Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
File: jNspNdndDVhbZVEYdkwBxtdvdMI.mft (raw, json)
Hash identifier: 9sjT3IOwxLgiLHTQYtLuDL5D8+apV+l21d8N8VFX5Gk=
Subject key identifier: 74:7B:DA:FB:47:42:F6:DC:2E:22:04:30:9A:A2:F7:B4:6B:AB:17:FF
Authority key identifier: 8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2
Certificate issuer: /CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
Certificate serial: 01A108148956909CC26F4D8F6DE01EAC2CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
Manifest number: 0B90
Signing time: Sun 04 Oct 2026 18:02:05 +0000
Manifest this update: Sun 04 Oct 2026 18:02:05 +0000
Manifest next update: Mon 05 Oct 2026 18:02:05 +0000
Files and hashes: 1: fh9uRAVYnSSMh7fswD9NgEP6Yxg.asa (hash: OPltXIvomNjtQHGnIYuR9i3ncanMWYY9Ag1iFDtLcE8=)
2: jNspNdndDVhbZVEYdkwBxtdvdMI.crl (hash: t7+MUegHQWa5qakGH8lkwJgh/zrJgzuHJhOXxt1gIQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:14:89:56:90:9c:c2:6f:4d:8f:6d:e0:1e:ac:2c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
Validity
Not Before: Oct 4 18:02:05 2026 GMT
Not After : Oct 5 18:02:05 2026 GMT
Subject: CN=747bdafb4742f6dc2e2204309aa2f7b46bab17ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:54:7e:ce:75:10:1f:b1:97:f8:2a:44:8c:
f7:33:82:5a:de:cb:41:ae:ed:9b:58:f8:73:7a:9b:
8b:81:f3:03:ba:95:08:4c:7a:41:b1:e9:2e:92:fc:
ce:c0:1b:84:91:1e:5c:c7:13:ff:fa:7a:6d:d4:40:
41:28:03:37:52:67:53:ae:0e:91:a7:8c:e5:b0:c9:
15:31:a2:98:57:0d:06:7d:f4:e5:3b:4e:2e:7d:4d:
87:fe:26:d0:59:cb:b1:ae:42:01:83:12:ee:18:58:
a5:98:c3:67:85:3c:f0:09:ec:ae:ea:6c:da:50:7c:
f1:8f:12:85:42:48:58:c3:a7:20:1f:17:66:c3:a4:
63:3c:22:bb:5e:0f:20:a6:de:b9:b1:e4:bd:80:f6:
50:40:f3:9a:ec:f4:6f:89:b6:ee:1b:c9:83:e7:cc:
d2:9e:9a:e6:e4:0b:f0:87:40:98:01:43:88:57:12:
ee:69:2f:ea:2a:43:b3:05:cd:1e:5d:b3:f0:b3:66:
1c:ad:b7:53:6b:b5:c3:d3:a8:fa:0b:9a:e7:aa:a1:
e3:4c:12:63:07:74:65:98:b6:13:bc:f8:09:98:6f:
08:d9:85:74:9c:f5:74:8e:89:72:3b:b5:83:1f:5a:
f0:08:23:1f:29:f0:ae:e4:14:79:a4:61:d3:6c:65:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7B:DA:FB:47:42:F6:DC:2E:22:04:30:9A:A2:F7:B4:6B:AB:17:FF
X509v3 Authority Key Identifier:
keyid:8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:26:f6:1f:c2:41:52:53:ef:99:54:ee:dd:e9:a8:47:82:9d:
80:90:69:a7:b9:62:1d:fc:c7:38:fa:c9:65:0b:d6:cb:3b:fd:
ce:80:92:ed:fd:dc:2d:16:e5:a8:3c:ba:e6:52:6b:8d:b5:53:
bf:a8:54:94:26:b4:cc:3b:2a:7a:fe:63:de:19:ec:15:59:be:
28:04:2f:78:44:63:51:b7:b1:f1:db:66:dc:41:26:27:61:cc:
36:5b:f6:e3:b9:1b:c5:79:a2:cb:0d:51:34:db:b9:0f:2c:96:
a8:23:c2:60:af:af:a6:1f:9f:52:7e:4e:b9:38:6d:c4:75:33:
01:bc:74:69:33:66:6b:e6:40:c0:6f:1d:82:0e:d7:bc:67:3e:
ec:b4:1d:54:e3:86:cb:21:59:90:53:98:33:ac:3b:f7:61:43:
81:05:c7:b0:5a:3d:cb:4c:96:a7:ff:4e:1d:08:f3:c6:0f:93:
a2:3d:91:46:22:73:0d:57:71:f4:af:6f:19:69:35:96:ad:e4:
97:f8:c1:b3:ca:85:ad:2f:89:e8:16:de:40:eb:f1:49:29:97:
0d:c2:1d:c8:38:cb:20:38:d8:54:3b:57:ad:1f:22:0d:2f:ca:
cc:6a:a0:b4:35:9b:c8:18:f4:f8:12:90:49:40:f5:57:43:06:
4a:ac:25:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEIFIlWkJzCb02PbeAerCzkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZGIyOTM1ZDlkZDBkNTg1YjY1NTExODc2NGMwMWM2ZDc2
Zjc0YzIwHhcNMjYxMDA0MTgwMjA1WhcNMjYxMDA1MTgwMjA1WjAzMTEwLwYDVQQD
Eyg3NDdiZGFmYjQ3NDJmNmRjMmUyMjA0MzA5YWEyZjdiNDZiYWIxN2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFdUfs51EB+xl/gqRIz3M4Ja3stB
ru2bWPhzepuLgfMDupUITHpBsekukvzOwBuEkR5cxxP/+npt1EBBKAM3UmdTrg6R
p4zlsMkVMaKYVw0GffTlO04ufU2H/ibQWcuxrkIBgxLuGFilmMNnhTzwCeyu6mza
UHzxjxKFQkhYw6cgHxdmw6RjPCK7Xg8gpt65seS9gPZQQPOa7PRvibbuG8mD58zS
nprm5Avwh0CYAUOIVxLuaS/qKkOzBc0eXbPws2YcrbdTa7XD06j6C5rnqqHjTBJj
B3RlmLYTvPgJmG8I2YV0nPV0jolyO7WDH1rwCCMfKfCu5BR5pGHTbGXqYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHR72vtHQvbcLiIEMJqi97Rrqxf/MB8GA1UdIwQY
MBaAFIzbKTXZ3Q1YW2VRGHZMAcbXb3TCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5zcE5kbmREVmhiWlZFWWRrd0J4dGR2ZE1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lNWZlODUtYzVjMC00MjcxLTk5YzEt
NTQ1NmUxNWQ0NjcxLzEvak5zcE5kbmREVmhiWlZFWWRrd0J4dGR2ZE1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9lNWZlODUtYzVjMC00MjcxLTk5YzEtNTQ1NmUxNWQ0Njcx
LzEvak5zcE5kbmREVmhiWlZFWWRrd0J4dGR2ZE1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOib2H8JB
UlPvmVTu3emoR4KdgJBpp7liHfzHOPrJZQvWyzv9zoCS7f3cLRblqDy65lJrjbVT
v6hUlCa0zDsqev5j3hnsFVm+KAQveERjUbex8dtm3EEmJ2HMNlv247kbxXmiyw1R
NNu5DyyWqCPCYK+vph+fUn5OuThtxHUzAbx0aTNma+ZAwG8dgg7XvGc+7LQdVOOG
yyFZkFOYM6w792FDgQXHsFo9y0yWp/9OHQjzxg+Toj2RRiJzDVdx9K9vGWk1lq3k
l/jBs8qFrS+J6BbeQOvxSSmXDcIdyDjLIDjYVDtXrR8iDS/KzGqgtDWbyBj0+BKQ
SUD1V0MGSqwloQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:57:58 2026 by rpki-client