Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: eNrBbLYdBiAgdSjMXctRhMzuftFCOxhLAvJ9T+QKdos=
Subject key identifier: 3F:A8:B0:F6:F0:42:73:D5:24:9C:99:75:D4:E6:BB:3D:62:84:F8:B7
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 01A1732640E0C039307BB1CAB8C3F9262F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 0DDB
Signing time: Sun 25 Oct 2026 13:00:49 +0000
Manifest this update: Sun 25 Oct 2026 13:00:49 +0000
Manifest next update: Mon 26 Oct 2026 13:00:49 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: A19YAooxLeHESy4lONJpn6WQqqoe0QprvFF7Qm1aUuM=)
2: b4HgcSuFF78g3KojbGnfcJ_HWow.roa (hash: T5A48IHIu6Siqa4yHRK+sf9a+qlYjIQQwfP6VgKo5VA=)
3: grRs4RivLN7cpUB3UyiXGSSLhPU.roa (hash: uHkhelnd0+okWLXV2TG7W6yzacFWsktXmESp0qKxtTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:26:40:e0:c0:39:30:7b:b1:ca:b8:c3:f9:26:2f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Oct 25 13:00:49 2026 GMT
Not After : Oct 26 13:00:49 2026 GMT
Subject: CN=3fa8b0f6f04273d5249c9975d4e6bb3d6284f8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:8c:62:03:ad:49:d1:26:cf:8e:65:c9:3e:
04:d8:b0:26:20:d2:c5:7a:05:a8:6f:1e:0c:90:99:
01:3b:9d:00:95:b2:ca:33:d9:39:c9:94:98:95:bc:
fb:08:fb:8b:73:cf:af:a3:d7:70:57:31:f6:23:c7:
81:d0:01:e7:6c:b8:fe:51:1f:75:fd:c1:d0:48:39:
bc:76:d2:55:07:45:7d:1d:1d:99:5d:ec:7f:0b:f2:
34:39:c3:02:55:9d:dc:b0:a3:8a:0c:81:f1:31:55:
36:cb:b0:7d:63:c0:a0:46:00:87:58:fb:1a:6d:5c:
a7:3d:98:2c:2d:4b:8a:0e:95:99:76:ff:a7:76:e5:
4c:71:8b:6c:22:70:12:86:0c:f2:49:67:ad:86:48:
e6:8b:47:b2:92:90:8a:70:93:a4:e8:b1:8e:b3:0b:
81:71:d1:73:d6:be:a5:cb:4a:db:a3:bc:f9:0c:1b:
1a:9b:b3:ea:a4:d7:ee:21:c3:62:c0:03:1d:03:0c:
1b:d0:c3:e2:c2:ff:a9:bd:93:e2:d4:bc:0a:2c:25:
e3:ea:56:a3:0d:7b:4a:e7:54:b4:85:ae:0a:df:e2:
db:f3:2e:8c:44:a1:a5:b3:56:12:9b:3c:70:f6:f8:
4f:d2:cf:93:18:d5:4d:df:b1:c4:5c:52:fa:24:ac:
75:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A8:B0:F6:F0:42:73:D5:24:9C:99:75:D4:E6:BB:3D:62:84:F8:B7
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:51:18:07:f9:7a:b4:0c:3b:df:6c:b1:f2:4e:97:94:90:ab:
a8:44:df:05:87:3d:23:05:d7:64:97:b9:eb:0f:8f:18:38:2c:
c8:f0:92:ae:f2:06:ee:cf:a2:8e:68:de:a0:1d:7a:ef:34:b8:
53:3f:a3:e8:5c:af:7d:0e:50:ee:7d:34:4d:1d:fa:b9:90:a2:
59:2f:ee:bc:88:89:39:38:4a:2c:b5:2d:1d:6f:6a:70:31:a1:
cf:5e:59:a4:04:88:b2:44:7b:3f:fc:18:14:71:4b:08:ef:15:
dd:b2:39:f6:3b:a1:2c:7a:19:ce:67:b6:3d:5e:23:e6:4e:ec:
59:72:bd:a3:f5:9b:cf:f9:1a:61:d3:e9:dd:48:32:01:cd:2d:
88:7f:03:60:48:62:72:27:6e:0a:79:ca:19:ce:13:38:e7:27:
27:7a:1c:bc:9f:53:8f:a4:06:e8:5c:dc:b7:56:32:26:ab:b8:
67:1f:c3:e9:b6:40:23:8a:82:03:6c:9f:76:21:40:6d:9d:a9:
12:67:7f:22:fa:f7:03:83:bb:e3:a0:c4:29:95:28:19:f4:3d:
43:e5:92:d6:b6:1a:a9:76:fe:77:77:19:fc:3d:ef:ed:55:c5:
4e:11:9f:33:b3:44:a5:75:eb:93:5b:5f:79:80:01:83:e8:d9:
d5:e1:52:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFzJkDgwDkwe7HKuMP5Ji8cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTcwMjdlM2EwODdiNjVmOTY4YjUzNWU0MTVmNjc0MzI2
OTU4NzYwHhcNMjYxMDI1MTMwMDQ5WhcNMjYxMDI2MTMwMDQ5WjAzMTEwLwYDVQQD
EygzZmE4YjBmNmYwNDI3M2Q1MjQ5Yzk5NzVkNGU2YmIzZDYyODRmOGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUSMYgOtSdEmz45lyT4E2LAmINLF
egWobx4MkJkBO50AlbLKM9k5yZSYlbz7CPuLc8+vo9dwVzH2I8eB0AHnbLj+UR91
/cHQSDm8dtJVB0V9HR2ZXex/C/I0OcMCVZ3csKOKDIHxMVU2y7B9Y8CgRgCHWPsa
bVynPZgsLUuKDpWZdv+nduVMcYtsInAShgzySWethkjmi0eykpCKcJOk6LGOswuB
cdFz1r6ly0rbo7z5DBsam7PqpNfuIcNiwAMdAwwb0MPiwv+pvZPi1LwKLCXj6laj
DXtK51S0ha4K3+Lb8y6MRKGls1YSmzxw9vhP0s+TGNVN37HEXFL6JKx1xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+osPbwQnPVJJyZddTmuz1ihPi3MB8GA1UdIwQY
MBaAFCRXAn46CHtl+Wi1NeQV9nQyaVh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy85NWYzMjAtYzdkMy00MWRkLWIxMjUt
Yjc5ZDA4ZmExNzQ3LzEvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy85NWYzMjAtYzdkMy00MWRkLWIxMjUtYjc5ZDA4ZmExNzQ3
LzEvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1EYB/l6
tAw732yx8k6XlJCrqETfBYc9IwXXZJe56w+PGDgsyPCSrvIG7s+ijmjeoB167zS4
Uz+j6FyvfQ5Q7n00TR36uZCiWS/uvIiJOThKLLUtHW9qcDGhz15ZpASIskR7P/wY
FHFLCO8V3bI59juhLHoZzme2PV4j5k7sWXK9o/Wbz/kaYdPp3UgyAc0tiH8DYEhi
ciduCnnKGc4TOOcnJ3ocvJ9Tj6QG6Fzct1YyJqu4Zx/D6bZAI4qCA2yfdiFAbZ2p
Emd/Ivr3A4O746DEKZUoGfQ9Q+WS1rYaqXb+d3cZ/D3v7VXFThGfM7NEpXXrk1tf
eYABg+jZ1eFSQA==
-----END CERTIFICATE-----
Generated at Sun Oct 25 23:12:54 2026 by rpki-client