Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json)
Hash identifier: LFflAh6IeAZ68KaDPMljhtHOuuH7iMMUtnEJkcTIoEA=
Subject key identifier: F5:8E:2B:6D:73:4A:FB:DD:D9:95:E3:D4:FB:FA:85:C8:CC:89:F7:57
Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Certificate serial: 01A08F7BD77ED378EEC8184E083055276276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
Manifest number: 04E4
Signing time: Fri 11 Sep 2026 08:00:52 +0000
Manifest this update: Fri 11 Sep 2026 08:00:52 +0000
Manifest next update: Sat 12 Sep 2026 08:00:52 +0000
Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: /uTMckXc46vrMF57AO8XqKPGVJWHellxc37plxVEnAI=)
2: v2RhzwzRYxDBxoI8x3qcoCuvcCY.roa (hash: +dNdFFmraUSumCJQ+HT3ZgjMQ3xG8lfqVtX8iY6CtK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:7b:d7:7e:d3:78:ee:c8:18:4e:08:30:55:27:62:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Validity
Not Before: Sep 11 08:00:52 2026 GMT
Not After : Sep 12 08:00:52 2026 GMT
Subject: CN=f58e2b6d734afbddd995e3d4fbfa85c8cc89f757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:25:62:05:9f:ad:a3:ec:5e:98:d1:d8:64:
c3:a2:49:5d:10:b8:da:ec:42:d6:90:f5:03:1e:59:
59:e0:39:c9:18:fe:ec:46:f2:39:54:83:c1:f5:f6:
09:5d:96:72:cb:cc:e6:70:e0:05:e2:2c:f3:e8:7d:
f5:14:a6:f7:9e:64:c5:38:3d:ff:58:3f:a1:9f:7b:
28:89:05:2d:46:d1:df:de:32:c9:1a:3b:1a:9b:2e:
fb:cb:b7:e0:83:b3:6f:dd:7d:d5:6f:81:38:53:98:
50:b1:46:43:e1:ff:89:2f:1c:6e:ac:1f:26:7e:83:
b8:4e:89:37:34:ae:46:a6:0a:cc:94:80:55:86:d7:
b9:3a:3e:cb:34:9e:0b:09:69:92:ad:af:61:ef:0a:
f7:d4:e8:c0:4b:23:17:69:6c:6f:43:60:6d:e6:0c:
cd:9a:00:e5:17:f1:7c:ee:29:e8:eb:16:a8:b8:92:
3d:f9:0c:e2:a0:6c:42:5d:b2:df:94:49:42:2c:58:
a4:d1:0c:45:12:33:a4:ff:d0:f8:d1:da:5f:1b:68:
df:63:b3:b8:cb:3d:0f:d4:67:4c:4b:85:b0:91:90:
83:dd:13:45:fc:92:a0:3d:de:cc:40:5f:c7:37:9e:
7e:56:36:d9:a8:10:0d:99:f7:dd:9d:99:8c:90:08:
57:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8E:2B:6D:73:4A:FB:DD:D9:95:E3:D4:FB:FA:85:C8:CC:89:F7:57
X509v3 Authority Key Identifier:
keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e0:92:f6:81:53:7a:b2:d9:47:fa:f8:d2:63:8b:9e:bd:57:
f3:03:76:49:07:d8:29:44:d8:d5:66:60:03:8c:bb:63:3f:35:
21:c8:f0:e1:8c:7c:12:a9:7a:a6:2d:d7:69:f4:ed:2e:9d:d5:
4a:fc:14:cc:b9:aa:06:06:67:12:0a:b5:b2:52:50:b3:fd:ab:
2f:d6:a1:3c:34:f4:69:42:cf:ad:c1:3a:07:92:e3:e3:10:cd:
c9:ba:74:2f:ec:4b:a3:02:cf:47:83:d7:25:64:26:7a:cd:b2:
23:71:96:8c:49:65:bc:88:04:1d:ea:66:fb:eb:04:bb:33:3c:
02:dc:ae:cc:64:95:48:39:75:81:74:2c:1e:97:0b:21:19:bd:
69:10:a2:f5:32:31:4c:92:ab:fd:80:4e:e0:53:47:3e:55:ac:
6f:d5:13:0c:ba:9f:dd:d4:fb:a4:05:ac:2c:3e:50:67:d2:48:
c0:5c:f8:bf:f7:59:55:dc:ed:e3:f0:5a:b6:45:99:48:77:a5:
86:6d:48:02:91:d0:d3:b2:02:79:45:bc:ff:2e:db:16:33:3c:
17:b2:12:47:3e:32:dd:66:ee:94:1d:ad:10:a3:62:5e:64:82:
7e:d7:b3:7b:96:a1:6b:3d:07:99:31:ea:0f:05:c9:f5:51:d0:
ea:19:9c:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCPe9d+03juyBhOCDBVJ2J2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NjNkOWNmYzgxNzMyZWQyZmE0YTY0MmVkYWUzMzRjMDAy
OTUwZjgwHhcNMjYwOTExMDgwMDUyWhcNMjYwOTEyMDgwMDUyWjAzMTEwLwYDVQQD
EyhmNThlMmI2ZDczNGFmYmRkZDk5NWUzZDRmYmZhODVjOGNjODlmNzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1UlYgWfraPsXpjR2GTDokldELja
7ELWkPUDHllZ4DnJGP7sRvI5VIPB9fYJXZZyy8zmcOAF4izz6H31FKb3nmTFOD3/
WD+hn3soiQUtRtHf3jLJGjsamy77y7fgg7Nv3X3Vb4E4U5hQsUZD4f+JLxxurB8m
foO4Tok3NK5GpgrMlIBVhte5Oj7LNJ4LCWmSra9h7wr31OjASyMXaWxvQ2Bt5gzN
mgDlF/F87ino6xaouJI9+QzioGxCXbLflElCLFik0QxFEjOk/9D40dpfG2jfY7O4
yz0P1GdMS4WwkZCD3RNF/JKgPd7MQF/HN55+VjbZqBANmffdnZmMkAhXJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWOK21zSvvd2ZXj1Pv6hcjMifdXMB8GA1UdIwQY
MBaAFCdj2c/IFzLtL6SmQu2uM0wAKVD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83YWMxYzItMTQwZi00YzFhLTgxY2Mt
MWQxMjI4MGJhMzIyLzEvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS83YWMxYzItMTQwZi00YzFhLTgxY2MtMWQxMjI4MGJhMzIy
LzEvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAseCS9oFT
erLZR/r40mOLnr1X8wN2SQfYKUTY1WZgA4y7Yz81Icjw4Yx8Eql6pi3XafTtLp3V
SvwUzLmqBgZnEgq1slJQs/2rL9ahPDT0aULPrcE6B5Lj4xDNybp0L+xLowLPR4PX
JWQmes2yI3GWjEllvIgEHepm++sEuzM8AtyuzGSVSDl1gXQsHpcLIRm9aRCi9TIx
TJKr/YBO4FNHPlWsb9UTDLqf3dT7pAWsLD5QZ9JIwFz4v/dZVdzt4/BatkWZSHel
hm1IApHQ07ICeUW8/y7bFjM8F7ISRz4y3WbulB2tEKNiXmSCfteze5ahaz0HmTHq
DwXJ9VHQ6hmckQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 15:42:42 2026 by rpki-client