9c:60:52:
40:1c:c4:fe:1a:8b:40:7b:69:0c:2b:ee:10:24:67:1c:e0:c8:
ed:36:96:0f:c8:20:68:04:3b:a2:d0:76:7d:8a:85:69:98:76:
26:1e:f5:16:83:87:07:4b:d2:b6:95:1d:8e:75:36:9f:98:4d:
a1:0c:fe:6a:9d:88:e0:37:f5:f3:d7:81:8b:37:35:69:aa:99:
17:f0:5b:1a:72:75:cb:f5:3c:41:b8:f8:c6:dc:69:1e:5f:d9:
88:0d:24:2d:48:af:b2:12:d3:6b:f7:89:52:41:1a:b1:4b:33:
e6:8e:58:cc:a4:7f:70:87:4d:b3:65:7a:82:fd:85:0c:51:5a:
81:ff:e2:a0:8c:5f:ae:eb:7f:ce:44:cd:79:b5:49:9f:7b:85:
d9:e6:7e:9d:33:70:ca:f5:16:2e:6b:92:cf:75:d9:7b:b5:c2:
e5:98:a1:92:66:d7:cc:92:b4:58:1f:52:94:3b:a8:2b:3b:80:
0e:ab:32:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFg6M7X0QpV+CVImhGLbd7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWRhMDE2YzQzMjA3MTM5NGQ2ZjY5OWFkN2VlMjQwZmJj
MDc3N2EwHhcNMjYxMDIyMDAwMDMyWhcNMjYxMDIzMDAwMDMyWjAzMTEwLwYDVQQD
EyhiMjBjNDllYTE5MDVkMWQzMzVkNjk0Y2EyMGNhNmY4MmZkYzc2NDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocsHVeyUZD4JxtBiseaimKMf2K/x
hoA1+mXD3MHgLkWM00y05/xeWvVK/U0Td4Zgkq28dDx1JMPrruikpP+1Kt7lnuGe
LRPXl2lDa4Y0IWPeJ4fbaXDkHJgE758FAnTBtJpdzTdkaEVkjkEMzbRZ3bj30SRQ
zCb8hmYM3Z4Kf2UsMociKBTaq6hClOFZzG0myAE7FTucHD5wnHex/X7DzXNpWbJm
kWNInfOPH4Vt1RDVEfePMxTy3k8fBKVKQAvit+ZqOUDDbnQzm8PIEgDv/3HjjVdo
67GsxIBy/KojWY7BjzWLEEj9m2Z9+QrPpYoqpX02DGwyeQGJBrAZCurLOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIMSeoZBdHTNdaUyiDKb4L9x2Q8MB8GA1UdIwQY
MBaAFI4doBbEMgcTlNb2ma1+4kD7wHd6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamgyZ0ZzUXlCeE9VMXZhWnJYN2lRUHZBZDNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjct
ZDAyYWFmYjgzMmM0LzEvamgyZ0ZzUXlCeE9VMXZhWnJYN2lRUHZBZDNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjctZDAyYWFmYjgzMmM0
LzEvamgyZ0ZzUXlCeE9VMXZhWnJYN2lRUHZBZDNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARsi3P9X4
fykSeVx8uL632uhg35r51IcevaGzKP5e0mpKWZj4JjJgcganyolOlc9abZcIHfs1
+707rw9HHU7zyO85tAtNnGBSQBzE/hqLQHtpDCvuECRnHODI7TaWD8ggaAQ7otB2
fYqFaZh2Jh71FoOHB0vStpUdjnU2n5hNoQz+ap2I4Df189eBizc1aaqZF/BbGnJ1
y/U8Qbj4xtxpHl/ZiA0kLUivshLTa/eJUkEasUsz5o5YzKR/cIdNs2V6gv2FDFFa
gf/ioIxfrut/zkTNebVJn3uF2eZ+nTNwyvUWLmuSz3XZe7XC5ZihkmbXzJK0WB9S
lDuoKzuADqsydQ==
-----END CERTIFICATE-----
Generated at Thu Oct 22 03:18:33 2026 by rpki-client