Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
File: J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft (raw, json)
Hash identifier: kKBPXMBzZTipn8lwnw1amV3OCVUke6YiinbhOIVdg40=
Subject key identifier: EA:40:D8:F2:30:BA:E0:45:B9:F2:64:D1:97:79:1F:E7:E6:5C:22:EC
Authority key identifier: 27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A
Certificate issuer: /CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
Certificate serial: 01A18B651CEBE8917CFB21DA5C689F2C5B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
Manifest number: 0146
Signing time: Fri 30 Oct 2026 06:00:21 +0000
Manifest this update: Fri 30 Oct 2026 06:00:21 +0000
Manifest next update: Sat 31 Oct 2026 06:00:21 +0000
Files and hashes: 1: AlUMjDs1AMrse1G7Mm4Ls5MOqbg.roa (hash: 1qWTrC8IRHVNBmVAFfK+oN6U6pjXzgDE6zNivII8rew=)
2: FQ-cn1xD6KsvCiukzaSyL7Bi5fs.roa (hash: 9/gq5XTu7uOiRhd+dP7NFtGAPJ4cf/D1aTBzP0UWPcg=)
3: J50zmCtQdo-LbJV1zf8tg_pspRY.roa (hash: rmMwifoRriqaztxBUMCiGtVjFrOwYaPJiXLxhJjafM4=)
4: J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl (hash: vluQoH5pHn0Q1pPvgBAhJLdKUdosUScxZNMfn+O+PzQ=)
5: Jq-ed1QLe89-gO6ULPwLKZ71NmE.roa (hash: 1NLRbyHK8osbUIIyQ+NGdNAbsIQXKp6uKjtiu7OYwC0=)
6: b80T5aKo89J4YEAP6bAiheKe6EY.roa (hash: CLeP0I5fgLyLMgId9gEX6E6rFzYBTw+ow8e/05qzkMY=)
7: icPfEymP4sS-B5f6ECwDv6uqJfE.roa (hash: dEtKNt+6pxMCaYnPSrEzFG7rO6REUpLEotnEHbtCIIY=)
8: r0qZ8D2aTVCBnUaFMEdO5JjY_WE.roa (hash: vpPL8rRx0AJAgJ6HwLPSPxj+S6uKrcpsWXCyy/Hr0EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:65:1c:eb:e8:91:7c:fb:21:da:5c:68:9f:2c:5b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
Validity
Not Before: Oct 30 06:00:21 2026 GMT
Not After : Oct 31 06:00:21 2026 GMT
Subject: CN=ea40d8f230bae045b9f264d197791fe7e65c22ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:75:62:0a:7f:56:d6:db:9c:f1:c3:e8:20:
c1:ab:c1:35:f3:29:54:c3:3c:48:a6:0b:95:fe:c5:
f8:37:17:73:cd:9a:27:8d:45:ce:37:d1:69:4b:6c:
0f:66:38:72:00:3c:e9:75:6e:ba:6f:db:a2:81:cb:
1d:22:e5:58:05:df:d2:42:c7:13:b4:4c:2e:cc:8b:
59:8b:a6:76:83:47:e5:06:04:3b:a7:fa:65:b8:dd:
95:4e:02:70:44:2f:93:24:61:83:28:3a:83:ea:42:
c7:be:70:66:36:d2:d4:8c:96:dd:5d:d1:19:9a:36:
ae:dd:e0:fb:d1:e0:dc:de:10:9a:1a:ec:21:2b:2d:
59:a0:86:bd:f8:f8:f2:0f:34:21:38:37:26:b5:10:
65:7c:84:37:a8:bf:9d:7f:e2:ca:ce:94:c7:2e:a4:
8f:81:f2:d2:f5:77:cf:2a:39:b7:69:ba:6d:bc:4a:
d9:d3:cc:bc:63:eb:19:c0:03:ca:94:bb:e7:66:49:
20:2d:90:0f:f0:d7:31:b1:a6:e7:cb:f9:40:a3:9c:
8e:16:27:fd:43:fb:ae:94:49:fb:39:ff:4d:57:ff:
e8:1d:10:91:b9:b2:13:c4:c4:2d:de:ee:42:ee:8c:
3d:05:33:44:03:34:89:80:17:0f:57:00:fc:6c:a5:
f5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:40:D8:F2:30:BA:E0:45:B9:F2:64:D1:97:79:1F:E7:E6:5C:22:EC
X509v3 Authority Key Identifier:
keyid:27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b6:43:f8:1c:3c:42:15:0f:93:1a:4d:a5:e4:e3:f7:be:b2:
15:69:23:04:0c:1d:c4:f9:63:13:13:7e:6f:03:19:f7:d4:01:
c6:f0:6b:b5:f1:d0:7f:9a:99:88:fb:08:ba:aa:bb:34:a6:d7:
73:01:52:bb:a2:a7:07:4c:c8:f3:a0:b6:ce:1e:e6:85:7c:c6:
a8:83:52:b1:45:57:63:95:4c:48:df:3c:d7:25:d9:23:a1:2e:
10:3c:c9:e7:d8:c5:d6:06:0c:2f:50:5f:b6:40:a5:d4:74:9e:
84:4b:74:a5:9e:c4:bf:bf:81:f9:24:35:02:a6:dd:43:02:21:
0a:24:f2:f4:f0:cb:67:11:5c:21:dc:8c:51:8e:04:78:a6:cb:
24:88:83:21:a1:b2:95:53:01:2e:35:b9:25:c8:2f:74:56:e4:
a2:a6:44:8e:65:08:da:24:a2:97:2f:40:e0:d0:91:39:af:10:
e2:2c:e5:01:30:d7:12:52:1c:b1:db:10:4f:a8:54:b4:ea:82:
38:88:6d:22:ce:be:a2:50:12:56:94:4f:be:cd:0b:a1:e8:66:
a3:44:28:18:09:0d:11:a8:de:65:d0:56:82:00:9a:21:a9:5c:
b9:08:c6:94:18:4e:09:58:b3:09:ad:5c:9f:22:99:80:b6:b3:
1f:03:4f:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGLZRzr6JF8+yHaXGifLFsPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZGMzMWE5NjM2ZTFjMWU5YTVmNTE5MDkzNjI3NmE2Nzll
MTY0NmEwHhcNMjYxMDMwMDYwMDIxWhcNMjYxMDMxMDYwMDIxWjAzMTEwLwYDVQQD
EyhlYTQwZDhmMjMwYmFlMDQ1YjlmMjY0ZDE5Nzc5MWZlN2U2NWMyMmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIZ1Ygp/VtbbnPHD6CDBq8E18ylU
wzxIpguV/sX4NxdzzZonjUXON9FpS2wPZjhyADzpdW66b9uigcsdIuVYBd/SQscT
tEwuzItZi6Z2g0flBgQ7p/pluN2VTgJwRC+TJGGDKDqD6kLHvnBmNtLUjJbdXdEZ
mjau3eD70eDc3hCaGuwhKy1ZoIa9+PjyDzQhODcmtRBlfIQ3qL+df+LKzpTHLqSP
gfLS9XfPKjm3abptvErZ08y8Y+sZwAPKlLvnZkkgLZAP8Ncxsabny/lAo5yOFif9
Q/uulEn7Of9NV//oHRCRubITxMQt3u5C7ow9BTNEAzSJgBcPVwD8bKX1wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpA2PIwuuBFufJk0Zd5H+fmXCLsMB8GA1UdIwQY
MBaAFCfcMaljbhweml9RkJNidqZ54WRqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjl3eHFXTnVIQjZhWDFHUWsySjJwbm5oWkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xM2Y1ZjEtNDViNi00YmMxLWI1YTUt
NTIxZmE0MWRmYzk2LzEvSjl3eHFXTnVIQjZhWDFHUWsySjJwbm5oWkdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xM2Y1ZjEtNDViNi00YmMxLWI1YTUtNTIxZmE0MWRmYzk2
LzEvSjl3eHFXTnVIQjZhWDFHUWsySjJwbm5oWkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLZD+Bw8
QhUPkxpNpeTj976yFWkjBAwdxPljExN+bwMZ99QBxvBrtfHQf5qZiPsIuqq7NKbX
cwFSu6KnB0zI86C2zh7mhXzGqINSsUVXY5VMSN881yXZI6EuEDzJ59jF1gYML1Bf
tkCl1HSehEt0pZ7Ev7+B+SQ1AqbdQwIhCiTy9PDLZxFcIdyMUY4EeKbLJIiDIaGy
lVMBLjW5JcgvdFbkoqZEjmUI2iSily9A4NCROa8Q4izlATDXElIcsdsQT6hUtOqC
OIhtIs6+olASVpRPvs0Loehmo0QoGAkNEajeZdBWggCaIalcuQjGlBhOCVizCa1c
nyKZgLazHwNPZg==
-----END CERTIFICATE-----
Generated at Fri Oct 30 14:22:55 2026 by rpki-client