Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
File: jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft (raw, json)
Hash identifier: eFfLs19avftKxPnHdYwuAvQSkKyZRoghTvQDXGxQ1J4=
Subject key identifier: 93:70:61:EF:F7:63:08:34:E5:6C:9B:7F:35:A9:69:85:DE:A4:3D:F6
Authority key identifier: 8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
Certificate issuer: /CN=8cc44984c686f2018c48102a284ab5a80f52a646
Certificate serial: 019E9A3C19FCFCDB9453F9216DEF966C68A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
Manifest number: 9B
Signing time: Sat 06 Jun 2026 00:01:30 +0000
Manifest this update: Sat 06 Jun 2026 00:01:30 +0000
Manifest next update: Sun 07 Jun 2026 00:01:30 +0000
Files and hashes: 1: ZH79cfZtvswrSRgEB8rNyMLIncU.roa (hash: GdJB3BYjUYCwb6ugCMPQc81N/mokOXiUDJJvBJrnEFI=)
2: ZRs42qGd3cKFMrGetaE_cEFCL58.roa (hash: QY1vvv3yXpUMazK4C60xrRvy7PbaO26yt177jKe+yzU=)
3: jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl (hash: ImXW1V0hQy5vAMMRxv1P0BL1udj4bLW1ZprnuZsUHBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 00:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:3c:19:fc:fc:db:94:53:f9:21:6d:ef:96:6c:68:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc44984c686f2018c48102a284ab5a80f52a646
Validity
Not Before: Jun 6 00:01:30 2026 GMT
Not After : Jun 7 00:01:30 2026 GMT
Subject: CN=937061eff7630834e56c9b7f35a96985dea43df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ea:9d:15:a4:be:df:b0:36:c3:f1:e3:96:6f:
58:8f:2d:58:21:62:2c:9f:60:f2:9f:24:1e:4d:70:
77:54:f9:54:83:e9:f8:e8:70:05:ce:49:ec:b4:63:
b7:bc:5a:c0:43:a8:de:38:47:10:62:66:b5:57:24:
aa:32:be:c8:69:ca:c4:ef:e5:fa:c8:f5:9f:4d:42:
9e:76:f9:4f:b0:57:6e:b4:69:23:8f:74:46:c3:48:
ce:dd:ea:fb:b3:83:fb:32:9e:9b:b7:7b:01:7e:02:
19:0b:e2:33:6b:fa:7a:1a:01:e9:cc:0c:fc:90:df:
b2:17:bb:ec:10:bb:e7:e4:b3:82:21:41:e3:1a:bd:
9c:02:29:04:8c:8a:a5:dc:d3:c5:4f:b4:23:ea:28:
6d:40:a7:be:1c:f6:6d:52:9e:44:9b:85:21:09:21:
2c:1c:22:20:1a:11:5e:7d:07:e8:59:1a:11:63:67:
ba:e3:44:8c:44:33:30:a3:67:8e:d4:4f:ec:ed:6c:
c3:15:cc:93:34:be:70:5f:68:9b:92:39:a1:bb:04:
b0:09:54:b7:91:3b:69:6a:87:27:02:57:3e:ce:67:
40:d4:01:1b:87:68:29:b4:f1:7e:5a:6f:7c:03:91:
b9:c3:35:04:ba:ff:bb:40:a4:dd:d7:80:a7:f9:b8:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:70:61:EF:F7:63:08:34:E5:6C:9B:7F:35:A9:69:85:DE:A4:3D:F6
X509v3 Authority Key Identifier:
keyid:8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f0:15:3d:b2:37:77:d4:42:b1:f6:03:65:e7:97:7b:fa:37:
44:a3:d7:38:43:27:e3:e7:3e:b8:46:3c:58:17:c6:cf:61:a3:
18:24:c4:dc:96:ef:ff:d6:ca:c5:bc:04:4b:43:ad:8b:c5:10:
d9:f0:f6:5a:9c:2d:bc:59:48:f5:a1:33:48:38:41:f5:a0:89:
a4:0a:6b:50:9a:ce:85:22:a2:cb:f1:e0:c7:4c:dc:ae:0a:da:
f4:25:cf:30:06:2a:dc:31:dc:e2:43:47:30:63:f8:52:33:08:
3f:67:35:f9:7e:aa:bd:fa:85:46:10:d3:31:c7:60:bf:fb:82:
6b:e9:b7:7a:3e:ec:3b:3a:52:19:9c:c9:0a:dd:3c:aa:da:75:
b2:60:46:f8:1e:92:0e:1f:41:1c:c4:a5:93:d9:c2:0f:e5:cf:
f1:82:64:50:0b:ee:b3:1d:75:67:13:0e:cb:cd:01:6c:38:f5:
5b:86:7e:54:e8:a7:8e:c6:96:b3:a2:54:7c:f0:17:82:78:c6:
1a:7a:ba:7f:6f:88:21:87:49:e0:9d:c8:61:84:fe:77:39:f9:
a0:01:82:2b:05:f2:f8:c1:a1:62:1b:6c:34:d0:ff:ca:32:56:
f8:b2:3a:52:87:58:47:cc:72:7a:49:41:7c:a2:4b:f9:f6:5d:
ac:2d:84:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6aPBn8/NuUU/khbe+WbGihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjYzQ0OTg0YzY4NmYyMDE4YzQ4MTAyYTI4NGFiNWE4MGY1
MmE2NDYwHhcNMjYwNjA2MDAwMTMwWhcNMjYwNjA3MDAwMTMwWjAzMTEwLwYDVQQD
Eyg5MzcwNjFlZmY3NjMwODM0ZTU2YzliN2YzNWE5Njk4NWRlYTQzZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OqdFaS+37A2w/Hjlm9Yjy1YIWIs
n2DynyQeTXB3VPlUg+n46HAFzknstGO3vFrAQ6jeOEcQYma1VySqMr7IacrE7+X6
yPWfTUKedvlPsFdutGkjj3RGw0jO3er7s4P7Mp6bt3sBfgIZC+Iza/p6GgHpzAz8
kN+yF7vsELvn5LOCIUHjGr2cAikEjIql3NPFT7Qj6ihtQKe+HPZtUp5Em4UhCSEs
HCIgGhFefQfoWRoRY2e640SMRDMwo2eO1E/s7WzDFcyTNL5wX2ibkjmhuwSwCVS3
kTtpaocnAlc+zmdA1AEbh2gptPF+Wm98A5G5wzUEuv+7QKTd14Cn+bgmVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNwYe/3Ywg05WybfzWpaYXepD32MB8GA1UdIwQY
MBaAFIzESYTGhvIBjEgQKihKtagPUqZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak1SSmhNYUc4Z0dNU0JBcUtFcTFxQTlTcGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81YmE4NWUtMzkzNy00YjBjLTg3ZDkt
YzJmODQ3NDdkNzVmLzEvak1SSmhNYUc4Z0dNU0JBcUtFcTFxQTlTcGtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81YmE4NWUtMzkzNy00YjBjLTg3ZDktYzJmODQ3NDdkNzVm
LzEvak1SSmhNYUc4Z0dNU0JBcUtFcTFxQTlTcGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfAVPbI3
d9RCsfYDZeeXe/o3RKPXOEMn4+c+uEY8WBfGz2GjGCTE3Jbv/9bKxbwES0Oti8UQ
2fD2WpwtvFlI9aEzSDhB9aCJpAprUJrOhSKiy/Hgx0zcrgra9CXPMAYq3DHc4kNH
MGP4UjMIP2c1+X6qvfqFRhDTMcdgv/uCa+m3ej7sOzpSGZzJCt08qtp1smBG+B6S
Dh9BHMSlk9nCD+XP8YJkUAvusx11ZxMOy80BbDj1W4Z+VOinjsaWs6JUfPAXgnjG
Gnq6f2+IIYdJ4J3IYYT+dzn5oAGCKwXy+MGhYhtsNND/yjJW+LI6UodYR8xyeklB
fKJL+fZdrC2E5A==
-----END CERTIFICATE-----
Generated at Sat Jun 6 07:01:29 2026 by rpki-client