Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
File: jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft (raw, json)
Hash identifier: QiQ9SHHJG7l4THt/6rjhXn2hhp5cB/HvH7Sj1G9bOws=
Subject key identifier: 5B:D5:89:FE:42:01:C0:1F:08:55:A9:23:E7:93:89:B1:46:A1:06:A7
Authority key identifier: 8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
Certificate issuer: /CN=8cc44984c686f2018c48102a284ab5a80f52a646
Certificate serial: 019F83E84DC882C108086D756F0DF3C27DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
Manifest number: 0114
Signing time: Tue 21 Jul 2026 09:01:07 +0000
Manifest this update: Tue 21 Jul 2026 09:01:07 +0000
Manifest next update: Wed 22 Jul 2026 09:01:07 +0000
Files and hashes: 1: ZH79cfZtvswrSRgEB8rNyMLIncU.roa (hash: GdJB3BYjUYCwb6ugCMPQc81N/mokOXiUDJJvBJrnEFI=)
2: ZRs42qGd3cKFMrGetaE_cEFCL58.roa (hash: QY1vvv3yXpUMazK4C60xrRvy7PbaO26yt177jKe+yzU=)
3: jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl (hash: 9Af4jyojVlNhqf/iF10Lng45ISdimTJyHvD9CLrayP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e8:4d:c8:82:c1:08:08:6d:75:6f:0d:f3:c2:7d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc44984c686f2018c48102a284ab5a80f52a646
Validity
Not Before: Jul 21 09:01:07 2026 GMT
Not After : Jul 22 09:01:07 2026 GMT
Subject: CN=5bd589fe4201c01f0855a923e79389b146a106a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:46:eb:ab:a5:e2:fc:33:84:fd:ad:32:48:
83:8c:e8:3d:db:4b:36:0c:22:e0:e8:9b:7c:6d:09:
be:f7:2e:ae:de:89:00:26:81:dd:7d:02:2e:f2:01:
c2:ff:0f:7f:55:23:c6:e3:6f:00:8c:de:08:33:a5:
16:56:12:45:55:db:8c:1d:25:ba:3f:f8:2b:b5:31:
73:b4:c7:49:d5:2d:43:55:19:cc:b6:93:cf:e4:1f:
43:3b:8b:51:bc:3f:71:35:1a:47:15:82:d7:d6:a2:
c6:77:90:69:50:27:37:ee:05:f7:b7:67:8f:1e:b4:
2a:98:2e:c6:8d:e6:40:02:d3:f1:ca:90:d7:b6:c6:
67:84:77:80:81:e7:51:c4:cb:f2:e9:75:ac:02:a8:
c3:ad:fc:b3:a2:a0:9c:4a:ab:9e:0d:0b:90:28:5f:
e4:4f:5f:07:a3:58:15:a1:70:fd:7e:12:b5:7d:48:
b3:46:6b:7e:bb:32:63:68:2b:32:78:55:bc:c9:77:
5e:c0:09:ba:1c:3e:ed:eb:26:ac:f5:08:af:ef:a8:
e3:d6:1a:0f:b8:bd:41:2c:16:d8:97:47:75:18:29:
b9:fa:2e:9c:66:0d:ff:fd:ac:14:a2:fb:91:bd:d3:
d6:81:52:99:9a:69:ef:99:3c:f5:2e:89:d8:bf:46:
fc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D5:89:FE:42:01:C0:1F:08:55:A9:23:E7:93:89:B1:46:A1:06:A7
X509v3 Authority Key Identifier:
keyid:8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:96:c7:89:8a:d6:09:53:98:4f:4b:ba:a4:18:1a:81:ce:d4:
be:1d:58:ae:80:78:86:1b:99:7c:4a:96:88:74:71:af:27:d8:
7e:20:4f:4f:50:fe:2e:67:d4:4d:18:8e:7f:8c:5d:b6:f7:b8:
4d:29:35:f8:14:1a:48:01:20:22:c2:0e:58:11:fc:b0:91:b3:
d6:66:28:59:70:ef:4a:18:13:0f:18:e0:a8:5a:2c:62:45:ed:
90:07:43:d0:b4:37:d0:27:6d:c8:b3:bc:ad:a8:b5:4b:e5:e4:
d0:86:df:7e:73:f9:1c:2b:c2:2b:60:cc:a5:24:f1:2b:f7:d9:
44:64:82:44:34:50:79:f7:07:b6:41:3e:43:af:be:d6:d9:ff:
2b:6e:e4:a2:2c:b1:77:bb:56:ea:0f:22:24:de:70:f9:86:0b:
b5:99:fe:ae:d0:1f:6f:cb:19:c1:66:a0:dd:02:a4:35:90:d1:
41:18:cc:9b:24:b1:dd:86:93:85:6d:68:6b:b2:53:90:f5:ea:
ba:63:30:7b:d6:af:00:cc:23:9e:b6:09:06:fe:36:04:e1:d5:
e6:ff:9f:74:0f:8f:03:f5:d4:a5:6b:fb:2b:19:25:67:31:3e:
8d:dd:b7:96:23:63:a5:9b:cb:9a:70:df:32:02:1a:50:ca:c4:
75:de:15:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+D6E3IgsEICG11bw3zwn26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjYzQ0OTg0YzY4NmYyMDE4YzQ4MTAyYTI4NGFiNWE4MGY1
MmE2NDYwHhcNMjYwNzIxMDkwMTA3WhcNMjYwNzIyMDkwMTA3WjAzMTEwLwYDVQQD
Eyg1YmQ1ODlmZTQyMDFjMDFmMDg1NWE5MjNlNzkzODliMTQ2YTEwNmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMhG66ul4vwzhP2tMkiDjOg920s2
DCLg6Jt8bQm+9y6u3okAJoHdfQIu8gHC/w9/VSPG428AjN4IM6UWVhJFVduMHSW6
P/grtTFztMdJ1S1DVRnMtpPP5B9DO4tRvD9xNRpHFYLX1qLGd5BpUCc37gX3t2eP
HrQqmC7GjeZAAtPxypDXtsZnhHeAgedRxMvy6XWsAqjDrfyzoqCcSqueDQuQKF/k
T18Ho1gVoXD9fhK1fUizRmt+uzJjaCsyeFW8yXdewAm6HD7t6yas9Qiv76jj1hoP
uL1BLBbYl0d1GCm5+i6cZg3//awUovuRvdPWgVKZmmnvmTz1LonYv0b8pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvVif5CAcAfCFWpI+eTibFGoQanMB8GA1UdIwQY
MBaAFIzESYTGhvIBjEgQKihKtagPUqZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak1SSmhNYUc4Z0dNU0JBcUtFcTFxQTlTcGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81YmE4NWUtMzkzNy00YjBjLTg3ZDkt
YzJmODQ3NDdkNzVmLzEvak1SSmhNYUc4Z0dNU0JBcUtFcTFxQTlTcGtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81YmE4NWUtMzkzNy00YjBjLTg3ZDktYzJmODQ3NDdkNzVm
LzEvak1SSmhNYUc4Z0dNU0JBcUtFcTFxQTlTcGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZbHiYrW
CVOYT0u6pBgagc7Uvh1YroB4hhuZfEqWiHRxryfYfiBPT1D+LmfUTRiOf4xdtve4
TSk1+BQaSAEgIsIOWBH8sJGz1mYoWXDvShgTDxjgqFosYkXtkAdD0LQ30CdtyLO8
rai1S+Xk0IbffnP5HCvCK2DMpSTxK/fZRGSCRDRQefcHtkE+Q6++1tn/K27koiyx
d7tW6g8iJN5w+YYLtZn+rtAfb8sZwWag3QKkNZDRQRjMmySx3YaThW1oa7JTkPXq
umMwe9avAMwjnrYJBv42BOHV5v+fdA+PA/XUpWv7KxklZzE+jd23liNjpZvLmnDf
MgIaUMrEdd4VxA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:05:02 2026 by rpki-client