Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
File: hJICE8sjC_5REhzl-03s4oAYvtA.mft (raw, json)
Hash identifier: ++OZB0hP+exAxNRE3NMh830C+Uru4vFRxhve1NYjgrI=
Subject key identifier: E8:AB:51:ED:ED:F0:CD:97:5D:76:51:1E:D4:29:F4:A2:42:8D:3B:BF
Authority key identifier: 84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
Certificate issuer: /CN=84920213cb230bfe51121ce5fb4dece28018bed0
Certificate serial: 01A0F97C919DD3B4E2434479DADD2AC8BC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
Manifest number: 1A80
Signing time: Thu 01 Oct 2026 22:01:25 +0000
Manifest this update: Thu 01 Oct 2026 22:01:25 +0000
Manifest next update: Fri 02 Oct 2026 22:01:25 +0000
Files and hashes: 1: hJICE8sjC_5REhzl-03s4oAYvtA.crl (hash: GmjR2ayoZPv/M955tBtSNr0rMyWQMPdpHH2wkeLKEzA=)
2: z_fYCrrGSV54cj1knb3xBk4SK5U.roa (hash: EFlql6uKuI4YQL66OtBnNw+c0chssYW8DVC7ieJRlbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:7c:91:9d:d3:b4:e2:43:44:79:da:dd:2a:c8:bc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84920213cb230bfe51121ce5fb4dece28018bed0
Validity
Not Before: Oct 1 22:01:25 2026 GMT
Not After : Oct 2 22:01:25 2026 GMT
Subject: CN=e8ab51ededf0cd975d76511ed429f4a2428d3bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b1:f3:d2:9c:01:64:7c:3f:22:b1:82:85:21:
30:7b:c0:04:2e:39:ce:df:06:0c:cb:fa:b7:b8:6c:
1b:03:f2:e5:2b:16:9b:c2:4a:af:05:42:2f:dc:26:
2c:cf:ab:d1:0e:d1:70:9a:f6:4e:c8:cf:18:3f:58:
01:94:6b:c2:31:79:ac:16:32:78:db:6e:bb:32:3f:
9e:c9:27:2a:5d:cf:76:1e:0b:7a:82:0c:ad:2f:03:
6f:6c:16:3a:96:07:0d:a9:60:ad:8b:30:2d:af:ac:
71:ff:71:a4:b5:f7:76:fc:bc:4d:11:32:10:58:22:
16:cb:c4:eb:e1:01:5f:59:4b:ed:0e:a7:df:a4:a8:
65:6c:25:34:5f:95:9e:94:3a:eb:1e:e2:c7:43:d7:
81:9e:62:96:de:e4:10:fe:bb:10:9b:ba:c3:a8:61:
5f:8d:32:ef:a3:22:87:da:3d:59:b4:d8:26:6d:0d:
b9:16:79:cf:71:b3:02:bf:b3:16:76:6e:25:0b:a9:
c6:e1:95:71:6b:d3:e6:a5:c8:85:7c:23:20:fa:3b:
03:53:b3:bf:e1:cc:20:1d:02:21:84:6c:ca:8c:c9:
84:65:1e:ab:4d:df:2d:df:86:da:34:5e:f1:4d:1b:
0f:95:c6:3f:7e:0a:ec:50:44:4c:30:a7:a2:f6:e0:
5d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AB:51:ED:ED:F0:CD:97:5D:76:51:1E:D4:29:F4:A2:42:8D:3B:BF
X509v3 Authority Key Identifier:
keyid:84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:10:ba:76:ca:11:d8:9f:3b:37:4b:f9:ef:7d:34:a5:8a:38:
fa:28:94:dd:37:2a:0a:60:15:9f:17:a3:5b:2e:13:85:d4:23:
8e:0f:6d:81:66:17:0a:2f:34:1e:f5:33:34:5d:03:48:0b:94:
c5:03:34:c4:97:0f:66:bb:bd:4b:47:a0:54:f5:1d:36:d9:bd:
1c:76:8b:7d:6d:96:7d:f5:cf:1b:01:01:44:92:c3:a9:f4:c7:
cd:df:b3:db:f6:d5:30:63:bb:6d:5e:fd:7e:cb:7e:5a:25:9d:
26:47:61:90:61:4e:44:58:2c:72:69:5f:4c:4e:60:3b:21:5d:
c8:14:50:d3:6c:6b:b4:c5:9e:c0:6f:43:d2:c8:77:46:82:ac:
56:5b:90:3f:fe:f6:12:4c:ea:7f:43:d0:33:9d:8b:f8:aa:af:
dd:54:75:b9:1e:5a:5b:d8:65:20:02:82:8f:bd:2a:7f:36:c0:
d8:8c:be:cb:81:11:a5:ce:80:eb:f4:e3:4c:ce:10:e8:39:8a:
08:c7:97:9c:c3:8f:b0:ec:b7:de:dc:ae:0f:0e:b6:74:fd:e0:
b6:c6:17:69:12:5c:d5:db:83:8c:b9:07:ab:4f:50:9c:72:73:
0e:07:c7:7d:65:51:c5:b9:a5:79:df:97:42:6c:19:5b:7d:ec:
2e:cc:99:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:33:35 2026 by rpki-client