Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
File: JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json)
Hash identifier: EeHtk6Q4zQ33bIYcBvpxC26cETZVWDISgnl/aOJcuww=
Subject key identifier: D6:86:24:A6:A3:A8:35:D8:5E:3C:1D:62:39:69:97:32:42:38:2D:B8
Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
Certificate issuer: /CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Certificate serial: 01A08B30E93E4F17CEF5CD8D759855DAF6E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
Manifest number: 047C
Signing time: Thu 10 Sep 2026 12:00:33 +0000
Manifest this update: Thu 10 Sep 2026 12:00:33 +0000
Manifest next update: Fri 11 Sep 2026 12:00:33 +0000
Files and hashes: 1: D17eb-YaN69zmYAWu9of4KG5E8Y.roa (hash: stGJZzeKt4km6Sv/uUT+Q3OWclxmp1dOYGAe5XGVe2w=)
2: FZgi84RMvT9_2vE42FDuM9M6yQo.roa (hash: MWv0A+a3Hv1l7nsYC0PKMV2mBEaDOEQF7nbo1KN1I5Q=)
3: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: /b2+w2ik6xB9GJDjFErWi+91ZX56C/rplf/Tla5rIQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:30:e9:3e:4f:17:ce:f5:cd:8d:75:98:55:da:f6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Validity
Not Before: Sep 10 12:00:33 2026 GMT
Not After : Sep 11 12:00:33 2026 GMT
Subject: CN=d68624a6a3a835d85e3c1d623969973242382db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:69:6a:61:ab:14:b3:55:17:d5:46:19:e4:
74:68:7a:96:8c:a8:3b:76:20:61:e6:1f:93:fe:6f:
0e:e8:79:d8:9e:61:36:c2:a9:b2:c1:cc:f4:d2:f9:
1d:10:a2:6c:07:a1:f5:e1:f6:2a:a9:88:9b:58:da:
f3:08:bb:70:80:3a:9d:ec:ef:c0:5f:a5:1c:6e:3c:
4b:f5:cc:b0:a3:25:94:f5:06:ae:29:1b:55:8b:8c:
82:d8:8b:48:30:6d:7c:55:a3:27:74:a8:d0:54:59:
ce:f9:d7:b5:8e:aa:53:71:13:21:45:75:6d:70:93:
18:79:06:94:b3:66:bb:2e:de:8a:8b:49:2e:4b:05:
2d:e8:00:be:56:11:d6:dc:7d:71:c6:f6:20:1c:b7:
b7:4e:90:db:0f:81:6c:be:c8:11:f6:b1:3a:d3:ab:
ec:39:bd:c0:6d:25:72:43:0b:d5:18:3b:2f:71:d4:
ce:56:e9:5e:88:db:0b:7f:a4:1b:e8:62:f5:38:3d:
ac:46:19:82:74:28:c1:88:c3:df:44:bd:7e:06:6a:
7e:68:4c:d8:6e:7b:65:87:8b:b0:73:47:45:a1:ea:
d1:38:4d:52:b1:74:07:6e:74:0c:d5:db:94:df:d9:
04:4a:86:68:e9:db:b6:1b:cd:d0:27:e7:ff:8d:60:
a1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:86:24:A6:A3:A8:35:D8:5E:3C:1D:62:39:69:97:32:42:38:2D:B8
X509v3 Authority Key Identifier:
keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:37:8e:01:d8:a0:37:8e:e5:53:e7:93:e2:ed:4a:56:78:2c:
ba:72:ea:39:d5:1c:ef:c5:da:e6:c6:90:8e:91:16:32:c8:c3:
3c:44:c7:10:ca:25:ec:59:81:44:ea:84:e9:d9:7f:c5:61:98:
64:aa:57:91:31:5c:35:1d:20:c6:1b:14:72:52:ad:53:f0:6a:
33:d9:3e:52:2f:a5:17:88:1a:91:8d:cb:50:85:a7:66:e5:fe:
a0:1c:89:dd:ac:95:59:c0:d0:1b:b7:8d:84:db:f3:a2:0f:71:
99:75:95:cb:06:0e:7d:8f:c9:17:82:75:86:c2:3f:d0:a9:e5:
a4:fa:de:3c:a2:fe:42:92:18:a3:36:7a:20:3f:54:59:a6:79:
fc:7d:0c:aa:1b:c9:49:a1:66:a0:ae:b0:cc:74:5b:5e:f7:e4:
4c:7a:66:a3:c1:63:23:4c:29:e9:fc:4b:97:86:54:d9:ca:ae:
91:0c:7c:56:eb:d6:1f:91:66:d0:e2:b3:38:59:a7:a7:88:7e:
26:01:b2:bd:5a:3c:c8:a7:bb:3a:34:d0:fd:2d:d5:0e:d5:cc:
7a:16:a5:80:26:e7:34:09:37:82:25:ac:9e:f1:1f:cf:82:92:
6d:75:a3:91:cb:c2:4d:6f:ca:fe:94:43:52:68:aa:b5:c8:61:
79:a2:68:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLMOk+TxfO9c2NdZhV2vbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NWRlNjVmMzc1MTVkZjhjYzI0MmYzNmRiYmVmMzIwYzZk
OTBiNGYwHhcNMjYwOTEwMTIwMDMzWhcNMjYwOTExMTIwMDMzWjAzMTEwLwYDVQQD
EyhkNjg2MjRhNmEzYTgzNWQ4NWUzYzFkNjIzOTY5OTczMjQyMzgyZGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun9pamGrFLNVF9VGGeR0aHqWjKg7
diBh5h+T/m8O6HnYnmE2wqmywcz00vkdEKJsB6H14fYqqYibWNrzCLtwgDqd7O/A
X6UcbjxL9cywoyWU9QauKRtVi4yC2ItIMG18VaMndKjQVFnO+de1jqpTcRMhRXVt
cJMYeQaUs2a7Lt6Ki0kuSwUt6AC+VhHW3H1xxvYgHLe3TpDbD4FsvsgR9rE606vs
Ob3AbSVyQwvVGDsvcdTOVuleiNsLf6Qb6GL1OD2sRhmCdCjBiMPfRL1+Bmp+aEzY
bntlh4uwc0dFoerROE1SsXQHbnQM1duU39kESoZo6du2G83QJ+f/jWChSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaGJKajqDXYXjwdYjlplzJCOC24MB8GA1UdIwQY
MBaAFCRd5l83UV34zCQvNtu+8yDG2QtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mNmUwOTktOWI2NC00MDQxLTlkMTkt
MzE3Mjc5ODE4YWNjLzEvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9mNmUwOTktOWI2NC00MDQxLTlkMTktMzE3Mjc5ODE4YWNj
LzEvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtjeOAdig
N47lU+eT4u1KVngsunLqOdUc78Xa5saQjpEWMsjDPETHEMol7FmBROqE6dl/xWGY
ZKpXkTFcNR0gxhsUclKtU/BqM9k+Ui+lF4gakY3LUIWnZuX+oByJ3ayVWcDQG7eN
hNvzog9xmXWVywYOfY/JF4J1hsI/0KnlpPrePKL+QpIYozZ6ID9UWaZ5/H0MqhvJ
SaFmoK6wzHRbXvfkTHpmo8FjI0wp6fxLl4ZU2cqukQx8VuvWH5Fm0OKzOFmnp4h+
JgGyvVo8yKe7OjTQ/S3VDtXMehalgCbnNAk3giWsnvEfz4KSbXWjkcvCTW/K/pRD
UmiqtchheaJo+Q==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:13:01 2026 by rpki-client