Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/aa8ea7-db5e-41db-b06f-519dac4978db/1/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.mft
File: J0Iy77IGLdU0cDfKyAiEvIIs3Oo.mft (raw, json)
Hash identifier: fI9jTIv6D9WYasmOVG2L+BYz6BNlrAz1pxVTJVCeJro=
Subject key identifier: 54:D1:08:F3:3C:2D:D3:26:A8:A1:FE:BE:C4:0D:4C:AC:30:70:BE:1D
Authority key identifier: 27:42:32:EF:B2:06:2D:D5:34:70:37:CA:C8:08:84:BC:82:2C:DC:EA
Certificate issuer: /CN=274232efb2062dd5347037cac80884bc822cdcea
Certificate serial: 01A17B4D0FBB061FDA6617559F81CEB0A97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/aa8ea7-db5e-41db-b06f-519dac4978db/1/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.mft
Manifest number: 16
Signing time: Tue 27 Oct 2026 03:00:09 +0000
Manifest this update: Tue 27 Oct 2026 03:00:09 +0000
Manifest next update: Wed 28 Oct 2026 03:00:09 +0000
Files and hashes: 1: HY8mhm7cAwVxwn1sa30Z2I8_ets.roa (hash: MePkLF8n0SZirWzMo78YzmFOf644N/xtApic5JezPBE=)
2: J0Iy77IGLdU0cDfKyAiEvIIs3Oo.crl (hash: apO28OYPlRt5Hliv8xk6H0vdHUu/8+KOqJUl4hwQMoE=)
3: KhkSS7SsuPahDMyQ6p0fpBlg65U.roa (hash: 0trZB/QVKU0LWD92RiD0AbJlBwU0A/bvATUQLsilyoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/aa8ea7-db5e-41db-b06f-519dac4978db/1/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/aa8ea7-db5e-41db-b06f-519dac4978db/1/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:0f:bb:06:1f:da:66:17:55:9f:81:ce:b0:a9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274232efb2062dd5347037cac80884bc822cdcea
Validity
Not Before: Oct 27 03:00:09 2026 GMT
Not After : Oct 28 03:00:09 2026 GMT
Subject: CN=54d108f33c2dd326a8a1febec40d4cac3070be1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7b:c4:d1:82:cc:f8:e4:19:2c:2a:b1:36:6d:
3c:53:fd:1a:f1:0c:60:e3:1d:e8:db:30:8e:69:0d:
6f:55:f5:e9:85:1a:29:be:45:3c:0f:e8:68:bd:33:
8a:6c:14:da:eb:8c:4f:0f:84:64:bc:f8:6c:90:de:
a6:0e:7d:0d:57:b5:4e:29:66:a7:8f:b8:39:da:cd:
34:ba:6f:a5:ed:87:c4:05:66:d0:4e:85:66:08:62:
08:f5:2a:1a:9c:b1:32:29:10:1e:5f:39:1f:21:ea:
83:ab:37:23:26:7f:cf:10:80:a0:84:b1:de:28:47:
fa:01:7c:c1:7d:1e:5f:ed:29:4f:19:3b:4b:52:eb:
48:68:7e:8a:44:37:3b:1c:7e:bf:6a:13:12:db:04:
66:f9:3a:fc:78:f7:e4:d4:12:81:8c:10:cf:36:32:
50:b2:e2:8e:52:57:ac:bf:be:6a:9e:04:24:86:57:
f9:14:d4:4f:4b:45:dd:b6:b3:15:dc:7c:d5:e3:ac:
18:bc:57:4d:bb:ee:0c:00:08:ba:04:35:39:d1:3e:
04:65:b1:95:30:43:93:0b:3f:bc:fd:da:85:1e:af:
09:6c:80:0a:b4:b9:1f:82:99:dc:a4:ec:49:46:57:
75:6c:69:78:d7:17:95:ac:31:b7:d8:27:2c:95:6e:
c5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D1:08:F3:3C:2D:D3:26:A8:A1:FE:BE:C4:0D:4C:AC:30:70:BE:1D
X509v3 Authority Key Identifier:
keyid:27:42:32:EF:B2:06:2D:D5:34:70:37:CA:C8:08:84:BC:82:2C:DC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/aa8ea7-db5e-41db-b06f-519dac4978db/1/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/aa8ea7-db5e-41db-b06f-519dac4978db/1/J0Iy77IGLdU0cDfKyAiEvIIs3Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f5:5e:a3:58:58:3c:13:e3:14:af:5e:b4:9d:af:04:02:8f:
73:09:c2:fd:ba:b7:2c:b1:7f:56:f7:9a:66:28:c5:ac:83:21:
f6:10:73:47:d9:d0:82:2c:1c:22:fb:17:4d:4a:dd:65:1d:56:
1f:88:b2:d1:71:d2:df:c7:8c:3c:af:a3:25:b9:1d:78:68:07:
73:34:d0:42:ec:89:89:83:b9:56:30:6d:08:aa:cb:42:52:89:
5e:75:ba:17:42:43:5c:05:24:d4:70:b8:f9:99:4d:86:4f:60:
b0:a3:cf:34:68:f5:c7:f3:4c:c5:3a:ee:7b:79:e3:9a:f0:8b:
4b:e6:ec:55:92:f4:10:d2:21:d2:16:6a:81:e1:a3:99:d4:40:
62:03:a6:d8:6a:57:aa:76:3e:22:3e:52:1f:5c:4e:15:57:6d:
ee:c7:22:55:9e:2b:fe:f8:89:3c:08:0c:02:d9:cd:98:81:51:
d2:41:41:09:e5:36:5f:ae:53:ff:3e:5c:9a:73:d9:5f:0f:68:
92:b6:9a:ea:1e:e2:fd:43:2f:e7:46:66:60:c8:e0:83:2a:e4:
35:3c:2d:51:af:7a:f4:61:8e:3b:8d:4c:6f:2e:a0:07:93:06:
02:10:57:1b:7b:86:12:23:d1:ba:b0:f4:89:a1:76:ee:8d:f8:
1c:93:40:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7TQ+7Bh/aZhdVn4HOsKl7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDIzMmVmYjIwNjJkZDUzNDcwMzdjYWM4MDg4NGJjODIy
Y2RjZWEwHhcNMjYxMDI3MDMwMDA5WhcNMjYxMDI4MDMwMDA5WjAzMTEwLwYDVQQD
Eyg1NGQxMDhmMzNjMmRkMzI2YThhMWZlYmVjNDBkNGNhYzMwNzBiZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknvE0YLM+OQZLCqxNm08U/0a8Qxg
4x3o2zCOaQ1vVfXphRopvkU8D+hovTOKbBTa64xPD4RkvPhskN6mDn0NV7VOKWan
j7g52s00um+l7YfEBWbQToVmCGII9SoanLEyKRAeXzkfIeqDqzcjJn/PEICghLHe
KEf6AXzBfR5f7SlPGTtLUutIaH6KRDc7HH6/ahMS2wRm+Tr8ePfk1BKBjBDPNjJQ
suKOUlesv75qngQkhlf5FNRPS0XdtrMV3HzV46wYvFdNu+4MAAi6BDU50T4EZbGV
MEOTCz+8/dqFHq8JbIAKtLkfgpncpOxJRld1bGl41xeVrDG32CcslW7FVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTRCPM8LdMmqKH+vsQNTKwwcL4dMB8GA1UdIwQY
MBaAFCdCMu+yBi3VNHA3ysgIhLyCLNzqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBJeTc3SUdMZFUwY0RmS3lBaUV2SUlzM09vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hYThlYTctZGI1ZS00MWRiLWIwNmYt
NTE5ZGFjNDk3OGRiLzEvSjBJeTc3SUdMZFUwY0RmS3lBaUV2SUlzM09vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9hYThlYTctZGI1ZS00MWRiLWIwNmYtNTE5ZGFjNDk3OGRi
LzEvSjBJeTc3SUdMZFUwY0RmS3lBaUV2SUlzM09vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifVeo1hY
PBPjFK9etJ2vBAKPcwnC/bq3LLF/VveaZijFrIMh9hBzR9nQgiwcIvsXTUrdZR1W
H4iy0XHS38eMPK+jJbkdeGgHczTQQuyJiYO5VjBtCKrLQlKJXnW6F0JDXAUk1HC4
+ZlNhk9gsKPPNGj1x/NMxTrue3njmvCLS+bsVZL0ENIh0hZqgeGjmdRAYgOm2GpX
qnY+Ij5SH1xOFVdt7sciVZ4r/viJPAgMAtnNmIFR0kFBCeU2X65T/z5cmnPZXw9o
kraa6h7i/UMv50ZmYMjggyrkNTwtUa969GGOO41Mby6gB5MGAhBXG3uGEiPRurD0
iaF27o34HJNA1g==
-----END CERTIFICATE-----
Generated at Tue Oct 27 07:18:22 2026 by rpki-client