Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File: jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier: JpARqUU29DtQ7Ms0VpJ3oAUCrgMPS5MPQDB0GbSOevE=
Subject key identifier: 76:68:E3:F6:FA:E4:79:6A:6D:0F:F8:50:CA:22:A0:77:26:20:F3:14
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 01A0B9C0ADB54C7059B0B5C9CE09B0AC041E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number: 1A6A
Signing time: Sat 19 Sep 2026 13:00:07 +0000
Manifest this update: Sat 19 Sep 2026 13:00:07 +0000
Manifest next update: Sun 20 Sep 2026 13:00:07 +0000
Files and hashes: 1: NloTUsOLqpfTu8IkwsLGe53OKiM.roa (hash: Txhri0SKfqPnlod2zhIYj6wgCSRlDYus6zsHb7gohlo=)
2: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: tML4ir8ffDALMZFJNh5xmW7aDl/627O/cbkLgUvPz0g=)
3: nbm3hVn9hJgrdxApoYW6_LkAHBw.roa (hash: /jIkd8Myn46sgXnoD9e4Sybc8r78RdvI4H7sLK3ci9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 13:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:c0:ad:b5:4c:70:59:b0:b5:c9:ce:09:b0:ac:04:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Sep 19 13:00:07 2026 GMT
Not After : Sep 20 13:00:07 2026 GMT
Subject: CN=7668e3f6fae4796a6d0ff850ca22a0772620f314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:99:6e:37:1b:d5:fc:72:2f:d5:c6:2f:8b:
4f:fb:49:5c:d9:fe:26:eb:d2:6c:c0:2d:12:e6:ad:
e2:2c:df:83:3a:e4:f1:d3:28:44:49:fb:bd:34:39:
74:91:d1:f6:df:38:73:f1:96:64:a9:d6:f9:7b:23:
82:27:65:ec:91:39:7b:c5:cb:92:99:ed:60:d7:34:
50:1f:2f:83:72:da:a6:c4:3b:12:4a:52:46:f3:3f:
5f:11:31:25:40:2a:c5:56:bd:ef:f9:a7:47:8c:12:
22:c4:ec:ed:56:dc:7f:18:8d:b8:1f:30:9e:f0:1b:
87:bb:cc:8d:8a:a1:ba:37:30:a0:38:e0:83:25:54:
04:0e:60:b6:ca:80:be:2d:9d:6d:b5:69:0d:a2:84:
95:03:5b:83:3d:0c:bd:76:bf:2a:13:15:cc:f1:fb:
43:c2:37:93:76:99:67:ae:40:6f:32:37:eb:9f:8a:
e9:23:92:5c:bd:ee:59:8c:66:92:e3:cd:b4:04:cf:
78:87:a6:44:b5:dc:c6:79:79:f4:03:b7:6e:f9:71:
86:1d:47:6f:17:b5:2c:75:d3:03:ea:ea:9f:ab:11:
1f:96:d5:bb:96:5c:60:93:27:ed:b1:35:c0:75:98:
5d:aa:71:71:8c:0c:8f:89:2c:3d:96:06:04:8d:c2:
83:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:68:E3:F6:FA:E4:79:6A:6D:0F:F8:50:CA:22:A0:77:26:20:F3:14
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:24:d3:33:b6:41:b1:af:f2:0c:8b:50:9d:9a:57:e0:fb:af:
88:b6:4f:16:9a:22:d0:21:59:7d:b8:78:53:39:74:7c:60:8c:
f6:31:ac:d8:c6:d5:a8:da:eb:b9:45:28:3c:60:53:11:d6:fc:
a7:97:25:1c:c5:86:ba:e3:1e:8c:af:e7:15:e2:9e:52:ab:9d:
f6:3e:bc:c8:c8:6e:fa:d4:e0:3b:1d:25:cf:b9:95:93:56:dd:
46:f0:a4:cf:5e:25:1d:20:da:ef:0d:60:36:e5:27:08:74:72:
8d:31:2e:9f:45:12:83:36:ca:12:68:09:28:57:2f:27:82:5d:
2d:30:11:05:59:16:70:47:58:fa:02:a2:52:b2:d9:04:df:ce:
c6:ad:e8:e6:84:3c:1e:0e:7b:ee:7b:55:39:d2:cb:38:fe:7c:
7d:06:a3:2a:78:d1:04:7d:a3:e3:77:50:06:74:02:78:ef:36:
cd:50:13:2c:77:90:6c:bd:bc:4a:2b:e7:f6:2f:41:ea:4c:a3:
3a:5a:13:dd:d5:9b:5b:1a:3b:13:82:b6:9a:4d:d1:75:87:75:
a9:c1:06:1e:dc:0f:81:c3:78:7d:fb:3e:14:eb:a3:b4:02:a4:
9a:21:d4:37:74:ea:1a:f5:5b:af:df:57:a7:41:c6:84:c3:e6:
aa:08:bd:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC5wK21THBZsLXJzgmwrAQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYTAzZTBkMDIwZWZjOTQ0YzFlZWJkYWVlNTQyN2QzNjVi
NzAwNzYwHhcNMjYwOTE5MTMwMDA3WhcNMjYwOTIwMTMwMDA3WjAzMTEwLwYDVQQD
Eyg3NjY4ZTNmNmZhZTQ3OTZhNmQwZmY4NTBjYTIyYTA3NzI2MjBmMzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8WZbjcb1fxyL9XGL4tP+0lc2f4m
69JswC0S5q3iLN+DOuTx0yhESfu9NDl0kdH23zhz8ZZkqdb5eyOCJ2XskTl7xcuS
me1g1zRQHy+DctqmxDsSSlJG8z9fETElQCrFVr3v+adHjBIixOztVtx/GI24HzCe
8BuHu8yNiqG6NzCgOOCDJVQEDmC2yoC+LZ1ttWkNooSVA1uDPQy9dr8qExXM8ftD
wjeTdplnrkBvMjfrn4rpI5Jcve5ZjGaS4820BM94h6ZEtdzGeXn0A7du+XGGHUdv
F7UsddMD6uqfqxEfltW7llxgkyftsTXAdZhdqnFxjAyPiSw9lgYEjcKD8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZo4/b65HlqbQ/4UMoioHcmIPMUMB8GA1UdIwQY
MBaAFI2gPg0CDvyUTB7r2u5UJ9NltwB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamFBLURRSU9fSlJNSHV2YTdsUW4wMlczQUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81NjIxMTItYWQ0NC00ZDcxLTljYjkt
ZmI3ZDdkY2EzNGE3LzEvamFBLURRSU9fSlJNSHV2YTdsUW4wMlczQUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS81NjIxMTItYWQ0NC00ZDcxLTljYjktZmI3ZDdkY2EzNGE3
LzEvamFBLURRSU9fSlJNSHV2YTdsUW4wMlczQUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCTTM7ZB
sa/yDItQnZpX4PuviLZPFpoi0CFZfbh4Uzl0fGCM9jGs2MbVqNrruUUoPGBTEdb8
p5clHMWGuuMejK/nFeKeUqud9j68yMhu+tTgOx0lz7mVk1bdRvCkz14lHSDa7w1g
NuUnCHRyjTEun0USgzbKEmgJKFcvJ4JdLTARBVkWcEdY+gKiUrLZBN/Oxq3o5oQ8
Hg577ntVOdLLOP58fQajKnjRBH2j43dQBnQCeO82zVATLHeQbL28Sivn9i9B6kyj
OloT3dWbWxo7E4K2mk3RdYd1qcEGHtwPgcN4ffs+FOujtAKkmiHUN3TqGvVbr99X
p0HGhMPmqgi9Hg==
-----END CERTIFICATE-----
Generated at Sat Sep 19 23:29:11 2026 by rpki-client