Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
File: jvZFdw0pFEAtbJW42vUff_4Sdys.mft (raw, json)
Hash identifier: ZMhoSTOI/0meM67WOYwnjy6N6uk8n5EZIHOqNJsGhaw=
Subject key identifier: FE:50:7B:12:1A:4D:2D:01:C5:79:3A:41:A9:EB:FD:CF:80:D2:0E:70
Authority key identifier: 8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
Certificate issuer: /CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Certificate serial: 01A107010D6C9CA2DF84891ECFF0FA1D83D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
Manifest number: 0E7B
Signing time: Sun 04 Oct 2026 13:01:11 +0000
Manifest this update: Sun 04 Oct 2026 13:01:11 +0000
Manifest next update: Mon 05 Oct 2026 13:01:11 +0000
Files and hashes: 1: Ze7KRAUjPeqGh8cPqUx4LdDwghM.roa (hash: 9nj7uwXDpwi4IaoN4BLsfOwzpOwzS34nmfQiM2vUZE0=)
2: jvZFdw0pFEAtbJW42vUff_4Sdys.crl (hash: QjxyvThufcSqIgoG1CfUsY5gB+RI6ziA4lLfByS/DfQ=)
3: xY6N77gaGhHC96TEYf_319JfP3Y.roa (hash: pHRv276Dy+Q037IPY/bb8BuMwdfKlhDrevwY2uKsbj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:01:0d:6c:9c:a2:df:84:89:1e:cf:f0:fa:1d:83:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Validity
Not Before: Oct 4 13:01:11 2026 GMT
Not After : Oct 5 13:01:11 2026 GMT
Subject: CN=fe507b121a4d2d01c5793a41a9ebfdcf80d20e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:5d:66:35:ac:42:5a:03:b5:d9:aa:78:2a:
ad:38:df:3d:4d:bf:16:d1:eb:56:67:28:5c:ba:5a:
48:2c:2b:da:3d:f3:68:37:7e:45:be:6e:67:74:f9:
11:1d:2f:63:1a:b2:d7:76:39:01:a3:2b:bc:11:67:
79:75:fa:b3:4d:9e:8e:51:77:3b:19:a0:dd:87:af:
ec:95:2b:c6:cc:d8:98:27:9c:d0:50:f6:80:bf:84:
b4:21:4e:97:07:27:02:28:59:fd:6e:63:fe:ab:a3:
dd:3c:d6:e7:4d:98:af:98:0f:72:ee:07:95:2b:62:
f1:70:92:c6:ea:a3:d5:62:c9:45:68:19:90:70:5b:
2b:e2:04:94:74:32:05:97:94:71:dc:11:54:8d:04:
cc:5e:d2:36:fc:74:b0:1d:0a:a0:e5:ec:10:c9:3f:
d1:66:ef:67:17:c3:78:f5:9c:65:be:02:9a:0e:3e:
e1:18:4d:51:80:bc:a5:ce:45:c1:d9:73:c6:ce:05:
25:41:74:42:3e:58:55:24:1e:ae:a7:da:8b:85:df:
37:57:1c:84:86:8b:17:e2:d6:49:4b:2e:13:d3:a4:
cb:61:d3:0d:10:8b:ab:50:79:5c:72:81:e8:de:52:
ae:15:80:9c:26:d5:38:13:2d:f5:e4:6d:da:9b:0e:
e8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:50:7B:12:1A:4D:2D:01:C5:79:3A:41:A9:EB:FD:CF:80:D2:0E:70
X509v3 Authority Key Identifier:
keyid:8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:33:34:65:15:b4:a0:39:3c:a1:bf:75:05:f1:33:cb:23:2d:
8c:66:c9:10:5c:87:fc:44:b5:b0:84:39:65:7b:5d:70:8e:36:
10:dd:0f:d3:db:b5:34:0e:e0:ba:5d:1d:55:ef:26:1a:d0:44:
59:09:49:2e:a6:e2:29:b0:9d:fc:78:00:3b:26:2b:ca:29:ff:
73:0f:2b:74:d7:a7:db:59:40:79:4c:d5:11:d1:c8:55:c0:a0:
fe:66:7f:64:cc:b0:43:f4:c5:41:59:64:c1:a9:dd:96:43:8d:
fb:ac:26:46:f8:6a:32:3f:61:1a:63:c2:fe:bf:08:d0:d5:b8:
56:29:ec:32:62:de:65:e5:f6:16:8b:a4:7d:e8:94:b0:81:25:
36:08:f8:d6:cb:0e:9a:c2:05:ac:f3:3f:91:4d:5f:54:96:a1:
97:1d:e9:b8:a8:00:9f:7b:88:43:da:87:91:66:b6:fa:8c:93:
fb:3d:92:a5:57:69:28:f3:6e:94:a3:40:af:84:cb:e2:59:6c:
0f:d6:02:37:8c:b3:92:a0:78:24:87:b9:3a:32:5d:30:e8:83:
0a:64:c5:af:8c:54:cd:a9:33:c3:17:3b:3a:75:73:8d:fa:ae:
c0:e5:44:1c:11:5f:aa:aa:30:fa:82:fa:8f:98:98:8a:b4:92:
cb:ea:82:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEHAQ1snKLfhIkez/D6HYPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZjY0NTc3MGQyOTE0NDAyZDZjOTViOGRhZjUxZjdmZmUx
Mjc3MmIwHhcNMjYxMDA0MTMwMTExWhcNMjYxMDA1MTMwMTExWjAzMTEwLwYDVQQD
EyhmZTUwN2IxMjFhNGQyZDAxYzU3OTNhNDFhOWViZmRjZjgwZDIwZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf9dZjWsQloDtdmqeCqtON89Tb8W
0etWZyhculpILCvaPfNoN35Fvm5ndPkRHS9jGrLXdjkBoyu8EWd5dfqzTZ6OUXc7
GaDdh6/slSvGzNiYJ5zQUPaAv4S0IU6XBycCKFn9bmP+q6PdPNbnTZivmA9y7geV
K2LxcJLG6qPVYslFaBmQcFsr4gSUdDIFl5Rx3BFUjQTMXtI2/HSwHQqg5ewQyT/R
Zu9nF8N49ZxlvgKaDj7hGE1RgLylzkXB2XPGzgUlQXRCPlhVJB6up9qLhd83VxyE
hosX4tZJSy4T06TLYdMNEIurUHlccoHo3lKuFYCcJtU4Ey315G3amw7olQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5QexIaTS0BxXk6Qanr/c+A0g5wMB8GA1UdIwQY
MBaAFI72RXcNKRRALWyVuNr1H3/+EncrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZaRmR3MHBGRUF0YkpXNDJ2VWZmXzRTZHlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iMDk3NWMtMjU3My00ZDBhLWI4ZDkt
NjU2OTU3ZjM4NjdlLzEvanZaRmR3MHBGRUF0YkpXNDJ2VWZmXzRTZHlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9iMDk3NWMtMjU3My00ZDBhLWI4ZDktNjU2OTU3ZjM4Njdl
LzEvanZaRmR3MHBGRUF0YkpXNDJ2VWZmXzRTZHlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApDM0ZRW0
oDk8ob91BfEzyyMtjGbJEFyH/ES1sIQ5ZXtdcI42EN0P09u1NA7gul0dVe8mGtBE
WQlJLqbiKbCd/HgAOyYryin/cw8rdNen21lAeUzVEdHIVcCg/mZ/ZMywQ/TFQVlk
wandlkON+6wmRvhqMj9hGmPC/r8I0NW4VinsMmLeZeX2FoukfeiUsIElNgj41ssO
msIFrPM/kU1fVJahlx3puKgAn3uIQ9qHkWa2+oyT+z2SpVdpKPNulKNAr4TL4lls
D9YCN4yzkqB4JIe5OjJdMOiDCmTFr4xUzakzwxc7OnVzjfquwOVEHBFfqqow+oL6
j5iYirSSy+qCZw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:38:12 2026 by rpki-client