Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.mft
File: JHBN1wT8Swr7dgh9b3ltuz-IAJI.mft (raw, json)
Hash identifier: Tp5u+07YBoaybnoTbk/w8X9TSoDyoS5WXYyAqRCEOs8=
Subject key identifier: 0E:AA:5D:6D:E3:01:B3:01:C3:3C:00:F6:55:AC:FF:4E:03:04:F8:6B
Authority key identifier: 24:70:4D:D7:04:FC:4B:0A:FB:76:08:7D:6F:79:6D:BB:3F:88:00:92
Certificate issuer: /CN=24704dd704fc4b0afb76087d6f796dbb3f880092
Certificate serial: 01A106265815982C15F36820DCE9330AFA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHBN1wT8Swr7dgh9b3ltuz-IAJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.mft
Manifest number: 0101
Signing time: Sun 04 Oct 2026 09:02:18 +0000
Manifest this update: Sun 04 Oct 2026 09:02:18 +0000
Manifest next update: Mon 05 Oct 2026 09:02:18 +0000
Files and hashes: 1: JHBN1wT8Swr7dgh9b3ltuz-IAJI.crl (hash: Vs8BOyHb1sbwK9xtvdfEW+Bml714xprLVOtUDZVhDhY=)
2: kva9v8qwuzs9AIC6M0Yymc62a-k.roa (hash: jqE5ifSnUoFbCpac7mHFBsd4Kmtc6sUUCcFu2fSyvUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHBN1wT8Swr7dgh9b3ltuz-IAJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 09:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:26:58:15:98:2c:15:f3:68:20:dc:e9:33:0a:fa:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24704dd704fc4b0afb76087d6f796dbb3f880092
Validity
Not Before: Oct 4 09:02:18 2026 GMT
Not After : Oct 5 09:02:18 2026 GMT
Subject: CN=0eaa5d6de301b301c33c00f655acff4e0304f86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:e5:98:59:8b:75:ae:5e:28:66:ee:13:c2:
09:09:94:a8:c4:ac:a3:11:3e:b3:85:1c:2a:f4:37:
2b:a8:87:61:e8:d2:fe:ba:32:4e:3f:0c:ee:50:0d:
31:b2:06:83:d7:8c:06:51:e7:0f:95:ba:3d:84:58:
30:be:9e:be:49:4c:b3:f2:bd:1b:2f:40:24:92:a6:
45:c7:14:73:c9:84:72:b9:2f:be:1e:13:41:7f:78:
76:14:d0:ed:b5:9f:cc:7b:48:c5:f7:9b:03:80:fa:
a3:e1:c2:2e:db:43:5f:f6:50:7f:40:50:61:7a:ce:
c8:ee:8e:27:13:cd:85:0f:d4:86:0e:e5:11:b0:95:
d0:26:f1:e6:52:c9:ad:76:7c:38:04:c7:b4:77:65:
6a:2a:0a:6f:5a:d9:d6:9d:d4:e8:e4:c3:a2:ac:25:
84:3a:18:13:c8:e1:de:c2:6e:e0:c8:1c:b9:dc:70:
e4:94:5a:c5:89:00:d2:e6:3f:e3:22:f6:f3:42:30:
ac:d0:4d:84:a3:aa:42:1b:1a:5a:38:60:c5:6c:ee:
8c:8d:cf:08:c8:1d:4f:4f:33:4c:48:16:74:90:fd:
00:f0:d6:f0:18:b9:36:20:f3:66:07:5e:e6:ec:09:
34:d6:82:0d:b1:10:da:8b:b8:21:26:06:69:f3:e3:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AA:5D:6D:E3:01:B3:01:C3:3C:00:F6:55:AC:FF:4E:03:04:F8:6B
X509v3 Authority Key Identifier:
keyid:24:70:4D:D7:04:FC:4B:0A:FB:76:08:7D:6F:79:6D:BB:3F:88:00:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHBN1wT8Swr7dgh9b3ltuz-IAJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d8:fb:5c:da:00:e1:ac:b8:0e:50:ba:b9:79:2a:48:fb:6d:
72:ec:94:cd:f8:aa:3a:55:c5:5f:83:61:be:2a:fa:34:1d:86:
b4:aa:53:59:6e:94:f6:02:34:95:c0:15:e8:b9:57:8e:d3:0c:
a2:55:34:64:04:f2:19:e7:a0:e0:8c:ed:3a:47:9e:ba:bd:c7:
ce:76:25:5d:3c:b7:42:5c:cd:ac:ee:c6:53:82:b9:ae:7c:e2:
cf:5e:25:ee:1f:16:c1:14:61:33:01:43:66:0a:78:1c:32:cb:
21:28:9b:75:85:72:b3:f5:f0:7e:bf:dd:5f:a0:b4:69:6c:41:
0a:7f:de:90:d7:73:4e:76:da:f6:4a:50:3b:f9:ab:eb:14:c5:
59:7d:27:96:d9:a4:8d:fb:ba:2e:a6:02:11:df:98:e1:22:fa:
f3:18:52:eb:6d:29:fd:0b:ef:bb:be:73:2c:1f:bd:c8:08:6d:
9d:f5:74:d1:eb:d1:b7:88:fe:9e:8c:93:38:99:0f:a7:c6:d9:
9c:e3:55:01:b4:ec:b0:d1:3b:a5:dc:30:f8:fa:98:61:4d:3d:
ca:e0:b2:91:f7:bc:f1:5a:68:21:fd:d1:4e:1b:a2:64:c0:fc:
eb:9e:e1:e8:38:50:d7:a4:86:d8:e1:69:7d:51:59:47:f1:14:
89:aa:92:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:21:00 2026 by rpki-client