Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json)
Hash identifier: UK2B2qYBKU0a1Z2mCNBkZaOjIByHYIaSdS6sc6fNcKo=
Subject key identifier: 96:6B:0C:F0:B8:2D:65:A2:78:B3:D9:98:C4:98:34:9C:C4:DF:A3:AE
Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Certificate serial: 01A043F44E5895D787D391E9D79E6F2F6664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
Manifest number: 060B
Signing time: Thu 27 Aug 2026 16:01:19 +0000
Manifest this update: Thu 27 Aug 2026 16:01:19 +0000
Manifest next update: Fri 28 Aug 2026 16:01:19 +0000
Files and hashes: 1: 0OEHU7Z4Xep124nqLarwZ20qYvg.roa (hash: EinNI0ZI4eyeX1yQhgmTMLlxSGZ6l01xF7uPwFE7Lv8=)
2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: t5gMdaf2M5rz7KTZjGmn4nUQa9OSVZYlPFzokC9dB30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:f4:4e:58:95:d7:87:d3:91:e9:d7:9e:6f:2f:66:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Validity
Not Before: Aug 27 16:01:19 2026 GMT
Not After : Aug 28 16:01:19 2026 GMT
Subject: CN=966b0cf0b82d65a278b3d998c498349cc4dfa3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:d3:19:24:0e:67:77:ad:9c:35:82:25:91:
84:a0:f2:8e:40:f0:90:12:f4:c1:22:2a:51:51:0f:
69:98:23:67:f6:2c:d7:89:9f:ba:2b:57:63:b0:40:
d0:19:7e:7c:19:32:67:09:ad:40:db:57:42:8c:56:
fd:e8:31:f9:69:b8:34:92:e4:25:f7:30:d7:14:99:
0b:70:db:99:2e:84:da:c7:60:d1:81:6a:f0:a5:78:
08:ce:8e:75:2d:97:f7:be:4d:71:fd:2e:9b:77:d5:
f0:89:20:76:43:14:c8:6c:cc:95:75:d2:2c:e8:d4:
ef:13:5d:20:d9:c7:1f:59:e1:87:e1:b4:07:b8:e0:
3e:82:2a:63:29:d1:6f:b5:fe:64:3c:65:13:b0:9a:
d1:7c:66:02:90:7f:c6:2e:74:70:d7:3f:72:7b:83:
b5:32:df:58:77:43:a6:68:4e:8a:5a:8d:a6:fb:cf:
57:7b:a0:7a:4b:28:05:83:c2:e9:ff:c9:69:98:cb:
0b:92:b1:b2:2c:e4:71:9c:28:0e:23:65:16:e0:f1:
97:6f:66:97:6c:69:50:35:6c:8f:2b:f1:54:20:6b:
72:a2:7f:8c:2b:7a:02:d1:98:2a:c1:ca:51:c0:26:
52:f7:6d:b9:eb:a6:56:54:3a:95:11:c0:2e:01:c7:
17:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6B:0C:F0:B8:2D:65:A2:78:B3:D9:98:C4:98:34:9C:C4:DF:A3:AE
X509v3 Authority Key Identifier:
keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ef:1d:fe:df:9a:7e:8a:cf:65:a8:df:e9:09:26:d8:14:5c:
98:eb:4b:04:2b:81:9a:f4:e6:c2:07:86:23:e9:97:26:79:a0:
b1:49:66:da:39:d2:d9:43:23:e3:db:6f:33:3f:2c:5d:32:df:
87:3b:98:35:67:d8:0b:fd:99:4d:ca:6a:70:b1:d2:7c:e4:80:
90:42:c4:ae:aa:4a:52:8e:f5:30:40:77:6b:f6:85:f7:25:34:
ff:bc:29:ab:a6:9c:5e:c5:a1:4e:85:9a:3d:53:97:20:fa:d1:
df:c7:ab:3a:28:41:0a:be:00:cb:ec:6b:0a:2e:e5:8d:e3:7e:
05:c3:fb:d1:6d:34:09:81:53:c5:02:a6:a5:e5:17:4b:02:44:
41:7e:8c:b7:61:bc:6d:9e:08:1f:2c:96:98:b2:80:66:12:82:
06:1d:04:4c:9a:8c:16:ed:d0:f5:73:ce:8c:eb:a7:01:7f:b7:
d6:58:fb:8c:c6:a8:7b:90:36:69:73:08:6f:40:da:b5:b6:a8:
09:5f:95:a6:38:6d:d2:d3:17:6e:d7:e5:44:28:92:a8:54:d5:
5b:54:ef:36:24:9d:4c:e1:39:7e:e2:fa:47:c1:7d:43:7a:15:
ea:70:1b:f0:cd:52:28:21:16:4d:5b:e8:e0:56:9e:a7:33:da:
26:3d:cb:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBD9E5YldeH05Hp155vL2ZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YjFhMjIzYjdlNzNmZDIzNDYyYzIwNGU2MGU5ZDQ4MTVj
Zjc2M2YwHhcNMjYwODI3MTYwMTE5WhcNMjYwODI4MTYwMTE5WjAzMTEwLwYDVQQD
Eyg5NjZiMGNmMGI4MmQ2NWEyNzhiM2Q5OThjNDk4MzQ5Y2M0ZGZhM2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqLTGSQOZ3etnDWCJZGEoPKOQPCQ
EvTBIipRUQ9pmCNn9izXiZ+6K1djsEDQGX58GTJnCa1A21dCjFb96DH5abg0kuQl
9zDXFJkLcNuZLoTax2DRgWrwpXgIzo51LZf3vk1x/S6bd9XwiSB2QxTIbMyVddIs
6NTvE10g2ccfWeGH4bQHuOA+gipjKdFvtf5kPGUTsJrRfGYCkH/GLnRw1z9ye4O1
Mt9Yd0OmaE6KWo2m+89Xe6B6SygFg8Lp/8lpmMsLkrGyLORxnCgOI2UW4PGXb2aX
bGlQNWyPK/FUIGtyon+MK3oC0ZgqwcpRwCZS922566ZWVDqVEcAuAccXLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZrDPC4LWWieLPZmMSYNJzE36OuMB8GA1UdIwQY
MBaAFCWxoiO35z/SNGLCBOYOnUgVz3Y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTkwYzgtMmI4My00NzE1LTk5MzMt
YTczZjBiNzQxOGFiLzEvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wZTkwYzgtMmI4My00NzE1LTk5MzMtYTczZjBiNzQxOGFi
LzEvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJu8d/t+a
forPZajf6Qkm2BRcmOtLBCuBmvTmwgeGI+mXJnmgsUlm2jnS2UMj49tvMz8sXTLf
hzuYNWfYC/2ZTcpqcLHSfOSAkELErqpKUo71MEB3a/aF9yU0/7wpq6acXsWhToWa
PVOXIPrR38erOihBCr4Ay+xrCi7ljeN+BcP70W00CYFTxQKmpeUXSwJEQX6Mt2G8
bZ4IHyyWmLKAZhKCBh0ETJqMFu3Q9XPOjOunAX+31lj7jMaoe5A2aXMIb0Datbao
CV+Vpjht0tMXbtflRCiSqFTVW1TvNiSdTOE5fuL6R8F9Q3oV6nAb8M1SKCEWTVvo
4FaepzPaJj3L1g==
-----END CERTIFICATE-----
Generated at Thu Aug 27 20:01:36 2026 by rpki-client