Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
File: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft (raw, json)
Hash identifier: QdchOUWRQ+Ut8mG/0Wgjbf5mcMlB/deSIa4IZri8AcY=
Subject key identifier: A3:B4:04:86:BD:0A:F4:E0:D9:B3:98:C2:47:04:C5:95:3D:C7:9D:E6
Authority key identifier: 26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
Certificate issuer: /CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Certificate serial: 0199270E1C08004A43CF01AA62F5C45ADC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
Manifest number: 039C
Signing time: Mon 08 Sep 2025 02:01:00 +0000
Manifest this update: Mon 08 Sep 2025 02:01:00 +0000
Manifest next update: Tue 09 Sep 2025 02:01:00 +0000
Files and hashes: 1: HRacqG8l3Hf7zAmCVCG0P5KOMS4.roa (hash: POwtAYxNl5+u6y8FOiGiNGLuMGWBIZsQmYKWLa6++Q0=)
2: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl (hash: JAyDJgZsTghHZCnc2n8Ex25aFmYOIzWEvM+TeFvQldo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:0e:1c:08:00:4a:43:cf:01:aa:62:f5:c4:5a:dc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Validity
Not Before: Sep 8 02:01:00 2025 GMT
Not After : Sep 9 02:01:00 2025 GMT
Subject: CN=a3b40486bd0af4e0d9b398c24704c5953dc79de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:cf:db:a6:db:47:b8:94:30:f0:fd:df:da:
49:ce:4d:ce:70:d9:e3:d5:81:1f:b5:8a:ef:7a:86:
bf:18:5b:d7:9b:dc:d2:43:cc:f0:b3:03:dd:83:cf:
17:30:ca:d5:f7:f7:39:ed:ba:58:93:56:da:7c:9d:
e1:e3:3d:d9:12:c4:c8:7c:d2:97:17:d6:d2:42:6f:
de:ed:76:8b:14:24:e4:24:64:3d:62:34:da:e4:31:
94:85:b5:6f:be:f4:af:f9:1a:50:f2:e8:57:6d:c7:
e1:ea:5e:19:00:a4:28:ad:98:39:a8:ba:da:25:b3:
a1:53:cb:6c:a9:cc:4c:b8:fb:e2:3d:c7:9e:89:72:
1b:d6:27:6b:35:eb:b6:36:30:7a:8f:ab:38:ce:1d:
7c:4a:1c:d7:5e:f5:06:80:3e:21:35:23:0d:e7:f6:
7f:79:36:66:5f:bb:fd:c6:08:9d:05:04:25:b9:9d:
dd:26:17:26:fb:8c:2c:8a:ad:1b:bb:49:7a:66:29:
91:44:85:6a:5d:07:18:10:65:c0:30:bf:8d:eb:c7:
d8:e0:03:e8:df:c9:58:b5:14:d2:d7:3a:6d:5d:3c:
3b:bf:a9:94:8a:bf:2b:7e:4d:cc:7e:45:e3:10:60:
42:7b:5c:2f:6e:96:f2:21:b2:cd:27:cd:b4:bf:8f:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B4:04:86:BD:0A:F4:E0:D9:B3:98:C2:47:04:C5:95:3D:C7:9D:E6
X509v3 Authority Key Identifier:
keyid:26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4a:6c:db:b2:06:d5:a9:c2:e9:54:6b:dc:ee:98:e6:db:76:
c7:27:59:7c:99:87:8c:6a:00:9c:93:2e:d0:07:e6:87:9c:ed:
79:54:87:c3:35:02:77:e3:ba:93:3b:2e:bb:2d:a5:e0:06:f9:
41:b9:79:27:57:a9:93:1a:aa:eb:ed:72:cf:67:f9:62:ba:38:
4b:3f:97:29:f5:70:17:1b:64:e4:21:47:6a:43:b3:6b:02:33:
be:89:0c:09:1d:a8:6b:4c:e9:9c:f6:40:72:27:c2:b5:5b:bd:
c6:88:aa:12:46:5a:e2:ff:85:55:12:72:0a:2f:89:b8:1e:7b:
1d:31:61:58:2c:4e:95:3f:7f:a8:98:4e:b8:62:5a:49:97:1b:
88:d6:da:5f:d2:68:98:bc:a5:ba:6f:23:2d:b9:1c:40:56:dc:
9b:b7:8b:2f:1a:78:e0:35:24:e1:45:bc:38:00:b7:43:9d:57:
34:dd:58:52:97:12:15:5c:b2:35:bf:99:8d:64:30:18:0e:36:
0a:5d:b8:17:e3:ca:a2:68:37:ec:1c:b0:10:d1:03:a8:7f:0c:
1a:2e:a7:38:56:c4:13:ec:70:06:24:c6:a8:21:16:78:13:b9:
fb:a2:d6:41:56:7f:cc:2e:67:d6:9c:2a:9d:d7:05:83:85:3e:
dc:08:cd:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZknDhwIAEpDzwGqYvXEWtxqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NDI3YTI2MGQ2ZDk2Y2MxMTE1Y2NjZThhOTE0YWZmYjBl
MWQxNmIwHhcNMjUwOTA4MDIwMTAwWhcNMjUwOTA5MDIwMTAwWjAzMTEwLwYDVQQD
EyhhM2I0MDQ4NmJkMGFmNGUwZDliMzk4YzI0NzA0YzU5NTNkYzc5ZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5LP26bbR7iUMPD939pJzk3OcNnj
1YEftYrveoa/GFvXm9zSQ8zwswPdg88XMMrV9/c57bpYk1bafJ3h4z3ZEsTIfNKX
F9bSQm/e7XaLFCTkJGQ9YjTa5DGUhbVvvvSv+RpQ8uhXbcfh6l4ZAKQorZg5qLra
JbOhU8tsqcxMuPviPceeiXIb1idrNeu2NjB6j6s4zh18ShzXXvUGgD4hNSMN5/Z/
eTZmX7v9xgidBQQluZ3dJhcm+4wsiq0bu0l6ZimRRIVqXQcYEGXAML+N68fY4APo
38lYtRTS1zptXTw7v6mUir8rfk3MfkXjEGBCe1wvbpbyIbLNJ820v494+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKO0BIa9CvTg2bOYwkcExZU9x53mMB8GA1UdIwQY
MBaAFCZCeiYNbZbMERXMzoqRSv+w4dFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTIt
ODUyOGU1NTMyYzBlLzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTItODUyOGU1NTMyYzBl
LzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkps27IG
1anC6VRr3O6Y5tt2xydZfJmHjGoAnJMu0Afmh5zteVSHwzUCd+O6kzsuuy2l4Ab5
Qbl5J1epkxqq6+1yz2f5Yro4Sz+XKfVwFxtk5CFHakOzawIzvokMCR2oa0zpnPZA
cifCtVu9xoiqEkZa4v+FVRJyCi+JuB57HTFhWCxOlT9/qJhOuGJaSZcbiNbaX9Jo
mLylum8jLbkcQFbcm7eLLxp44DUk4UW8OAC3Q51XNN1YUpcSFVyyNb+ZjWQwGA42
Cl24F+PKomg37BywENEDqH8MGi6nOFbEE+xwBiTGqCEWeBO5+6LWQVZ/zC5n1pwq
ndcFg4U+3AjNgQ==
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:40:58 2025 by rpki-client