Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
File: jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft (raw, json)
Hash identifier: lmPEIi4IcjfY4aL+RgQ3rG8o53kn9oaIkZqbwf1NLNc=
Subject key identifier: 3C:34:F1:51:33:BA:3B:15:A0:5A:1C:45:C7:00:04:78:5B:0E:74:45
Authority key identifier: 8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
Certificate issuer: /CN=8cc44984c686f2018c48102a284ab5a80f52a646
Certificate serial: 01A15C30F266FEA1B185A4853ECFF79C4016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
Manifest number: 0209
Signing time: Wed 21 Oct 2026 02:01:13 +0000
Manifest this update: Wed 21 Oct 2026 02:01:13 +0000
Manifest next update: Thu 22 Oct 2026 02:01:13 +0000
Files and hashes: 1: DXFnpgsoAJDSh1GQIY3dLsC542M.roa (hash: aPR1e33+9EP8BG3ZvfZllvca2KoUBSV0RYS/0Gf7RO0=)
2: ZH79cfZtvswrSRgEB8rNyMLIncU.roa (hash: GdJB3BYjUYCwb6ugCMPQc81N/mokOXiUDJJvBJrnEFI=)
3: jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl (hash: aCHL4g1wZxqDHeXnKqrHfkf2h3DJL2ddaReECOaxE+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:30:f2:66:fe:a1:b1:85:a4:85:3e:cf:f7:9c:40:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc44984c686f2018c48102a284ab5a80f52a646
Validity
Not Before: Oct 21 02:01:13 2026 GMT
Not After : Oct 22 02:01:13 2026 GMT
Subject: CN=3c34f15133ba3b15a05a1c45c70004785b0e7445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:f9:27:9b:67:b7:9e:fc:1e:b8:0f:d2:06:
27:87:81:2c:74:97:be:90:4e:0e:b7:4b:21:9a:98:
58:8e:bf:0b:85:d8:5a:6e:51:0b:f4:ba:3f:81:9e:
29:9f:e2:82:42:a3:8f:84:85:32:a7:89:42:85:be:
67:27:74:6d:39:e1:e6:ae:c8:77:a6:cb:a4:62:97:
9e:83:88:e1:e0:a3:62:81:a0:c0:61:8f:60:01:02:
f2:4d:92:9a:32:f4:32:e6:5e:fe:4f:95:82:01:00:
45:20:ea:fc:0a:a9:28:24:cd:94:c1:6f:a4:6d:cb:
ed:31:d3:50:29:78:2a:76:54:54:4e:f6:5a:ce:38:
68:bc:8e:15:52:51:c7:55:ca:c5:9b:f1:36:e4:7d:
9a:71:7f:87:33:d8:73:c7:38:4f:21:72:93:d4:39:
50:c8:3d:ec:41:81:c8:c2:f5:6e:ee:29:95:5c:72:
fc:61:7e:65:21:45:83:8d:67:d7:94:8d:44:f7:28:
ea:8f:a0:d5:66:b4:18:27:8d:53:53:02:08:29:67:
1d:56:5c:60:e1:1b:10:1a:bd:de:34:15:ca:f7:7d:
97:fb:ad:a6:c5:f8:0a:38:6d:5b:75:bd:9b:b3:f7:
d4:89:75:71:7d:b8:02:1d:90:82:53:20:5d:b5:77:
19:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:34:F1:51:33:BA:3B:15:A0:5A:1C:45:C7:00:04:78:5B:0E:74:45
X509v3 Authority Key Identifier:
keyid:8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d9:5f:64:39:97:17:f7:fb:28:98:28:c3:c8:07:ad:86:f2:
4b:41:9a:b9:71:84:3d:f3:97:6d:44:10:4f:f4:de:72:a2:db:
cd:d9:98:3d:4f:37:80:58:95:fb:d7:f1:4d:69:fa:df:87:a7:
06:6c:8e:7e:da:81:f4:fe:d9:1c:21:e9:8c:2b:a9:52:28:f2:
64:70:c9:5b:01:93:79:d0:3e:34:6f:2d:d4:e7:35:23:72:08:
50:9e:ee:34:87:cc:b0:21:ef:d0:3a:f9:34:65:0b:1c:e1:e3:
6b:f4:19:f8:6e:54:09:50:9b:a8:a0:f2:06:74:2d:b7:3d:7e:
e0:1a:86:f0:cc:39:25:54:c3:20:09:f9:79:6f:fc:8b:21:9c:
a7:f5:8f:4f:dd:7f:b4:e6:1a:f8:d9:c0:a2:e8:f7:ab:d7:c2:
56:89:e1:6d:91:78:c5:66:f9:96:28:d0:13:e0:34:bd:6f:1a:
88:2f:84:be:68:83:38:e8:2a:91:31:b3:ed:2b:d9:b5:3a:e4:
42:2f:8c:8f:a3:a1:ac:d5:38:c1:cb:f7:5d:5f:7b:d8:f0:d3:
86:b7:81:db:e9:13:ed:71:f4:75:93:47:7c:d5:be:d9:ee:fa:
07:b0:80:1d:09:0a:2d:b6:3e:3a:a0:b3:22:be:27:f3:35:25:
5e:ab:15:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFcMPJm/qGxhaSFPs/3nEAWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjYzQ0OTg0YzY4NmYyMDE4YzQ4MTAyYTI4NGFiNWE4MGY1
MmE2NDYwHhcNMjYxMDIxMDIwMTEzWhcNMjYxMDIyMDIwMTEzWjAzMTEwLwYDVQQD
EygzYzM0ZjE1MTMzYmEzYjE1YTA1YTFjNDVjNzAwMDQ3ODViMGU3NDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyb5J5tnt578HrgP0gYnh4EsdJe+
kE4Ot0shmphYjr8LhdhablEL9Lo/gZ4pn+KCQqOPhIUyp4lChb5nJ3RtOeHmrsh3
psukYpeeg4jh4KNigaDAYY9gAQLyTZKaMvQy5l7+T5WCAQBFIOr8CqkoJM2UwW+k
bcvtMdNQKXgqdlRUTvZazjhovI4VUlHHVcrFm/E25H2acX+HM9hzxzhPIXKT1DlQ
yD3sQYHIwvVu7imVXHL8YX5lIUWDjWfXlI1E9yjqj6DVZrQYJ41TUwIIKWcdVlxg
4RsQGr3eNBXK932X+62mxfgKOG1bdb2bs/fUiXVxfbgCHZCCUyBdtXcZtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDw08VEzujsVoFocRccABHhbDnRFMB8GA1UdIwQY
MBaAFIzESYTGhvIBjEgQKihKtagPUqZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak1SSmhNYUc4Z0dNU0JBcUtFcTFxQTlTcGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81YmE4NWUtMzkzNy00YjBjLTg3ZDkt
YzJmODQ3NDdkNzVmLzEvak1SSmhNYUc4Z0dNU0JBcUtFcTFxQTlTcGtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81YmE4NWUtMzkzNy00YjBjLTg3ZDktYzJmODQ3NDdkNzVm
LzEvak1SSmhNYUc4Z0dNU0JBcUtFcTFxQTlTcGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdlfZDmX
F/f7KJgow8gHrYbyS0GauXGEPfOXbUQQT/TecqLbzdmYPU83gFiV+9fxTWn634en
BmyOftqB9P7ZHCHpjCupUijyZHDJWwGTedA+NG8t1Oc1I3IIUJ7uNIfMsCHv0Dr5
NGULHOHja/QZ+G5UCVCbqKDyBnQttz1+4BqG8Mw5JVTDIAn5eW/8iyGcp/WPT91/
tOYa+NnAouj3q9fCVonhbZF4xWb5lijQE+A0vW8aiC+EvmiDOOgqkTGz7SvZtTrk
Qi+Mj6OhrNU4wcv3XV972PDThreB2+kT7XH0dZNHfNW+2e76B7CAHQkKLbY+OqCz
Ir4n8zUlXqsVMA==
-----END CERTIFICATE-----
Generated at Wed Oct 21 09:27:41 2026 by rpki-client