Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
File: 0jh3jxNJtXVBjBnjg9BXGuvuot8.mft (raw, json)
Hash identifier: HupquQefn8WeOrntsL3GMl3hpD62xa6Dj5DLtzYZQC8=
Subject key identifier: DE:C8:AA:5C:15:D9:4B:42:09:D4:D3:BE:CA:D5:BB:D6:36:3A:D8:59
Authority key identifier: D2:38:77:8F:13:49:B5:75:41:8C:19:E3:83:D0:57:1A:EB:EE:A2:DF
Certificate issuer: /CN=d238778f1349b575418c19e383d0571aebeea2df
Certificate serial: 01A0CA7D825028B31A4C5971A43D0E3519CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
Manifest number: 017C
Signing time: Tue 22 Sep 2026 19:00:18 +0000
Manifest this update: Tue 22 Sep 2026 19:00:18 +0000
Manifest next update: Wed 23 Sep 2026 19:00:18 +0000
Files and hashes: 1: 0jh3jxNJtXVBjBnjg9BXGuvuot8.crl (hash: 7r22HsfoxiWJCJdLuGq7+PwWxLwwiC+brL6MpCQ+Vt4=)
2: Ja7890_tG369n2EpikrlxKOH7eo.roa (hash: dUDn7iA585Me0xPD3yCTHJGFysgJ0UVLXEuuoAzLUoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:82:50:28:b3:1a:4c:59:71:a4:3d:0e:35:19:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d238778f1349b575418c19e383d0571aebeea2df
Validity
Not Before: Sep 22 19:00:18 2026 GMT
Not After : Sep 23 19:00:18 2026 GMT
Subject: CN=dec8aa5c15d94b4209d4d3becad5bbd6363ad859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:74:7c:ef:a1:71:c0:d9:35:8e:90:c8:f8:
9c:ca:a3:d6:95:a8:a5:7d:93:20:1c:51:5e:71:0a:
be:75:24:6c:8d:24:73:f3:9a:55:c9:5c:0d:f3:81:
5d:b1:45:ca:5e:db:c7:8f:82:dc:f8:4c:29:fd:9e:
3c:52:49:ef:14:0e:18:e5:32:ee:40:8d:a8:3c:f8:
0a:54:7d:a3:10:de:63:d7:bc:21:72:7b:e3:6b:fd:
aa:e8:5f:e3:07:20:1a:63:3f:de:b2:1f:cf:c7:bd:
09:44:4b:1a:2b:98:46:00:88:3e:b5:2c:3e:45:8c:
2a:62:7a:11:eb:8e:70:cf:11:51:cc:d6:03:27:28:
11:07:61:ca:86:f5:97:e8:52:d3:61:dc:aa:4b:1f:
a8:1b:4f:b8:af:d2:7d:4c:e5:6d:d0:fd:2a:f5:76:
7e:04:b4:22:3c:47:d8:ff:3f:00:71:34:b0:a5:60:
8d:7e:a7:88:5c:bf:7e:a4:09:13:57:32:ad:f3:7b:
fb:ac:ae:2f:cc:f9:3e:9c:9f:50:11:dc:a1:40:96:
72:e8:e4:e2:5b:0d:08:4a:9e:83:50:8c:b1:8f:80:
cf:5c:7e:b2:0f:a4:c2:0a:0c:a6:18:7c:ac:1f:2f:
3e:c6:50:9c:76:72:ee:b0:f2:d0:1e:4d:58:00:9d:
03:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C8:AA:5C:15:D9:4B:42:09:D4:D3:BE:CA:D5:BB:D6:36:3A:D8:59
X509v3 Authority Key Identifier:
keyid:D2:38:77:8F:13:49:B5:75:41:8C:19:E3:83:D0:57:1A:EB:EE:A2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:38:04:5f:f9:db:a8:39:92:40:d0:bb:06:0f:8b:de:5e:86:
66:45:0a:fa:ba:29:63:16:2e:d1:3a:82:8d:33:59:2f:44:ae:
a2:fe:d9:26:51:c3:77:8c:6b:c1:36:66:6f:ed:79:94:47:4e:
85:79:21:00:5e:63:3a:c7:f8:61:ad:ad:81:78:56:57:75:74:
1c:38:bb:2f:dc:35:70:75:be:fa:09:ca:22:02:51:cd:96:ed:
49:cc:66:b1:c5:7d:5b:f8:88:de:b3:38:b9:13:c3:cf:00:07:
3a:5a:20:1c:1a:ef:9f:56:6c:6f:ba:c9:77:7e:a1:69:91:30:
2a:6e:f6:05:98:3b:72:67:aa:68:c1:60:42:3f:20:89:8f:21:
a1:4b:d1:ae:23:ca:9c:5a:c6:62:6b:1a:4f:d1:cf:50:18:6c:
43:cc:0a:5d:51:ff:88:54:8c:0a:fd:fe:ae:9f:b4:6c:6c:de:
8c:8f:7a:bd:6c:19:d1:17:15:88:14:cf:a0:a6:dc:b5:b7:1a:
c0:5d:dc:c0:63:f0:fe:7b:4e:cf:4f:72:67:a4:63:4a:bf:1f:
38:40:d3:bf:c4:05:e8:3d:50:65:30:44:11:57:68:cc:d6:84:
a8:7a:d1:d2:b1:4d:c9:70:31:13:d1:85:8e:8f:73:31:24:52:
da:e3:f0:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKfYJQKLMaTFlxpD0ONRnNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzg3NzhmMTM0OWI1NzU0MThjMTllMzgzZDA1NzFhZWJl
ZWEyZGYwHhcNMjYwOTIyMTkwMDE4WhcNMjYwOTIzMTkwMDE4WjAzMTEwLwYDVQQD
EyhkZWM4YWE1YzE1ZDk0YjQyMDlkNGQzYmVjYWQ1YmJkNjM2M2FkODU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMB0fO+hccDZNY6QyPicyqPWlail
fZMgHFFecQq+dSRsjSRz85pVyVwN84FdsUXKXtvHj4Lc+Ewp/Z48UknvFA4Y5TLu
QI2oPPgKVH2jEN5j17whcnvja/2q6F/jByAaYz/esh/Px70JREsaK5hGAIg+tSw+
RYwqYnoR645wzxFRzNYDJygRB2HKhvWX6FLTYdyqSx+oG0+4r9J9TOVt0P0q9XZ+
BLQiPEfY/z8AcTSwpWCNfqeIXL9+pAkTVzKt83v7rK4vzPk+nJ9QEdyhQJZy6OTi
Ww0ISp6DUIyxj4DPXH6yD6TCCgymGHysHy8+xlCcdnLusPLQHk1YAJ0DNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7IqlwV2UtCCdTTvsrVu9Y2OthZMB8GA1UdIwQY
MBaAFNI4d48TSbV1QYwZ44PQVxrr7qLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpoM2p4Tkp0WFZCakJuamc5QlhHdXZ1b3Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81ZjcyYmMtY2FmNC00ZWRmLTk0MzIt
ZWMyYzE5ZWI2N2Y2LzEvMGpoM2p4Tkp0WFZCakJuamc5QlhHdXZ1b3Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS81ZjcyYmMtY2FmNC00ZWRmLTk0MzItZWMyYzE5ZWI2N2Y2
LzEvMGpoM2p4Tkp0WFZCakJuamc5QlhHdXZ1b3Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtTgEX/nb
qDmSQNC7Bg+L3l6GZkUK+ropYxYu0TqCjTNZL0Suov7ZJlHDd4xrwTZmb+15lEdO
hXkhAF5jOsf4Ya2tgXhWV3V0HDi7L9w1cHW++gnKIgJRzZbtScxmscV9W/iI3rM4
uRPDzwAHOlogHBrvn1Zsb7rJd36haZEwKm72BZg7cmeqaMFgQj8giY8hoUvRriPK
nFrGYmsaT9HPUBhsQ8wKXVH/iFSMCv3+rp+0bGzejI96vWwZ0RcViBTPoKbctbca
wF3cwGPw/ntOz09yZ6RjSr8fOEDTv8QF6D1QZTBEEVdozNaEqHrR0rFNyXAxE9GF
jo9zMSRS2uPwYg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:56:10 2026 by rpki-client