Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: Q6QNa83JYjoUHBqktqfBr79lou3WKnX37DjaRclumH8=
Subject key identifier: 1A:42:FD:92:08:F4:FF:93:80:4C:4E:27:53:CD:58:CC:CB:86:06:5C
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 019E1C46911FE11E2B40D98287603C1FD4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 0A1F
Signing time: Tue 12 May 2026 13:00:47 +0000
Manifest this update: Tue 12 May 2026 13:00:47 +0000
Manifest next update: Wed 13 May 2026 13:00:47 +0000
Files and hashes: 1: AYUN6ILq1JnFNEGuiy9hczdbqfk.asa (hash: bnGV0TOXh2rgHledmfvQi6p7Cgl6Yx1IR8kXhvgGxxg=)
2: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: R7q0OnbNakf2sjToSEXe1bEYumteMfpWXHa7cCQExv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:91:1f:e1:1e:2b:40:d9:82:87:60:3c:1f:d4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: May 12 13:00:47 2026 GMT
Not After : May 13 13:00:47 2026 GMT
Subject: CN=1a42fd9208f4ff93804c4e2753cd58cccb86065c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:11:57:6f:55:5d:99:46:88:0b:a7:d1:f6:
c1:9d:45:73:05:9e:68:a4:19:23:57:5f:3d:1f:d7:
23:89:f9:17:10:f2:9e:26:6b:27:65:f9:75:c1:c6:
47:c4:47:5e:a9:2b:7a:be:ac:8a:d2:c2:46:83:18:
d1:ba:53:14:dc:e0:e1:72:72:82:87:0f:e4:4c:dd:
10:3e:e6:35:d7:83:45:e5:ad:99:40:d6:4c:4c:d6:
d0:00:2a:3c:18:33:7e:9d:c3:89:8e:4c:62:de:80:
c0:47:4e:7e:24:cb:63:5e:03:a4:0c:d8:cb:b4:49:
37:02:ea:a2:a3:56:63:12:25:03:3c:4c:5c:0b:0f:
37:95:88:f9:a8:55:d6:a6:bf:30:2a:47:13:2d:5f:
a2:eb:f5:8a:02:c9:7e:03:24:6e:b8:75:bb:a5:f5:
f8:fe:6a:4b:79:e0:c4:af:2c:84:cc:59:f0:c2:1c:
ab:4b:64:76:1b:a2:b8:a7:e6:2b:f3:06:3e:1d:af:
c4:5c:93:9c:bd:56:ef:81:10:b9:94:38:c3:ae:92:
c0:31:9f:61:da:78:01:25:44:ed:75:14:88:b7:f3:
aa:25:23:21:9a:57:1d:29:6a:3d:36:de:f7:77:9a:
1f:40:a0:c9:0f:97:19:ea:b8:56:f4:3e:b3:80:ab:
d4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:42:FD:92:08:F4:FF:93:80:4C:4E:27:53:CD:58:CC:CB:86:06:5C
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0f:cf:ce:de:2e:59:db:85:6c:68:db:4d:65:4b:ab:74:ac:
ae:4e:c8:cf:6c:ab:0a:cb:75:83:81:f2:cc:c8:eb:8c:e0:0e:
29:b0:23:75:ba:f6:a6:cd:67:a9:56:a2:52:02:80:d2:82:0f:
57:62:60:d0:27:a9:e6:b8:e8:b7:96:06:1e:fd:12:12:f7:30:
d5:10:b2:4f:63:c8:87:15:b3:b6:b4:df:51:69:56:6d:20:cc:
c7:95:27:6a:38:37:3f:7c:a5:ed:94:cd:00:62:f6:90:81:be:
9f:d6:21:ad:64:92:7a:95:e6:58:eb:22:0f:6d:91:09:1d:b5:
7c:b0:d4:fe:32:07:c7:56:df:f3:ec:a9:27:75:95:21:4e:bd:
e1:22:0f:eb:22:d7:b0:73:af:81:ef:11:39:29:98:12:7d:7d:
ae:29:b3:8d:55:07:57:80:65:ce:57:d0:40:97:2d:e1:06:cd:
14:ef:5a:9a:79:f6:02:1e:da:69:bb:69:05:2c:aa:e6:07:52:
5f:35:d4:30:7f:8e:36:f9:c8:37:f0:bf:1e:03:19:f4:73:52:
d4:4f:35:61:43:7f:f3:a4:18:75:91:0f:77:2c:87:f7:e7:ac:
48:d2:f5:de:fc:e3:4a:33:1b:3e:b3:04:45:ac:cf:39:a9:63:
72:64:5d:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRpEf4R4rQNmCh2A8H9TxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjN2IxODM0NWEzOTM0MWE3MjYyNzc1MTMwOGMxY2UwMmY0
NmEwYmIwHhcNMjYwNTEyMTMwMDQ3WhcNMjYwNTEzMTMwMDQ3WjAzMTEwLwYDVQQD
EygxYTQyZmQ5MjA4ZjRmZjkzODA0YzRlMjc1M2NkNThjY2NiODYwNjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFgRV29VXZlGiAun0fbBnUVzBZ5o
pBkjV189H9cjifkXEPKeJmsnZfl1wcZHxEdeqSt6vqyK0sJGgxjRulMU3ODhcnKC
hw/kTN0QPuY114NF5a2ZQNZMTNbQACo8GDN+ncOJjkxi3oDAR05+JMtjXgOkDNjL
tEk3Auqio1ZjEiUDPExcCw83lYj5qFXWpr8wKkcTLV+i6/WKAsl+AyRuuHW7pfX4
/mpLeeDEryyEzFnwwhyrS2R2G6K4p+Yr8wY+Ha/EXJOcvVbvgRC5lDjDrpLAMZ9h
2ngBJUTtdRSIt/OqJSMhmlcdKWo9Nt73d5ofQKDJD5cZ6rhW9D6zgKvUSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpC/ZII9P+TgExOJ1PNWMzLhgZcMB8GA1UdIwQY
MBaAFIx7GDRaOTQacmJ3UTCMHOAvRqC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mZjRmMTItNTI5MC00MzJkLWIxZGIt
NTNjYTBkNjVkZDVlLzEvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9mZjRmMTItNTI5MC00MzJkLWIxZGItNTNjYTBkNjVkZDVl
LzEvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbA/Pzt4u
WduFbGjbTWVLq3Ssrk7Iz2yrCst1g4HyzMjrjOAOKbAjdbr2ps1nqVaiUgKA0oIP
V2Jg0Cep5rjot5YGHv0SEvcw1RCyT2PIhxWztrTfUWlWbSDMx5Unajg3P3yl7ZTN
AGL2kIG+n9YhrWSSepXmWOsiD22RCR21fLDU/jIHx1bf8+ypJ3WVIU694SIP6yLX
sHOvge8ROSmYEn19rimzjVUHV4BlzlfQQJct4QbNFO9amnn2Ah7aabtpBSyq5gdS
XzXUMH+ONvnIN/C/HgMZ9HNS1E81YUN/86QYdZEPdyyH9+esSNL13vzjSjMbPrME
RazPOaljcmRdHw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:58:21 2026 by rpki-client