Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
File: JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json)
Hash identifier: gjA+GCzLU8ectGE2zBL4a/zw8JdWJEjanvmIj6Qu7x0=
Subject key identifier: 68:DC:BF:10:C1:33:01:AE:C2:E6:47:18:3F:A7:0E:36:D0:BB:96:EE
Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
Certificate issuer: /CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Certificate serial: 01A18074630D6D53E3D9586DE0EE42698DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
Manifest number: 04FB
Signing time: Wed 28 Oct 2026 03:01:13 +0000
Manifest this update: Wed 28 Oct 2026 03:01:13 +0000
Manifest next update: Thu 29 Oct 2026 03:01:13 +0000
Files and hashes: 1: D17eb-YaN69zmYAWu9of4KG5E8Y.roa (hash: stGJZzeKt4km6Sv/uUT+Q3OWclxmp1dOYGAe5XGVe2w=)
2: FZgi84RMvT9_2vE42FDuM9M6yQo.roa (hash: MWv0A+a3Hv1l7nsYC0PKMV2mBEaDOEQF7nbo1KN1I5Q=)
3: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: 4/4POy9Vf4jfoAsh3JCZ51tAZ+Y6GlIbpJjTxqBlMig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:63:0d:6d:53:e3:d9:58:6d:e0:ee:42:69:8d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Validity
Not Before: Oct 28 03:01:13 2026 GMT
Not After : Oct 29 03:01:13 2026 GMT
Subject: CN=68dcbf10c13301aec2e647183fa70e36d0bb96ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:c5:2d:86:e2:6f:87:10:be:90:ad:e8:87:
7a:a6:80:26:58:ab:5d:72:49:bb:ce:ac:a6:a7:ab:
35:74:c6:a4:2e:48:3a:15:5f:0b:0c:37:08:ee:85:
ed:0c:1c:1b:86:df:3c:b3:5f:b7:b4:d7:91:c7:4b:
2c:77:a5:49:a9:98:d5:b1:f5:56:b5:36:09:af:a2:
9a:41:2d:72:0e:72:29:95:09:00:c4:84:57:ce:29:
a4:4c:a9:11:02:14:5a:f8:a4:7c:f3:ee:8e:54:69:
70:83:c1:b4:cc:16:56:8d:1c:50:89:49:2e:ab:93:
91:1f:04:38:35:b0:9f:c4:41:40:b4:bc:22:57:90:
12:31:bb:f9:47:9c:db:8f:9d:71:5b:18:a2:2b:05:
82:9b:fd:92:57:1b:65:aa:f7:dd:a9:05:66:0a:f1:
5c:f1:03:4f:fb:0d:d4:48:2e:c3:2f:11:76:78:54:
b6:dd:20:2b:97:e1:34:ca:c2:b1:88:0f:eb:7e:d4:
ac:bf:ab:6f:48:1b:a1:27:42:bc:51:ed:2f:0f:43:
ff:10:2e:38:94:d9:06:41:a9:70:80:07:97:c5:88:
bd:9a:bb:94:f6:33:b0:0b:57:5b:bc:a1:b7:81:e7:
6d:0c:88:1e:d4:27:97:67:31:fe:3a:a2:ea:97:dd:
a5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DC:BF:10:C1:33:01:AE:C2:E6:47:18:3F:A7:0E:36:D0:BB:96:EE
X509v3 Authority Key Identifier:
keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a2:c0:9a:f9:a9:5c:02:90:93:4c:1d:db:d5:35:fc:59:31:
c6:34:02:db:87:8e:2e:b6:f8:67:f8:3f:98:ff:18:28:e3:e9:
71:c2:a3:31:4d:76:6b:ad:d3:18:00:cc:79:bc:08:a3:b9:55:
5d:40:ea:49:b0:31:e6:6a:ad:f9:a8:67:be:2b:07:6c:f3:a1:
db:59:9e:43:de:6e:db:6b:39:03:ad:b4:de:2b:04:2b:c1:d1:
02:eb:fe:f9:81:1c:8d:40:ae:94:20:a0:41:0e:5c:f0:2e:3c:
e1:89:6d:88:81:5b:cb:91:b5:9b:60:78:da:54:e0:46:b7:56:
09:f9:3f:68:85:9f:87:00:af:e5:a6:6c:8f:db:68:a0:4d:81:
0f:92:9f:56:1e:b8:31:45:e2:7d:91:e7:1e:e9:0e:82:ea:de:
c6:71:af:c5:26:5d:6b:02:02:4b:76:29:92:21:71:38:f3:59:
54:8b:51:e4:de:ad:2c:7d:d6:a0:65:ea:95:9e:63:79:3e:62:
17:03:68:4e:dc:32:e3:37:7e:be:83:58:da:2a:07:49:8a:bb:
bb:8e:fd:80:c2:66:df:6b:b2:db:6b:68:f7:e8:14:4d:21:3b:
bd:57:bd:f8:a4:82:27:d7:d1:2e:dc:b6:32:7e:2c:96:17:e8:
e5:b6:f4:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAdGMNbVPj2Vht4O5CaY3TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NWRlNjVmMzc1MTVkZjhjYzI0MmYzNmRiYmVmMzIwYzZk
OTBiNGYwHhcNMjYxMDI4MDMwMTEzWhcNMjYxMDI5MDMwMTEzWjAzMTEwLwYDVQQD
Eyg2OGRjYmYxMGMxMzMwMWFlYzJlNjQ3MTgzZmE3MGUzNmQwYmI5NmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx7FLYbib4cQvpCt6Id6poAmWKtd
ckm7zqymp6s1dMakLkg6FV8LDDcI7oXtDBwbht88s1+3tNeRx0ssd6VJqZjVsfVW
tTYJr6KaQS1yDnIplQkAxIRXzimkTKkRAhRa+KR88+6OVGlwg8G0zBZWjRxQiUku
q5ORHwQ4NbCfxEFAtLwiV5ASMbv5R5zbj51xWxiiKwWCm/2SVxtlqvfdqQVmCvFc
8QNP+w3USC7DLxF2eFS23SArl+E0ysKxiA/rftSsv6tvSBuhJ0K8Ue0vD0P/EC44
lNkGQalwgAeXxYi9mruU9jOwC1dbvKG3gedtDIge1CeXZzH+OqLql92lBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjcvxDBMwGuwuZHGD+nDjbQu5buMB8GA1UdIwQY
MBaAFCRd5l83UV34zCQvNtu+8yDG2QtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mNmUwOTktOWI2NC00MDQxLTlkMTkt
MzE3Mjc5ODE4YWNjLzEvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9mNmUwOTktOWI2NC00MDQxLTlkMTktMzE3Mjc5ODE4YWNj
LzEvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJaLAmvmp
XAKQk0wd29U1/FkxxjQC24eOLrb4Z/g/mP8YKOPpccKjMU12a63TGADMebwIo7lV
XUDqSbAx5mqt+ahnvisHbPOh21meQ95u22s5A6203isEK8HRAuv++YEcjUCulCCg
QQ5c8C484YltiIFby5G1m2B42lTgRrdWCfk/aIWfhwCv5aZsj9tooE2BD5KfVh64
MUXifZHnHukOgurexnGvxSZdawICS3YpkiFxOPNZVItR5N6tLH3WoGXqlZ5jeT5i
FwNoTtwy4zd+voNY2ioHSYq7u479gMJm32uy22to9+gUTSE7vVe9+KSCJ9fRLty2
Mn4slhfo5bb0Dw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:06:32 2026 by rpki-client