Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
File: JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft (raw, json)
Hash identifier: GY1ymwJMqVMClb++6DL4GRbJpIOZbYnFnSnkBYEbNbg=
Subject key identifier: ED:C5:43:C5:CE:48:39:13:F1:1A:7F:7F:AC:6E:56:40:70:E9:4D:10
Authority key identifier: 24:7C:DB:5E:A8:2E:03:33:36:64:0E:9E:EC:8E:A0:98:CA:C8:61:80
Certificate issuer: /CN=247cdb5ea82e033336640e9eec8ea098cac86180
Certificate serial: 01A0E8F6B37B1333568D66D0D40EE4108FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
Manifest number: 01DD
Signing time: Mon 28 Sep 2026 17:01:16 +0000
Manifest this update: Mon 28 Sep 2026 17:01:16 +0000
Manifest next update: Tue 29 Sep 2026 17:01:16 +0000
Files and hashes: 1: JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl (hash: 7gBEQbxHCwE6Vd4mRHJYa0QAObL11aY7q6oWiUWuT5Q=)
2: sr5kiWaUNJb3k53oHKiE3zAeNCc.roa (hash: 4lKEnHHPq8ieSuUmi9tpKwDYW28NC9iz/gZMj6c8NHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:b3:7b:13:33:56:8d:66:d0:d4:0e:e4:10:8f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247cdb5ea82e033336640e9eec8ea098cac86180
Validity
Not Before: Sep 28 17:01:16 2026 GMT
Not After : Sep 29 17:01:16 2026 GMT
Subject: CN=edc543c5ce483913f11a7f7fac6e564070e94d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:92:fb:f8:3a:bc:89:c8:8a:71:86:e3:eb:
c6:63:df:a5:e4:d9:7a:b9:9e:99:4e:88:5c:62:35:
29:b8:e4:84:36:32:ad:8c:4e:e9:cc:92:aa:c9:78:
5b:fe:9a:9c:7c:31:75:db:8a:3e:b3:32:de:87:2d:
61:db:e3:06:09:c8:a5:0f:ea:84:89:07:f8:4f:58:
5c:01:65:79:c9:60:e3:dc:37:c9:82:f7:c3:f5:29:
a1:a8:50:a0:b6:a2:9b:85:24:dc:2b:b0:01:e9:5e:
cc:53:11:07:6b:69:1b:b3:98:65:9f:76:9f:a2:90:
d5:e1:83:ea:a2:70:7b:29:d3:98:4f:af:de:29:2d:
12:15:72:72:5f:cc:fc:b8:cd:f8:dc:4c:4d:38:ea:
bc:a7:a1:32:e6:3f:2b:55:7f:fa:da:3a:52:59:50:
69:be:92:9d:61:da:19:81:27:2f:4f:a3:5f:7c:c4:
77:5b:58:79:83:c2:26:83:7a:0b:90:9b:ac:c3:cf:
b7:6c:94:30:7c:da:a2:fd:27:6e:df:ab:9b:18:66:
92:e3:9e:84:cc:4b:2a:e4:b0:94:6d:98:9a:06:a5:
cb:14:01:d6:88:05:11:f8:36:60:08:dc:a5:39:22:
ba:e3:00:86:08:d8:ca:4d:6b:c2:0e:6e:5f:26:f8:
cf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C5:43:C5:CE:48:39:13:F1:1A:7F:7F:AC:6E:56:40:70:E9:4D:10
X509v3 Authority Key Identifier:
keyid:24:7C:DB:5E:A8:2E:03:33:36:64:0E:9E:EC:8E:A0:98:CA:C8:61:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f4:1a:81:c8:5e:3a:91:5d:d5:c5:62:25:e3:32:08:9b:ca:
02:b0:89:8c:29:40:56:5b:54:b4:96:03:64:6c:de:d7:cc:48:
84:9c:6b:fd:30:02:36:a3:5d:8f:5a:5d:75:2f:5f:f3:69:97:
c4:7d:8a:f2:36:42:81:a3:19:84:12:13:b1:a7:60:61:06:2d:
44:55:12:73:1d:a7:e2:06:47:9c:59:58:1f:3c:9d:70:de:32:
75:57:fb:12:df:7a:c8:ae:d8:d5:23:cc:40:d7:b4:c1:3e:7c:
af:55:31:5a:21:fb:e0:4c:7b:cc:3b:6b:be:12:47:d1:d6:68:
8d:8b:7f:92:11:a4:77:78:b8:43:bc:6c:2a:0a:f4:5b:f8:ce:
67:a9:94:36:04:c4:35:2e:f0:62:09:93:b1:d8:39:d5:e6:69:
2c:13:70:81:2e:94:4a:3b:8f:84:05:76:db:5f:e1:c5:73:dd:
64:80:b3:e2:2b:b9:cc:4b:60:89:99:13:a6:b1:92:7f:81:d4:
6e:be:26:3f:71:e8:15:cd:6b:4d:4c:b5:87:62:f5:67:5b:20:
d9:85:aa:34:5d:d0:e2:7a:66:d0:c9:6a:fe:15:8f:bd:ea:63:
f8:85:68:c9:96:49:07:fc:5c:da:dd:3b:2e:5f:a3:e9:a6:5b:
5c:94:dc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:47:17 2026 by rpki-client