Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
File: jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft (raw, json)
Hash identifier: hseh0i9vM80VTnEbaCscnlnLzSm23bnPFhnOIGDMWNQ=
Subject key identifier: 57:F5:DB:F9:6D:78:DA:DB:59:2D:35:CA:D3:DD:F4:AD:3E:39:5E:54
Authority key identifier: 8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F
Certificate issuer: /CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
Certificate serial: 01A08AC340CCE497A19F8FB5DDC42850E0CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
Manifest number: 087E
Signing time: Thu 10 Sep 2026 10:00:46 +0000
Manifest this update: Thu 10 Sep 2026 10:00:46 +0000
Manifest next update: Fri 11 Sep 2026 10:00:46 +0000
Files and hashes: 1: jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl (hash: PAqG1ZpZWZltrOyQnDGb/I6VPR0yN8E/LYXCSvHY9yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:40:cc:e4:97:a1:9f:8f:b5:dd:c4:28:50:e0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
Validity
Not Before: Sep 10 10:00:46 2026 GMT
Not After : Sep 11 10:00:46 2026 GMT
Subject: CN=57f5dbf96d78dadb592d35cad3ddf4ad3e395e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:26:ed:9d:35:1f:c6:ea:7f:96:c9:f9:05:f9:
38:46:ca:07:1c:97:82:5e:2f:1b:2d:6c:2a:ef:21:
bc:0f:f1:07:60:eb:61:4c:ea:5f:37:5c:c0:ce:fe:
28:51:f7:91:59:0c:f4:35:b1:f9:9c:ae:ed:e0:b7:
2b:3a:82:ee:5e:b0:21:57:d4:f1:7d:0f:1e:d2:97:
9d:9f:ce:d8:da:03:b5:70:16:5a:c1:fa:f2:d8:39:
d1:ca:e0:96:64:6b:d1:b4:92:86:50:39:08:e1:a6:
8b:5e:12:97:c2:01:7d:17:04:6a:51:67:1d:70:b9:
b1:af:e5:52:43:7d:68:9f:36:2c:0a:9a:70:44:b6:
ad:4c:e7:76:94:74:7a:42:9f:a4:28:dc:d0:b3:54:
24:66:12:5b:b1:f4:ca:28:7f:e1:33:18:b4:6a:37:
5a:9d:56:6d:31:67:dc:61:08:c8:7c:e9:dd:4e:6b:
b2:4e:a6:30:d6:7a:e8:5c:4c:99:a7:38:8c:03:54:
e4:d2:d9:b1:2e:a4:b5:bb:9d:f5:25:e2:c5:1f:2e:
df:2b:91:d1:e8:6b:e2:bc:ff:72:3b:53:ba:b8:79:
b3:75:57:27:8c:8a:75:11:2a:13:a9:0d:ab:83:5b:
e5:7e:27:5c:d5:c6:05:18:72:60:c1:c7:d8:6a:31:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F5:DB:F9:6D:78:DA:DB:59:2D:35:CA:D3:DD:F4:AD:3E:39:5E:54
X509v3 Authority Key Identifier:
keyid:8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b5:11:53:50:72:6d:52:b5:09:56:17:42:43:91:33:50:6d:
f6:bf:9b:4e:b6:22:22:32:f7:e3:2b:f5:39:d1:8d:6c:ba:9c:
f7:00:11:14:29:3b:d0:e9:cc:e0:29:4b:17:36:d4:13:b7:dc:
66:8a:24:95:ac:79:ba:2e:3d:21:51:37:4e:c0:26:4d:fa:a2:
90:2d:1d:39:f1:9c:12:81:7c:15:05:39:c8:66:94:3b:67:07:
1d:72:ee:21:61:dd:f3:44:5e:89:55:8b:77:b6:26:9b:da:bd:
e7:b5:f3:b8:ef:87:fd:8d:5c:aa:00:50:9b:ff:82:20:07:4f:
52:e7:18:d8:8e:7c:86:b5:28:7b:b8:a1:5d:c9:de:0a:41:48:
3b:99:52:ff:c3:a9:9f:c0:94:0c:c2:9a:ab:61:77:70:03:f5:
ce:1b:96:4d:bd:b3:8c:e9:c2:a4:0f:18:f8:f4:e7:2d:a2:66:
d8:fa:32:b9:34:ab:9e:e4:b4:20:6e:39:03:ba:d6:a5:3a:bc:
f7:81:b8:23:87:a0:22:a6:7f:37:e8:c3:73:33:54:b4:82:8b:
7f:d5:67:8a:14:ee:a9:ca:7c:b5:d8:a2:45:bd:2b:24:fc:f4:
dc:7e:3b:73:60:c3:7e:c8:f1:1d:b3:ea:d5:7d:4a:81:c4:38:
b7:b8:0e:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKw0DM5Jehn4+13cQoUODOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOWMwN2U3ZThkZTg1OGIyZTY4MTNkMDBmOWIzOTkyZGY1
MzgyN2YwHhcNMjYwOTEwMTAwMDQ2WhcNMjYwOTExMTAwMDQ2WjAzMTEwLwYDVQQD
Eyg1N2Y1ZGJmOTZkNzhkYWRiNTkyZDM1Y2FkM2RkZjRhZDNlMzk1ZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjybtnTUfxup/lsn5Bfk4RsoHHJeC
Xi8bLWwq7yG8D/EHYOthTOpfN1zAzv4oUfeRWQz0NbH5nK7t4LcrOoLuXrAhV9Tx
fQ8e0pedn87Y2gO1cBZawfry2DnRyuCWZGvRtJKGUDkI4aaLXhKXwgF9FwRqUWcd
cLmxr+VSQ31onzYsCppwRLatTOd2lHR6Qp+kKNzQs1QkZhJbsfTKKH/hMxi0ajda
nVZtMWfcYQjIfOndTmuyTqYw1nroXEyZpziMA1Tk0tmxLqS1u531JeLFHy7fK5HR
6GvivP9yO1O6uHmzdVcnjIp1ESoTqQ2rg1vlfidc1cYFGHJgwcfYajFeUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFf12/lteNrbWS01ytPd9K0+OV5UMB8GA1UdIwQY
MBaAFI2cB+fo3oWLLmgT0A+bOZLfU4J/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalp3SDUtamVoWXN1YUJQUUQ1czVrdDlUZ244LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lMTRlMmEtYTBlYS00M2Q5LWIwNWYt
ZjM2M2M1MTM4NzAyLzEvalp3SDUtamVoWXN1YUJQUUQ1czVrdDlUZ244Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lMTRlMmEtYTBlYS00M2Q5LWIwNWYtZjM2M2M1MTM4NzAy
LzEvalp3SDUtamVoWXN1YUJQUUQ1czVrdDlUZ244LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLURU1By
bVK1CVYXQkORM1Bt9r+bTrYiIjL34yv1OdGNbLqc9wARFCk70OnM4ClLFzbUE7fc
Zooklax5ui49IVE3TsAmTfqikC0dOfGcEoF8FQU5yGaUO2cHHXLuIWHd80ReiVWL
d7Ymm9q957XzuO+H/Y1cqgBQm/+CIAdPUucY2I58hrUoe7ihXcneCkFIO5lS/8Op
n8CUDMKaq2F3cAP1zhuWTb2zjOnCpA8Y+PTnLaJm2PoyuTSrnuS0IG45A7rWpTq8
94G4I4egIqZ/N+jDczNUtIKLf9VnihTuqcp8tdiiRb0rJPz03H47c2DDfsjxHbPq
1X1KgcQ4t7gOVQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:53:10 2026 by rpki-client