Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
File: jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft (raw, json)
Hash identifier: M9axX097ddd67CF7O/FJj7rI0tFCZD21l6JKiVPxRDw=
Subject key identifier: 7A:F0:F5:F9:19:54:03:CB:AB:9A:4F:92:13:65:65:BA:7F:66:52:BF
Authority key identifier: 8C:2B:C6:8C:6B:18:01:DC:43:03:3F:76:FC:A7:35:C7:D8:46:79:E3
Certificate issuer: /CN=8c2bc68c6b1801dc43033f76fca735c7d84679e3
Certificate serial: 01A08B67F05D5F95CA313A86870D07327980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
Manifest number: B5
Signing time: Thu 10 Sep 2026 13:00:39 +0000
Manifest this update: Thu 10 Sep 2026 13:00:39 +0000
Manifest next update: Fri 11 Sep 2026 13:00:39 +0000
Files and hashes: 1: Tj-2zHDfL3Pm8wXS0UwNWI0Hm20.roa (hash: rYP1Gh9xmcWC06XPLj4CF87qroyF6GWHDQDHGo84ucQ=)
2: jCvGjGsYAdxDAz92_Kc1x9hGeeM.crl (hash: G9OIJwvSFx2qUwQdSAC/SkUTfko9oFZqS4eUZA7Kzwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:67:f0:5d:5f:95:ca:31:3a:86:87:0d:07:32:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2bc68c6b1801dc43033f76fca735c7d84679e3
Validity
Not Before: Sep 10 13:00:39 2026 GMT
Not After : Sep 11 13:00:39 2026 GMT
Subject: CN=7af0f5f9195403cbab9a4f92136565ba7f6652bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:a0:6a:86:a5:79:6c:41:33:29:24:2f:b7:
6c:44:56:0b:a7:00:12:84:43:26:99:49:68:9a:fe:
1f:4b:c8:36:07:b3:ed:1b:ee:93:2e:1a:6a:2a:63:
ff:fd:c0:49:31:79:ad:62:36:8b:c7:c7:fb:94:3b:
d4:9f:2b:62:29:8a:1c:d7:c2:bd:f1:53:0a:c5:89:
8f:9d:1e:57:00:e0:33:d7:77:df:a1:5f:39:11:3c:
f7:25:69:9e:40:ef:70:e5:d8:2c:47:8e:59:3f:44:
2e:59:0f:f4:12:ac:3d:9d:af:05:a1:97:cf:96:21:
73:c3:7f:76:74:44:bc:6c:de:96:6e:b0:34:39:89:
b2:6a:8c:c1:c7:72:83:35:8c:67:f3:2c:36:c4:02:
70:53:a0:79:fb:64:63:5c:db:76:34:ca:35:6a:c0:
40:6d:f0:df:cc:06:f1:d7:a4:83:e8:74:3d:f7:69:
4e:23:47:58:e6:4b:85:41:94:4e:92:22:48:df:57:
2b:88:a4:96:de:2c:2b:02:83:7d:06:22:cb:9b:db:
b0:c8:c9:b4:23:a0:6b:82:8e:dd:6f:1c:f8:2a:6b:
2c:9b:2f:c5:b0:9d:fe:43:83:58:69:28:a5:76:dc:
a1:91:d4:56:53:31:ba:5e:93:4d:0c:b3:30:72:2f:
29:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F0:F5:F9:19:54:03:CB:AB:9A:4F:92:13:65:65:BA:7F:66:52:BF
X509v3 Authority Key Identifier:
keyid:8C:2B:C6:8C:6B:18:01:DC:43:03:3F:76:FC:A7:35:C7:D8:46:79:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a8:db:2d:c4:9d:ee:97:62:62:77:87:51:4e:a5:c5:38:26:
f2:3e:53:ac:54:cf:88:d3:15:c3:69:d5:95:7d:18:5f:40:1e:
20:8f:ec:dc:54:0d:38:4f:ea:03:0e:34:c0:98:d0:7a:e4:46:
c5:7c:ed:8d:fe:9b:12:4e:a7:aa:44:a4:69:49:b8:95:e7:a7:
31:ef:d3:b1:90:6c:75:a0:75:de:ac:a8:53:0c:96:79:b4:10:
d2:51:8c:87:07:43:be:63:54:60:24:a1:cf:f5:bf:11:a7:7d:
5a:12:a5:b7:93:bf:97:c8:aa:e0:56:d0:eb:c3:db:c5:a5:ff:
1f:bf:54:43:7f:4f:52:17:5e:56:1b:40:b0:f2:0d:a1:a6:d2:
a1:0f:e0:be:fd:5a:9c:f7:28:b6:40:ff:df:11:a1:7a:17:20:
49:9f:ff:ad:21:33:af:95:05:e4:01:08:74:f1:be:15:2f:dc:
6a:3c:77:0c:34:cc:2d:cf:c7:cc:23:de:c1:19:20:34:b7:e4:
bb:da:be:27:68:97:b5:aa:9b:8f:10:43:cb:f8:28:06:fd:dd:
cb:ae:13:d7:b8:5b:45:53:1d:21:dc:e0:13:0c:ac:2d:50:5d:
d9:c8:f4:94:bf:61:ff:ea:29:f7:28:56:cc:64:fb:39:72:79:
1e:bd:79:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLZ/BdX5XKMTqGhw0HMnmAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMmJjNjhjNmIxODAxZGM0MzAzM2Y3NmZjYTczNWM3ZDg0
Njc5ZTMwHhcNMjYwOTEwMTMwMDM5WhcNMjYwOTExMTMwMDM5WjAzMTEwLwYDVQQD
Eyg3YWYwZjVmOTE5NTQwM2NiYWI5YTRmOTIxMzY1NjViYTdmNjY1MmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQOgaoaleWxBMykkL7dsRFYLpwAS
hEMmmUlomv4fS8g2B7PtG+6TLhpqKmP//cBJMXmtYjaLx8f7lDvUnytiKYoc18K9
8VMKxYmPnR5XAOAz13ffoV85ETz3JWmeQO9w5dgsR45ZP0QuWQ/0Eqw9na8FoZfP
liFzw392dES8bN6WbrA0OYmyaozBx3KDNYxn8yw2xAJwU6B5+2RjXNt2NMo1asBA
bfDfzAbx16SD6HQ992lOI0dY5kuFQZROkiJI31criKSW3iwrAoN9BiLLm9uwyMm0
I6Brgo7dbxz4Kmssmy/FsJ3+Q4NYaSildtyhkdRWUzG6XpNNDLMwci8p5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrw9fkZVAPLq5pPkhNlZbp/ZlK/MB8GA1UdIwQY
MBaAFIwrxoxrGAHcQwM/dvynNcfYRnnjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakN2R2pHc1lBZHhEQXo5Ml9LYzF4OWhHZWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wODVhYzYtZTAyNi00MTA2LTg2MjIt
YmI5OWNkMjhhMDAzLzEvakN2R2pHc1lBZHhEQXo5Ml9LYzF4OWhHZWVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wODVhYzYtZTAyNi00MTA2LTg2MjItYmI5OWNkMjhhMDAz
LzEvakN2R2pHc1lBZHhEQXo5Ml9LYzF4OWhHZWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKjbLcSd
7pdiYneHUU6lxTgm8j5TrFTPiNMVw2nVlX0YX0AeII/s3FQNOE/qAw40wJjQeuRG
xXztjf6bEk6nqkSkaUm4leenMe/TsZBsdaB13qyoUwyWebQQ0lGMhwdDvmNUYCSh
z/W/Ead9WhKlt5O/l8iq4FbQ68PbxaX/H79UQ39PUhdeVhtAsPINoabSoQ/gvv1a
nPcotkD/3xGhehcgSZ//rSEzr5UF5AEIdPG+FS/cajx3DDTMLc/HzCPewRkgNLfk
u9q+J2iXtaqbjxBDy/goBv3dy64T17hbRVMdIdzgEwysLVBd2cj0lL9h/+op9yhW
zGT7OXJ5Hr15JA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:35 2026 by rpki-client