Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: QKN4zHyiUSwQfQi3tvawb8WJReVyQSe/dko8hU0ygbc=
Subject key identifier: DA:B7:94:42:27:E8:34:A5:66:87:C8:4C:7F:39:FD:78:84:B6:D0:F8
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 019F90FF99FC92002240E7518E99A34BDF27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 0AE0
Signing time: Thu 23 Jul 2026 22:01:37 +0000
Manifest this update: Thu 23 Jul 2026 22:01:37 +0000
Manifest next update: Fri 24 Jul 2026 22:01:37 +0000
Files and hashes: 1: AYUN6ILq1JnFNEGuiy9hczdbqfk.asa (hash: bnGV0TOXh2rgHledmfvQi6p7Cgl6Yx1IR8kXhvgGxxg=)
2: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: +0SdTAYJ7AtU03cQxzjO63tDIqM9x6FrWPugQxK22Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:99:fc:92:00:22:40:e7:51:8e:99:a3:4b:df:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: Jul 23 22:01:37 2026 GMT
Not After : Jul 24 22:01:37 2026 GMT
Subject: CN=dab7944227e834a56687c84c7f39fd7884b6d0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:9e:69:19:9f:4f:52:9b:89:b5:55:16:20:
c6:c4:02:ee:26:a3:bc:5b:e9:b3:ca:01:79:a4:96:
3e:ab:3c:6f:21:8d:e4:df:9a:ac:f0:dc:f8:69:75:
63:c3:1a:d2:f0:f0:71:43:25:8c:11:a3:eb:c5:d6:
d9:c9:e5:57:12:65:6c:78:e4:ef:fe:0c:ab:18:a1:
7a:b2:81:1b:66:46:c6:25:12:85:81:04:12:20:a9:
1e:01:c6:f4:4b:19:fa:f4:b7:9a:55:12:a4:d5:64:
96:dc:86:5c:35:2d:9d:e8:be:5d:22:f5:2b:e1:61:
4b:47:32:45:24:28:74:f4:23:a1:dc:5e:30:e8:40:
37:b7:e5:f9:72:ef:58:5c:1c:f4:30:5b:4d:01:e9:
7a:48:2f:16:3f:0c:d9:ca:26:8c:bb:13:c0:e6:d6:
fe:19:96:00:9f:14:ed:08:76:f7:7a:5b:00:30:96:
77:f1:0c:95:26:03:2b:04:37:5b:31:28:38:29:84:
13:ce:65:44:13:38:c1:b9:14:74:cf:b5:f7:6a:43:
58:1a:96:fa:4a:8c:13:d3:78:b7:32:56:37:25:a8:
29:51:fc:b3:1c:e6:2d:f0:54:51:fb:7c:a0:0a:e6:
cf:77:49:9d:1f:55:7d:3a:8d:7a:ad:b7:ef:d1:57:
3e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B7:94:42:27:E8:34:A5:66:87:C8:4C:7F:39:FD:78:84:B6:D0:F8
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:cc:f3:f2:50:11:61:49:c6:87:ef:bb:88:0f:52:ec:5f:5d:
14:8f:17:f2:13:dd:9f:41:6a:0e:14:28:c4:21:4d:be:c1:af:
94:31:1c:cb:4f:63:fa:28:0c:c2:d4:98:d8:9a:49:de:1e:9a:
bc:87:5e:bf:81:de:ae:2d:23:8c:ce:2e:3f:89:06:f3:30:86:
bd:ba:bf:91:cb:3c:80:e5:ce:f7:22:13:b1:68:b7:db:3a:9b:
61:eb:be:37:6e:db:eb:c5:93:8f:63:ec:59:fa:e2:62:62:7d:
8a:28:d8:cd:14:03:e0:e8:b4:e7:e8:28:79:75:0a:52:3d:f9:
fe:44:c8:98:e3:d2:ea:7a:3f:7d:b9:e7:34:aa:e0:55:15:a8:
e8:45:e2:a4:be:5e:fd:06:49:8b:16:63:59:da:c1:7e:40:0d:
bb:a9:fd:a1:94:5f:5d:b8:43:54:74:b0:c3:4c:16:a6:33:47:
e3:be:44:94:38:9a:25:ba:9b:bc:78:63:6e:9a:ed:de:1a:3e:
70:9b:5c:ce:f8:94:df:88:ac:0e:4b:4a:7f:e1:79:02:a1:d0:
9b:84:73:cb:33:b7:52:36:80:d3:a0:98:3e:31:2e:bb:eb:12:
7a:32:b8:15:6e:ef:69:3f:6e:e4:7b:80:36:9d:3a:fd:c3:fb:
07:bb:8c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:41:26 2026 by rpki-client