Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
File: jha95kqam7o_-hQ4oZesP5SYn68.mft (raw, json)
Hash identifier: E4GD6NCOQh5mTMmr9DrbFCvrN1LcTKj95K9T1aYffVM=
Subject key identifier: 70:93:0F:72:D0:17:38:A7:A5:B6:61:2E:AB:40:C4:23:0F:20:FB:C1
Authority key identifier: 8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF
Certificate issuer: /CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf
Certificate serial: 019F93C953B402D511FA20E34E75E683FC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
Manifest number: 0D5C
Signing time: Fri 24 Jul 2026 11:01:12 +0000
Manifest this update: Fri 24 Jul 2026 11:01:12 +0000
Manifest next update: Sat 25 Jul 2026 11:01:12 +0000
Files and hashes: 1: jha95kqam7o_-hQ4oZesP5SYn68.crl (hash: uVgmvFTQpiWvLkbnH5tcFchi4qmKz83QqRHRljWItXI=)
2: rIbppOfNfFYdHELW2Brc9R0i8ZQ.roa (hash: 6K2aNO9ERJucL5JHeR5DeWEg9tZjVrX7Cr/llqySGJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:53:b4:02:d5:11:fa:20:e3:4e:75:e6:83:fc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf
Validity
Not Before: Jul 24 11:01:12 2026 GMT
Not After : Jul 25 11:01:12 2026 GMT
Subject: CN=70930f72d01738a7a5b6612eab40c4230f20fbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:99:94:04:91:93:75:88:39:01:c0:0a:40:
88:d5:31:e1:8c:cf:cd:8d:60:2f:cb:1d:d8:48:5c:
02:4a:68:e4:c7:fd:1c:5a:d3:22:82:42:80:06:3c:
81:13:a7:5b:0a:9b:dc:e7:2d:c6:36:58:fd:f7:89:
12:8d:ff:c6:bb:53:92:91:4c:55:18:59:ad:d8:79:
76:6c:82:1f:21:1c:d7:98:00:43:d2:ee:e8:67:7d:
8a:7c:cc:0e:23:2a:d2:e7:ba:a9:b9:50:7d:7e:ee:
66:cc:af:d7:2a:c9:42:f5:8b:e0:08:ee:52:c6:b0:
a2:ae:70:48:13:34:7d:a5:c9:25:ab:35:74:ae:20:
ac:0f:58:32:95:1e:5d:41:f3:0b:c4:41:d1:e3:73:
27:39:46:e4:cd:41:7f:f2:d3:c0:e7:f9:c5:cf:74:
fe:59:65:77:0c:95:42:a0:06:b8:c7:ec:d7:03:6e:
f3:03:9a:7a:6b:8e:08:2b:94:d9:06:8d:17:98:8e:
8f:fd:eb:fe:70:3f:cc:f4:da:8f:a2:4a:5c:a3:8e:
dd:c7:83:46:c8:2a:91:54:f6:51:f2:33:0e:95:a5:
e0:93:9e:03:2a:c7:2b:14:49:a6:7d:f8:74:29:35:
cd:37:b6:b3:53:89:ae:a0:6e:9d:d4:19:e3:da:80:
f1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:93:0F:72:D0:17:38:A7:A5:B6:61:2E:AB:40:C4:23:0F:20:FB:C1
X509v3 Authority Key Identifier:
keyid:8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:02:67:94:02:16:62:aa:32:40:b9:ca:ed:cd:0b:a2:7f:03:
d9:35:af:a7:b1:b9:4a:2f:20:c7:c3:00:80:17:b9:11:1f:de:
5e:40:ce:46:b7:3b:0e:72:ec:25:01:77:d0:52:6e:00:20:42:
41:83:9e:65:47:bd:7e:f0:fb:d3:78:81:05:fd:26:e9:cc:25:
8a:22:38:b2:68:2d:f3:84:3a:c5:4f:0a:20:f0:cb:3e:2e:38:
e6:d8:ab:d4:64:99:36:26:72:7c:31:d3:ad:2a:ab:53:f6:08:
47:e8:dd:95:59:aa:ef:aa:df:28:a3:7d:e0:bf:93:a3:2d:f8:
a0:12:ce:a7:a6:63:68:1a:a3:bf:2a:88:36:18:12:b9:e4:ec:
fa:fd:3c:15:68:8b:ac:3c:f4:16:0c:6c:27:f0:b2:28:c5:e9:
2f:f7:3f:1c:d3:10:90:6e:9d:3c:1f:3c:c2:66:9c:aa:f1:67:
d3:ef:9d:dc:1e:74:e6:78:0f:08:93:fe:3b:1b:a2:14:d0:44:
f6:9f:f4:b8:8a:6e:75:44:17:19:cd:cd:45:41:05:3e:1c:a3:
20:17:ff:17:7e:74:cd:7b:dd:c9:2c:d2:6e:ce:75:97:c3:8c:
f0:41:d6:63:f9:e4:04:03:98:8e:b0:95:17:47:86:bb:56:1e:
6a:56:3e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:35:39 2026 by rpki-client