Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
File: jispgru9Q4t6sawE42wYgPOMato.mft (raw, json)
Hash identifier: MaAeOECIXf+nMrSOZdGB/TxcZYiKMfsr2omSmMxJPvI=
Subject key identifier: 05:4F:52:3A:C5:0D:7A:3B:73:0F:49:5C:54:A7:1F:BD:57:7C:CD:97
Authority key identifier: 8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
Certificate issuer: /CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Certificate serial: 01A186AD52D988E209C3DF543AEFA2483121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
Manifest number: 16AD
Signing time: Thu 29 Oct 2026 08:01:08 +0000
Manifest this update: Thu 29 Oct 2026 08:01:08 +0000
Manifest next update: Fri 30 Oct 2026 08:01:08 +0000
Files and hashes: 1: jispgru9Q4t6sawE42wYgPOMato.crl (hash: EHIgXqeXPrvPPyliDvtMswRpW7hYpxefpWVuMKDfHes=)
2: rpLLN-zEc59BcyaW_IW8fwJMCgE.roa (hash: coMYH2LK5We0hlfFCOPDMsdK4brnDNXm6xfRfXEZv9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:ad:52:d9:88:e2:09:c3:df:54:3a:ef:a2:48:31:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Validity
Not Before: Oct 29 08:01:08 2026 GMT
Not After : Oct 30 08:01:08 2026 GMT
Subject: CN=054f523ac50d7a3b730f495c54a71fbd577ccd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:97:f0:79:6c:b7:2e:45:a7:71:1e:88:49:a0:
35:04:69:c1:73:d6:22:3c:bb:3c:41:ef:86:8b:44:
bb:67:32:01:15:7b:6f:b7:5d:1a:9e:7d:a8:f9:35:
f6:3e:78:07:72:0a:4e:23:16:ef:88:6a:17:fa:4b:
12:61:63:ec:47:23:2e:38:9f:84:e0:ff:e2:5d:16:
99:76:11:c1:c7:7d:f5:0a:e0:92:b1:33:85:fd:00:
2e:37:d0:fc:d7:ac:43:1a:ce:f6:c4:bc:68:60:2b:
fa:9d:43:7c:1b:d1:3c:6a:4d:f9:b6:bb:f2:36:4c:
37:49:58:c0:93:4a:02:ad:1a:e3:06:fa:82:13:90:
8d:81:a2:7f:cb:2e:ea:34:49:4c:90:4f:b9:3b:5e:
74:7b:b5:b0:a4:ac:67:a1:4a:bf:bf:a8:49:b3:fc:
02:30:b7:03:fb:bf:24:d1:30:87:dc:c2:5a:19:c0:
3c:8f:d3:69:32:90:4f:c4:19:1d:ca:65:8e:54:c9:
ba:13:67:65:12:3f:2f:bb:ef:36:ef:75:74:11:74:
cd:82:63:08:2c:a3:4d:df:ec:d7:ef:c6:1b:3e:b0:
50:7f:48:fe:89:0c:df:e2:52:16:2a:5f:d5:d7:0d:
ff:d8:bd:3f:58:9a:fa:df:99:1b:fa:fb:06:0f:59:
da:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4F:52:3A:C5:0D:7A:3B:73:0F:49:5C:54:A7:1F:BD:57:7C:CD:97
X509v3 Authority Key Identifier:
keyid:8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:48:0e:81:19:00:71:01:d6:41:0e:d5:be:6a:39:4d:a7:d2:
9e:83:a2:79:af:0b:20:3d:51:9d:74:31:83:2a:6b:59:6f:8e:
ce:50:33:16:9e:dd:c5:eb:56:04:b3:58:3f:a7:4c:ff:b8:2c:
54:49:48:37:78:d8:a0:72:45:e2:2b:46:af:2e:58:90:05:1e:
6c:e8:e9:65:b5:1b:ed:0c:f4:ee:c9:47:ae:29:87:b2:7f:39:
b1:0d:fd:3d:de:54:f3:a7:1f:93:2a:95:fd:d7:b1:54:67:7f:
ee:55:fe:65:1f:a8:d8:6b:8d:96:2a:bb:71:d3:ce:69:96:7b:
bd:5c:54:2f:d5:df:de:68:3d:f0:cc:ca:ca:9a:e5:ec:99:d2:
41:23:a2:1a:18:be:b1:78:81:66:46:7e:53:88:ce:40:b2:42:
e5:15:70:d2:8d:3e:73:d9:7e:84:71:82:f3:f6:83:94:cb:f9:
37:d0:5b:2a:23:c2:dc:97:2f:94:f0:19:4a:5e:82:07:9e:ac:
6b:38:fc:b0:92:59:7f:ac:2d:72:24:da:fd:77:16:c7:9f:27:
33:75:8c:76:df:9a:d9:5e:d1:2a:e9:e7:28:89:cc:eb:aa:46:
da:37:f3:fd:12:5f:3c:6b:e4:34:59:56:7f:31:78:b7:02:d8:
a7:3f:d9:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGGrVLZiOIJw99UOu+iSDEhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMmIyOTgyYmJiZDQzOGI3YWIxYWMwNGUzNmMxODgwZjM4
YzZhZGEwHhcNMjYxMDI5MDgwMTA4WhcNMjYxMDMwMDgwMTA4WjAzMTEwLwYDVQQD
EygwNTRmNTIzYWM1MGQ3YTNiNzMwZjQ5NWM1NGE3MWZiZDU3N2NjZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45fweWy3LkWncR6ISaA1BGnBc9Yi
PLs8Qe+Gi0S7ZzIBFXtvt10ann2o+TX2PngHcgpOIxbviGoX+ksSYWPsRyMuOJ+E
4P/iXRaZdhHBx331CuCSsTOF/QAuN9D816xDGs72xLxoYCv6nUN8G9E8ak35trvy
Nkw3SVjAk0oCrRrjBvqCE5CNgaJ/yy7qNElMkE+5O150e7WwpKxnoUq/v6hJs/wC
MLcD+78k0TCH3MJaGcA8j9NpMpBPxBkdymWOVMm6E2dlEj8vu+8273V0EXTNgmMI
LKNN3+zX78YbPrBQf0j+iQzf4lIWKl/V1w3/2L0/WJr635kb+vsGD1naFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVPUjrFDXo7cw9JXFSnH71XfM2XMB8GA1UdIwQY
MBaAFI4rKYK7vUOLerGsBONsGIDzjGraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamlzcGdydTlRNHQ2c2F3RTQyd1lnUE9NYXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83MDNkZjItYjhiNC00OGY3LTkzMDEt
ZGU4MWM3YzFlNzU0LzEvamlzcGdydTlRNHQ2c2F3RTQyd1lnUE9NYXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS83MDNkZjItYjhiNC00OGY3LTkzMDEtZGU4MWM3YzFlNzU0
LzEvamlzcGdydTlRNHQ2c2F3RTQyd1lnUE9NYXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkgOgRkA
cQHWQQ7Vvmo5TafSnoOiea8LID1RnXQxgyprWW+OzlAzFp7dxetWBLNYP6dM/7gs
VElIN3jYoHJF4itGry5YkAUebOjpZbUb7Qz07slHrimHsn85sQ39Pd5U86cfkyqV
/dexVGd/7lX+ZR+o2GuNliq7cdPOaZZ7vVxUL9Xf3mg98MzKyprl7JnSQSOiGhi+
sXiBZkZ+U4jOQLJC5RVw0o0+c9l+hHGC8/aDlMv5N9BbKiPC3JcvlPAZSl6CB56s
azj8sJJZf6wtciTa/XcWx58nM3WMdt+a2V7RKunnKInM66pG2jfz/RJfPGvkNFlW
fzF4twLYpz/ZEw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 13:52:19 2026 by rpki-client