Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
File: jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft (raw, json)
Hash identifier: fwBGjLB0N6Lg7cpKt4f3/HhS+ccUWr4Hj3Ay5nTLYiw=
Subject key identifier: 00:09:07:A9:59:14:40:50:C4:EA:E4:5F:20:3F:A3:2E:FF:CC:B6:0C
Authority key identifier: 8C:2B:C6:8C:6B:18:01:DC:43:03:3F:76:FC:A7:35:C7:D8:46:79:E3
Certificate issuer: /CN=8c2bc68c6b1801dc43033f76fca735c7d84679e3
Certificate serial: 01A17ADFF575FBB05E4CC6794352D95C13FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
Manifest number: 0131
Signing time: Tue 27 Oct 2026 01:01:00 +0000
Manifest this update: Tue 27 Oct 2026 01:01:00 +0000
Manifest next update: Wed 28 Oct 2026 01:01:00 +0000
Files and hashes: 1: Tj-2zHDfL3Pm8wXS0UwNWI0Hm20.roa (hash: rYP1Gh9xmcWC06XPLj4CF87qroyF6GWHDQDHGo84ucQ=)
2: jCvGjGsYAdxDAz92_Kc1x9hGeeM.crl (hash: 8Uy2TUdeHM6lWED+neQxUelbM2nPFY4zyyU0OSRfY1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:f5:75:fb:b0:5e:4c:c6:79:43:52:d9:5c:13:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2bc68c6b1801dc43033f76fca735c7d84679e3
Validity
Not Before: Oct 27 01:01:00 2026 GMT
Not After : Oct 28 01:01:00 2026 GMT
Subject: CN=000907a959144050c4eae45f203fa32effccb60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:33:1f:ad:cd:88:1e:0d:71:33:17:92:1a:
a9:3a:ad:e6:2a:24:1f:39:0a:44:7f:05:fa:ee:a3:
36:7b:d0:a8:cf:b8:69:f9:11:9e:29:9d:6a:99:29:
1f:e8:74:46:20:9e:e3:e5:92:6a:11:07:2a:00:d2:
74:f5:35:7c:b3:14:a7:c2:fc:bf:ae:ed:72:03:37:
81:7a:0c:72:86:85:e9:8e:44:56:fc:53:eb:f4:49:
7d:50:86:85:66:db:00:ea:05:cb:46:e9:e1:b2:f2:
a3:10:b5:4c:16:0a:b4:3f:a9:fd:c8:10:4d:10:38:
02:8e:cb:a2:1f:b9:a5:d6:87:0e:ec:88:ba:27:2f:
c2:a5:dc:9b:4f:87:77:84:ae:f8:44:e2:36:ef:ed:
78:55:98:18:f0:97:30:72:6f:b2:7b:96:e6:f2:6a:
c5:40:de:88:4c:9e:9d:15:30:92:61:c5:5f:77:c8:
7d:0e:02:cf:8e:95:39:6e:c5:4f:d2:6d:bb:ad:c6:
dc:04:c6:16:42:0d:af:cb:d5:dd:cd:52:a4:28:cf:
2f:27:b3:42:8a:15:08:1d:72:9c:19:17:22:28:41:
4e:a9:ac:b8:0c:98:2f:71:e6:a0:61:92:be:26:9b:
4c:e5:ba:c3:39:34:91:ea:d9:de:ea:57:84:2b:b2:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:09:07:A9:59:14:40:50:C4:EA:E4:5F:20:3F:A3:2E:FF:CC:B6:0C
X509v3 Authority Key Identifier:
keyid:8C:2B:C6:8C:6B:18:01:DC:43:03:3F:76:FC:A7:35:C7:D8:46:79:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:bc:6d:fe:73:6a:48:11:3c:16:13:54:34:01:6a:46:2e:13:
5c:b8:8f:f2:2b:2d:9b:0d:16:f0:9a:89:31:56:7a:69:77:8f:
59:f0:71:8e:66:11:ee:97:ce:ce:f7:29:c5:e9:b6:76:d7:b3:
17:0a:f0:2b:84:19:a5:01:f1:cd:7a:d0:b8:a3:14:8d:93:0a:
67:73:96:4a:80:f4:32:30:78:ac:86:cc:b5:68:df:8e:0b:72:
7b:6f:bf:03:be:80:54:77:f5:68:73:4b:7c:87:2c:6b:90:83:
12:41:91:0e:19:16:d0:0f:5c:4e:f7:68:15:fd:08:19:b9:b7:
aa:32:81:b4:ab:7e:70:1b:44:e4:99:93:17:16:85:8f:5e:20:
00:10:8b:65:f7:f1:38:d5:d8:cf:44:00:b3:fb:2e:ec:07:a8:
69:5d:28:f6:52:ad:07:9c:09:1d:86:9e:30:3e:11:d9:74:d2:
bd:c2:b6:1e:db:ef:16:98:aa:ed:0b:4c:c8:0e:6a:ef:f6:37:
43:88:19:0f:2e:a8:26:32:98:8e:d3:46:89:c7:d4:7c:94:e4:
85:af:e2:2f:c8:f6:2a:3c:41:7f:18:f5:6b:35:af:be:aa:16:
75:d1:79:ec:27:9c:08:a3:c4:e6:58:2a:ec:a3:4a:41:24:ef:
d2:d2:4b:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF63/V1+7BeTMZ5Q1LZXBP7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMmJjNjhjNmIxODAxZGM0MzAzM2Y3NmZjYTczNWM3ZDg0
Njc5ZTMwHhcNMjYxMDI3MDEwMTAwWhcNMjYxMDI4MDEwMTAwWjAzMTEwLwYDVQQD
EygwMDA5MDdhOTU5MTQ0MDUwYzRlYWU0NWYyMDNmYTMyZWZmY2NiNjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTMzH63NiB4NcTMXkhqpOq3mKiQf
OQpEfwX67qM2e9Coz7hp+RGeKZ1qmSkf6HRGIJ7j5ZJqEQcqANJ09TV8sxSnwvy/
ru1yAzeBegxyhoXpjkRW/FPr9El9UIaFZtsA6gXLRunhsvKjELVMFgq0P6n9yBBN
EDgCjsuiH7ml1ocO7Ii6Jy/CpdybT4d3hK74ROI27+14VZgY8Jcwcm+ye5bm8mrF
QN6ITJ6dFTCSYcVfd8h9DgLPjpU5bsVP0m27rcbcBMYWQg2vy9XdzVKkKM8vJ7NC
ihUIHXKcGRciKEFOqay4DJgvceagYZK+JptM5brDOTSR6tne6leEK7LaCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAJB6lZFEBQxOrkXyA/oy7/zLYMMB8GA1UdIwQY
MBaAFIwrxoxrGAHcQwM/dvynNcfYRnnjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakN2R2pHc1lBZHhEQXo5Ml9LYzF4OWhHZWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wODVhYzYtZTAyNi00MTA2LTg2MjIt
YmI5OWNkMjhhMDAzLzEvakN2R2pHc1lBZHhEQXo5Ml9LYzF4OWhHZWVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wODVhYzYtZTAyNi00MTA2LTg2MjItYmI5OWNkMjhhMDAz
LzEvakN2R2pHc1lBZHhEQXo5Ml9LYzF4OWhHZWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7xt/nNq
SBE8FhNUNAFqRi4TXLiP8istmw0W8JqJMVZ6aXePWfBxjmYR7pfOzvcpxem2dtez
FwrwK4QZpQHxzXrQuKMUjZMKZ3OWSoD0MjB4rIbMtWjfjgtye2+/A76AVHf1aHNL
fIcsa5CDEkGRDhkW0A9cTvdoFf0IGbm3qjKBtKt+cBtE5JmTFxaFj14gABCLZffx
ONXYz0QAs/su7AeoaV0o9lKtB5wJHYaeMD4R2XTSvcK2HtvvFpiq7QtMyA5q7/Y3
Q4gZDy6oJjKYjtNGicfUfJTkha/iL8j2KjxBfxj1azWvvqoWddF57CecCKPE5lgq
7KNKQSTv0tJLXA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:14:03 2026 by rpki-client