Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: 1HFDsg1WmRGlsQY4hXJwVDJFL0Cb6nyEQxUzkkoPHN8=
Subject key identifier: B0:30:9C:8F:D6:82:9D:AC:C5:0E:7B:FB:8B:70:99:13:3A:D4:D3:F0
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 01A0897A6685F18EC1BE50DD42B75EC276F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 1A4E
Signing time: Thu 10 Sep 2026 04:01:35 +0000
Manifest this update: Thu 10 Sep 2026 04:01:35 +0000
Manifest next update: Fri 11 Sep 2026 04:01:35 +0000
Files and hashes: 1: 2u4DW90i6pJn6TNxJSQdCJPO9PA.roa (hash: z+7kYSl922ZGHRd4ve+viSStXQUCmw3QVQ5Lgiw6cXk=)
2: 7YQffxRE0rSLQxPURshHecG_JTc.roa (hash: uQCBTYo2a3hrZABdDnP1fnClvfQjBgoT9LYi5KTntlk=)
3: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: Ps3G9s86CP5/rE/ZeIvb7RKP2qbIkzZ86HUGyyuF3IY=)
4: iL7Gvu2zeDBUcLc-c_313Fq9KSM.roa (hash: a8LKeJ6D+clCx+yOU1jNHm1zr8sXhuQhH0AFiRBKDZg=)
5: smLWrNVdnQXtj7nGE7oSMC17OSY.roa (hash: 2gna9VdCLwGyL73TZbhQeXefvHaphCa0KxWv5nHt9zk=)
6: tgt22Xbh2dYkc5Tjjf4Gx-Xa2eY.roa (hash: XvxWV+DKU6Gtey3JNABlz2pi2cGrZK+aZ7VTSpuGXSw=)
7: vM268rav9B38xfaLn_yfc-f5loY.roa (hash: L3My8FF3Oma4omxz1SHFdJJ/WgvkO4FPZLAe6cqle1I=)
8: wsHpLkBYw1EeftdDR6sp04VigBw.roa (hash: /kY3oNdD/MtjNpfjYxiTgX3Hn7hLZLYXv3Sx0dMMAnA=)
9: zOqpyrA-mf4nkA9uzKu6WERUh9M.roa (hash: YZ3w9TWP7euxVmL2Kl9d48zmDrmJVrnCAiOTTTRIhhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:7a:66:85:f1:8e:c1:be:50:dd:42:b7:5e:c2:76:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Sep 10 04:01:35 2026 GMT
Not After : Sep 11 04:01:35 2026 GMT
Subject: CN=b0309c8fd6829dacc50e7bfb8b7099133ad4d3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:58:7c:b7:f3:3f:7b:75:c3:54:1e:25:83:
4f:b2:cf:70:75:87:91:79:e8:6d:cd:ea:71:e8:e9:
1c:76:17:6e:26:9f:46:7d:c6:1e:ae:a9:2a:fe:7f:
31:43:93:37:4f:56:20:31:e2:d3:3b:53:2e:3b:45:
7e:0e:bc:2b:63:87:e2:ae:ce:02:0f:47:67:4a:57:
44:97:6a:ff:df:11:56:70:5d:31:7f:1f:c7:f7:3c:
22:38:8b:9d:29:39:63:6c:45:43:c0:d6:60:8b:b5:
12:c5:7f:d6:74:6d:bc:e7:45:fc:3a:76:b2:3a:c2:
b0:0f:d8:87:f9:29:22:f0:da:87:db:9b:f3:e0:c2:
32:28:38:13:43:11:f2:dc:07:40:cf:8e:8f:e5:78:
77:1e:ce:6e:91:a1:7e:0a:5b:a7:86:2c:e8:03:8e:
3c:bc:b3:63:20:e1:41:a0:5d:30:c7:92:ba:64:8a:
d3:7c:37:4e:f3:de:29:e8:6c:57:88:38:62:75:e1:
a8:c0:bb:b7:01:0d:99:6f:01:20:6b:ee:49:ee:2c:
ca:86:97:6d:5d:c6:ea:c7:d8:c6:c1:5c:b4:f8:05:
c2:c2:c9:b3:de:b3:fa:5d:f1:b1:6b:2b:41:ef:9d:
87:91:d4:41:e7:b8:06:98:4e:a5:e7:90:1f:6b:80:
16:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:30:9C:8F:D6:82:9D:AC:C5:0E:7B:FB:8B:70:99:13:3A:D4:D3:F0
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b8:4a:09:36:26:58:58:3e:d1:ce:d2:45:5a:fd:8d:53:7b:
78:06:1c:8f:b6:32:e6:21:31:a9:eb:61:8e:0d:b3:5f:a2:97:
21:b2:a3:6b:67:b9:40:1f:91:87:8a:a4:aa:81:8a:25:7f:48:
7c:09:4b:e2:24:0e:8a:9c:28:c1:e9:ca:d8:ba:70:c0:bc:28:
09:73:22:33:03:90:17:c8:99:e8:d9:d3:3b:c7:3e:c3:e5:1e:
b9:07:33:ce:98:60:b4:22:43:8e:15:95:58:c4:34:d5:bf:2c:
ac:4e:2e:b0:74:67:b2:1a:d2:ff:e7:de:ea:93:58:d2:85:b3:
ed:aa:a5:0c:f0:e2:2e:f3:eb:8a:08:b3:d2:4d:1a:8e:f9:a3:
31:dd:b0:da:4d:4f:2c:59:f9:c8:5a:7d:29:e4:0d:ae:61:e0:
dc:51:5c:b2:9b:7a:bc:ec:de:e5:02:5d:45:d6:a1:df:4d:75:
b8:b2:92:d4:57:b3:c4:5c:72:b1:4d:05:1e:76:60:41:85:7a:
57:65:0e:2c:0c:da:e7:cb:11:cd:2d:41:2b:f0:0c:c5:0c:4d:
e5:37:7b:cb:c2:4d:3f:2c:62:b7:22:34:aa:36:cc:b7:55:5f:
9c:5a:64:ef:dc:2a:84:02:4c:dc:77:71:80:79:8f:3c:bb:29:
74:c4:85:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJemaF8Y7BvlDdQrdewnbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MzUwYWE4YTk0YWY2NjYwOTlmZDA3M2VjNjIxY2QxNWQw
NGIzMTYwHhcNMjYwOTEwMDQwMTM1WhcNMjYwOTExMDQwMTM1WjAzMTEwLwYDVQQD
EyhiMDMwOWM4ZmQ2ODI5ZGFjYzUwZTdiZmI4YjcwOTkxMzNhZDRkM2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwylYfLfzP3t1w1QeJYNPss9wdYeR
eehtzepx6OkcdhduJp9GfcYerqkq/n8xQ5M3T1YgMeLTO1MuO0V+DrwrY4firs4C
D0dnSldEl2r/3xFWcF0xfx/H9zwiOIudKTljbEVDwNZgi7USxX/WdG2850X8Onay
OsKwD9iH+Ski8NqH25vz4MIyKDgTQxHy3AdAz46P5Xh3Hs5ukaF+ClunhizoA448
vLNjIOFBoF0wx5K6ZIrTfDdO894p6GxXiDhideGowLu3AQ2ZbwEga+5J7izKhpdt
Xcbqx9jGwVy0+AXCwsmz3rP6XfGxaytB752HkdRB57gGmE6l55Afa4AWnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAwnI/Wgp2sxQ57+4twmRM61NPwMB8GA1UdIwQY
MBaAFCQ1CqipSvZmCZ/Qc+xiHNFdBLMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEt
YjQyNTIyZDA1ODk1LzEvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEtYjQyNTIyZDA1ODk1
LzEvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbhKCTYm
WFg+0c7SRVr9jVN7eAYcj7Yy5iExqethjg2zX6KXIbKja2e5QB+Rh4qkqoGKJX9I
fAlL4iQOipwowenK2LpwwLwoCXMiMwOQF8iZ6NnTO8c+w+UeuQczzphgtCJDjhWV
WMQ01b8srE4usHRnshrS/+fe6pNY0oWz7aqlDPDiLvPrigiz0k0ajvmjMd2w2k1P
LFn5yFp9KeQNrmHg3FFcspt6vOze5QJdRdah3011uLKS1FezxFxysU0FHnZgQYV6
V2UOLAza58sRzS1BK/AMxQxN5Td7y8JNPyxityI0qjbMt1VfnFpk79wqhAJM3Hdx
gHmPPLspdMSFKg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:18:55 2026 by rpki-client