Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: jtEBHwljwfdP7g8+ZfC8+DQxT1av1lbYhvb47RUfUls=
Subject key identifier: 4A:08:8D:75:A6:06:F2:A2:12:42:43:87:6D:81:19:11:F3:9B:FB:3F
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 01A17A714646A0E216E867F6BC70B09C768E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 1264
Signing time: Mon 26 Oct 2026 23:00:06 +0000
Manifest this update: Mon 26 Oct 2026 23:00:06 +0000
Manifest next update: Tue 27 Oct 2026 23:00:06 +0000
Files and hashes: 1: ChullwnZqQZYUszFjSx3fewyjwo.roa (hash: Q47vpxHW3Ryw8e0pAegAXyctEwiMaOAhvKLpvI/M8b8=)
2: DNSKPd01dwV1m0UA3OWZjHrv0VI.roa (hash: xZ97A5jZ/SukMOaFd3zQ70K1ldM9Hn7h4aFpzYLuuQg=)
3: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: nynzEkh+hV6nZsn4idGCzbOoMzmyZl6tRF3I+1xtWbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:46:46:a0:e2:16:e8:67:f6:bc:70:b0:9c:76:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Oct 26 23:00:06 2026 GMT
Not After : Oct 27 23:00:06 2026 GMT
Subject: CN=4a088d75a606f2a2124243876d811911f39bfb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:37:bb:d4:05:d2:b9:22:ab:f4:73:ae:3d:23:
52:e2:a2:3b:5c:45:c1:45:53:d6:16:29:a8:d1:4a:
05:63:5b:e7:a4:94:1e:e5:01:5b:de:ec:48:16:65:
13:36:61:4b:bf:e3:a7:fc:d7:e5:7e:db:22:c2:2a:
9f:68:5d:7d:f6:56:4c:cd:75:c9:3c:e8:62:5d:b4:
69:02:81:2a:ed:11:3d:63:6a:47:e7:88:6c:0f:63:
92:cf:91:d2:fb:d9:1d:05:9f:24:b4:2d:06:b8:80:
e8:71:d0:a8:dc:a1:45:14:7d:3d:14:91:57:59:90:
f3:c9:9a:68:e1:fb:88:60:76:64:65:34:55:f7:d6:
d7:26:73:af:48:7e:94:d4:03:db:af:b5:25:bb:75:
1e:be:49:5d:22:00:25:e2:1a:cb:7e:ff:d3:3c:dd:
ea:93:89:73:5b:1b:d3:7d:92:40:9e:bc:15:46:83:
72:6e:43:0b:d6:c3:09:42:0f:82:ee:1b:b6:69:db:
08:83:36:a3:56:3a:d9:f2:d1:6d:db:63:67:1e:4b:
49:25:3a:c5:67:67:63:67:cd:3d:71:84:9a:7d:7a:
c9:5e:eb:37:6e:40:6f:b3:72:d7:4e:7a:25:5e:80:
17:0f:22:9c:15:0b:21:52:7f:95:42:83:93:7e:dc:
40:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:08:8D:75:A6:06:F2:A2:12:42:43:87:6D:81:19:11:F3:9B:FB:3F
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:17:8d:0d:fb:19:d1:08:23:60:b5:a0:98:a5:89:46:be:ab:
87:3c:d7:0c:db:22:93:01:55:fa:07:9e:ef:14:f9:ea:bb:ef:
b6:7d:cc:8f:da:36:c8:9a:a3:b7:5c:e3:48:9f:ab:89:fa:78:
72:d2:e2:af:be:b8:7a:2e:38:e3:6b:56:06:ea:95:ff:b3:e9:
45:9a:08:8a:dc:ef:9d:fd:c1:a9:48:ec:23:f0:65:de:df:cc:
45:7c:2a:f8:a9:a1:a3:b9:97:e7:ec:2d:1b:71:fe:24:2e:57:
95:8f:6b:e8:99:29:1a:8d:0e:68:96:39:47:dd:70:8a:5d:c6:
8e:03:24:c7:c0:ee:1d:66:7b:1b:0d:f8:f3:ee:fe:f8:e0:26:
d3:31:53:74:be:1d:4b:ad:c6:7e:07:c5:2e:64:13:a7:ed:23:
71:f9:ba:66:43:5f:e8:9a:e2:89:f5:14:89:1d:9c:f0:e1:6c:
40:e9:33:ce:65:42:d7:fc:ce:3b:a1:89:bf:fe:33:06:fd:d1:
8e:53:07:74:68:54:51:b6:1b:ef:5e:aa:37:c1:b8:fd:db:02:
d8:b9:a5:ad:20:18:2a:6f:b1:86:a0:4f:4d:f4:53:d8:ee:d7:
15:f8:3a:aa:1f:0d:be:12:7a:f9:dc:dc:6f:c5:e5:ba:cf:d6:
ab:a6:55:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6cUZGoOIW6Gf2vHCwnHaOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YjY2MGE2MTE5ODBjNjgyNzMxMzllMzJhZmZiNzRiNDU0
YTlkMzIwHhcNMjYxMDI2MjMwMDA2WhcNMjYxMDI3MjMwMDA2WjAzMTEwLwYDVQQD
Eyg0YTA4OGQ3NWE2MDZmMmEyMTI0MjQzODc2ZDgxMTkxMWYzOWJmYjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2De71AXSuSKr9HOuPSNS4qI7XEXB
RVPWFimo0UoFY1vnpJQe5QFb3uxIFmUTNmFLv+On/NflftsiwiqfaF199lZMzXXJ
POhiXbRpAoEq7RE9Y2pH54hsD2OSz5HS+9kdBZ8ktC0GuIDocdCo3KFFFH09FJFX
WZDzyZpo4fuIYHZkZTRV99bXJnOvSH6U1APbr7Ulu3UevkldIgAl4hrLfv/TPN3q
k4lzWxvTfZJAnrwVRoNybkML1sMJQg+C7hu2adsIgzajVjrZ8tFt22NnHktJJTrF
Z2djZ809cYSafXrJXus3bkBvs3LXTnolXoAXDyKcFQshUn+VQoOTftxAoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoIjXWmBvKiEkJDh22BGRHzm/s/MB8GA1UdIwQY
MBaAFCS2YKYRmAxoJzE54yr/t0tFSp0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYt
NzA1MTk3NTA3YTU5LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYtNzA1MTk3NTA3YTU5
LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBeNDfsZ
0QgjYLWgmKWJRr6rhzzXDNsikwFV+gee7xT56rvvtn3Mj9o2yJqjt1zjSJ+rifp4
ctLir764ei4442tWBuqV/7PpRZoIitzvnf3BqUjsI/Bl3t/MRXwq+Kmho7mX5+wt
G3H+JC5XlY9r6JkpGo0OaJY5R91wil3GjgMkx8DuHWZ7Gw348+7++OAm0zFTdL4d
S63GfgfFLmQTp+0jcfm6ZkNf6JriifUUiR2c8OFsQOkzzmVC1/zOO6GJv/4zBv3R
jlMHdGhUUbYb716qN8G4/dsC2LmlrSAYKm+xhqBPTfRT2O7XFfg6qh8NvhJ6+dzc
b8Xlus/Wq6ZVnw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:39:50 2026 by rpki-client