Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: PEoqIongtgVftt7qxJW8pwJRTzBAgUPc5YSZ2IwT3jI=
Subject key identifier: 82:56:FF:D6:A8:1C:0D:AE:31:D6:34:7E:E1:09:92:3D:D6:B4:53:CF
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 019D329AF7A7236F9C9998FE3D93D5F3E7A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 09A6
Signing time: Sat 28 Mar 2026 04:01:49 +0000
Manifest this update: Sat 28 Mar 2026 04:01:49 +0000
Manifest next update: Sun 29 Mar 2026 04:01:49 +0000
Files and hashes: 1: AYUN6ILq1JnFNEGuiy9hczdbqfk.asa (hash: bnGV0TOXh2rgHledmfvQi6p7Cgl6Yx1IR8kXhvgGxxg=)
2: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: i+asPkBqZfc31YHkb1VBRsw8gQMHqjF3dt5Pg0VKG/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:f7:a7:23:6f:9c:99:98:fe:3d:93:d5:f3:e7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: Mar 28 04:01:49 2026 GMT
Not After : Mar 29 04:01:49 2026 GMT
Subject: CN=8256ffd6a81c0dae31d6347ee109923dd6b453cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:5f:de:c3:eb:08:8a:11:b3:da:6f:10:2a:
e4:69:12:9f:a6:af:00:80:cd:b6:bc:bc:74:5d:1a:
40:0f:bb:2b:d4:b8:75:53:3b:58:58:4a:65:20:44:
eb:0a:eb:cc:37:26:10:53:02:e0:d0:21:d4:27:96:
f2:9a:b3:3a:38:2e:ab:fe:58:51:b3:b0:c2:ce:fa:
1e:ab:0f:2a:31:af:2f:b7:42:f4:64:15:d4:4c:9b:
f3:18:0f:61:08:4e:1a:08:1a:c6:ef:df:e4:1a:97:
69:dc:a1:cb:5f:14:35:e4:01:1d:ef:16:84:5d:c0:
ce:f8:e9:00:b4:0d:e2:01:28:51:45:ab:3f:1c:36:
f2:ff:f0:be:d6:08:7c:50:a9:74:bf:ab:1e:e5:23:
79:2a:5e:38:e0:cf:70:0d:7f:80:81:db:0f:6a:f6:
50:38:da:d8:3f:13:54:f4:4b:9f:1c:e5:16:13:53:
d5:b2:e0:a9:24:c0:7b:67:e6:64:fb:95:bb:d8:35:
14:5f:83:ee:66:65:c4:70:a9:e0:7d:1c:6a:6a:e9:
f6:0a:f1:78:6e:9a:92:0f:68:cd:85:2b:cf:64:19:
33:36:16:5a:87:1f:64:27:2f:16:5d:7f:6c:92:01:
9d:58:72:9d:34:55:76:9e:98:b1:76:cc:ba:b2:39:
72:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:56:FF:D6:A8:1C:0D:AE:31:D6:34:7E:E1:09:92:3D:D6:B4:53:CF
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:2f:69:6b:50:09:13:1e:b5:7e:1e:b9:aa:06:aa:49:27:de:
a5:21:c6:dc:8f:c3:07:1e:5f:d2:e5:33:55:e0:c5:10:1b:02:
e0:a5:49:8c:23:d4:0e:af:55:81:72:08:ec:be:e5:e6:5e:7e:
04:3a:f5:a7:41:ed:70:09:d0:1f:08:ca:73:38:a3:b3:cb:b4:
aa:56:54:7d:35:31:53:d4:1f:86:28:3e:fd:a9:e9:8c:3e:a1:
62:07:30:b6:e2:7a:2e:e8:6f:83:3b:c7:1c:fc:e9:b2:14:06:
68:20:49:16:2c:30:c0:d4:c5:27:55:6b:4b:8f:0a:66:ea:9c:
18:0b:79:a3:c9:8c:68:3c:cc:9f:61:4e:bb:83:5f:d8:90:45:
14:32:5d:c5:82:35:18:3a:04:16:c1:9f:ff:f1:3c:aa:75:10:
08:b0:a9:63:02:35:31:df:d7:12:89:f6:7b:e6:cc:72:2e:2f:
6e:1b:4d:f2:0b:3d:1d:de:49:1b:70:ea:30:31:3c:9f:a4:1f:
07:51:87:d0:26:76:7c:82:b1:94:2e:7c:4d:44:f1:b3:97:e5:
af:14:02:65:e2:8e:31:1b:71:4b:3b:6f:cb:bf:8d:c3:1e:6c:
c9:6c:fa:f0:06:dc:85:80:5a:a7:05:d3:cc:1a:c5:f5:80:43:
19:a5:bb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:52 2026 by rpki-client