Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
File: jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json)
Hash identifier: qB5e9zTJj1BVxSk420pYbIlC0cZppfPHrycHzwXboos=
Subject key identifier: 18:E5:ED:10:63:3C:FA:71:D5:D8:CC:E3:B3:B6:FC:6F:7F:12:E4:6A
Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Certificate issuer: /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Certificate serial: 01A1931EBA415BF906C0D8B9885637F8FB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
Manifest number: 1AD4
Signing time: Sat 31 Oct 2026 18:00:26 +0000
Manifest this update: Sat 31 Oct 2026 18:00:26 +0000
Manifest next update: Sun 01 Nov 2026 18:00:26 +0000
Files and hashes: 1: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: dRvLebLK9fZg2whBTOZvND48ePl45ubypEL69DfC8Y8=)
2: zSwQGbw5eUrS_VmyS0eNcuYgWQM.roa (hash: KhztEjdKKCUwFxaKlQfytzrfu+bmSSNX/+mFfUrHfZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:1e:ba:41:5b:f9:06:c0:d8:b9:88:56:37:f8:fb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Validity
Not Before: Oct 31 18:00:26 2026 GMT
Not After : Nov 1 18:00:26 2026 GMT
Subject: CN=18e5ed10633cfa71d5d8cce3b3b6fc6f7f12e46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:22:e2:3a:c8:de:47:cd:1d:74:4d:19:f3:
93:73:7a:79:6a:4f:70:48:2e:4d:a5:82:84:75:1c:
90:e8:d9:15:01:fc:9a:46:2f:35:fb:52:25:6b:fe:
5b:0c:4f:c3:9d:b9:27:1a:f0:69:14:20:43:1c:ca:
77:7d:98:9e:56:ae:e8:48:42:d4:90:64:90:63:e1:
f6:43:90:25:4f:ed:19:fd:4f:2d:89:9d:37:83:48:
d6:2e:99:da:51:a2:ce:43:68:2d:13:d3:91:62:41:
79:9a:c4:bc:ae:d3:06:60:2d:e8:e7:85:ea:98:e0:
9e:fe:ef:47:27:5e:aa:ab:62:f2:5b:10:3d:d1:65:
5a:31:9c:d0:95:c8:67:0f:35:21:91:de:a1:dd:67:
7d:c2:7d:5a:dc:38:1e:97:42:5e:6f:03:ed:37:9d:
59:ac:94:04:6f:3c:6d:1b:6d:89:dd:f5:eb:0a:86:
3e:b2:ec:5a:17:f4:4d:b6:38:25:e4:aa:c5:96:e0:
e5:e7:3d:40:ac:ba:85:45:f8:43:57:81:c2:ba:9f:
99:ab:63:a2:d6:ba:0a:32:a6:c2:84:b2:a1:14:ee:
b0:8b:29:af:f4:23:ba:b7:79:9b:c7:9d:4e:4a:b5:
ab:3c:3b:0d:0d:40:41:88:cb:2b:41:94:16:dd:21:
ce:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E5:ED:10:63:3C:FA:71:D5:D8:CC:E3:B3:B6:FC:6F:7F:12:E4:6A
X509v3 Authority Key Identifier:
keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c0:17:35:69:12:66:b4:b6:58:23:b1:01:d6:2c:31:88:ab:
90:86:2f:c3:e1:8c:0c:a3:71:56:17:a1:f4:87:00:0c:93:92:
2d:03:ca:0e:85:7e:20:0a:80:30:54:cc:4c:d8:96:83:f0:fc:
20:18:d8:ca:7f:d0:e9:7a:97:5a:a3:4b:6d:59:ed:3e:4a:c9:
d1:76:23:98:d3:7e:62:4a:ff:ec:11:c4:5c:fc:b5:4e:92:84:
f7:46:10:93:88:c0:0a:75:5b:d3:13:07:bf:53:fa:4f:22:87:
e6:1c:e5:e2:f2:3e:fb:37:c9:5a:9b:ac:85:b3:f6:cc:af:69:
5a:14:72:85:94:79:23:3c:72:b0:32:ab:ef:ea:d0:2e:57:82:
96:02:c4:b9:45:e7:a1:ed:29:e8:92:38:95:80:4e:84:c8:5e:
ae:dd:ac:f9:0a:2e:4e:60:ba:e2:ba:f2:78:35:84:12:f9:0c:
bf:87:96:c6:4e:b5:41:7f:91:4d:ad:8e:ed:dd:fb:47:69:94:
45:e2:fa:d9:1a:9b:00:e5:87:09:20:45:1d:4e:f2:90:d7:44:
2c:4a:66:5e:58:28:bc:6e:23:aa:9e:34:91:70:f4:ee:4f:d9:
e8:1f:34:e7:ad:ac:09:49:1c:b6:85:66:86:0d:62:67:83:93:
0d:cc:08:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGTHrpBW/kGwNi5iFY3+PsbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZjNkZjk3MWFhN2NiMjVkZmI3Y2I1NWIyOWM4N2JjYmUz
MjA4MjkwHhcNMjYxMDMxMTgwMDI2WhcNMjYxMTAxMTgwMDI2WjAzMTEwLwYDVQQD
EygxOGU1ZWQxMDYzM2NmYTcxZDVkOGNjZTNiM2I2ZmM2ZjdmMTJlNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIAi4jrI3kfNHXRNGfOTc3p5ak9w
SC5NpYKEdRyQ6NkVAfyaRi81+1Ila/5bDE/DnbknGvBpFCBDHMp3fZieVq7oSELU
kGSQY+H2Q5AlT+0Z/U8tiZ03g0jWLpnaUaLOQ2gtE9ORYkF5msS8rtMGYC3o54Xq
mOCe/u9HJ16qq2LyWxA90WVaMZzQlchnDzUhkd6h3Wd9wn1a3Dgel0JebwPtN51Z
rJQEbzxtG22J3fXrCoY+suxaF/RNtjgl5KrFluDl5z1ArLqFRfhDV4HCup+Zq2Oi
1roKMqbChLKhFO6wiymv9CO6t3mbx51OSrWrPDsNDUBBiMsrQZQW3SHOwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjl7RBjPPpx1djM47O2/G9/EuRqMB8GA1UdIwQY
MBaAFI3z35cap8sl37fLVbKch7y+MggpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jMmFkNDQtZmU3ZC00NmQ5LTkxM2Ut
Yzc5NGI1Zjg3ODA0LzEvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jMmFkNDQtZmU3ZC00NmQ5LTkxM2UtYzc5NGI1Zjg3ODA0
LzEvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApMAXNWkS
ZrS2WCOxAdYsMYirkIYvw+GMDKNxVheh9IcADJOSLQPKDoV+IAqAMFTMTNiWg/D8
IBjYyn/Q6XqXWqNLbVntPkrJ0XYjmNN+Ykr/7BHEXPy1TpKE90YQk4jACnVb0xMH
v1P6TyKH5hzl4vI++zfJWpushbP2zK9pWhRyhZR5IzxysDKr7+rQLleClgLEuUXn
oe0p6JI4lYBOhMhert2s+QouTmC64rryeDWEEvkMv4eWxk61QX+RTa2O7d37R2mU
ReL62RqbAOWHCSBFHU7ykNdELEpmXlgovG4jqp40kXD07k/Z6B80562sCUkctoVm
hg1iZ4OTDcwIUw==
-----END CERTIFICATE-----
Generated at Sun Nov 1 01:52:56 2026 by rpki-client