Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
File: JHQF6c7jnXGUTV4xSesBth-a2x4.mft (raw, json)
Hash identifier: O5J5S2psvCnBVOarZH4FfLLtpvOP02HXLNPGUPp7e4Y=
Subject key identifier: 89:3D:E9:55:14:DA:15:89:28:D7:AD:DF:81:C2:38:45:99:59:93:3A
Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Certificate serial: 01A0EB8A55BFF000F72968E4D53F2F5B4330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
Manifest number: 1588
Signing time: Tue 29 Sep 2026 05:01:46 +0000
Manifest this update: Tue 29 Sep 2026 05:01:46 +0000
Manifest next update: Wed 30 Sep 2026 05:01:46 +0000
Files and hashes: 1: JHQF6c7jnXGUTV4xSesBth-a2x4.crl (hash: pthol36CZEr5DZiEFuSyUTfQCbRT8yL8OK4jsNvLu/w=)
2: RHgj94s99yLOm8jJoah9M5rvNqY.roa (hash: 52fyve7WO1cwkbeeuvWUD7YyeD7rPI2Crc9dE/2ZkFM=)
3: U21ti5u9tXvNdQFp3b5VZCzrIFE.roa (hash: fztCV91rHBkTL6GqWa8LhQ3FxdBM1myni6wPf7YIs8o=)
4: Udssf4fE6o3QNpke-lB6PuA0Uo0.roa (hash: 9+ibfBkyOgj0hAuo5PA4Hd1TB41jIqZV5+PkUc7DWA8=)
5: w9ftw_Gavjo8Af6ZR10zP1F-XZk.roa (hash: k8S+JttR7Cx81nDmHA27QOl3Yh5ps44szsLBno0rSVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8a:55:bf:f0:00:f7:29:68:e4:d5:3f:2f:5b:43:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Validity
Not Before: Sep 29 05:01:46 2026 GMT
Not After : Sep 30 05:01:46 2026 GMT
Subject: CN=893de95514da158928d7addf81c238459959933a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:8b:06:a0:ac:1d:fb:0a:66:15:9b:18:cd:
57:76:93:8b:bf:20:4b:88:b3:57:8a:65:fb:ea:05:
54:b8:8a:cc:23:f5:bc:d6:1a:d4:22:8b:0b:96:89:
7b:b7:ea:c7:69:d1:0f:8f:63:e7:f2:40:35:23:d6:
ee:65:7b:6d:4b:f3:d4:45:71:2f:cd:f6:e1:e0:66:
b7:0a:e8:3c:20:d0:47:8e:1e:c4:10:ee:e7:68:24:
ae:57:93:31:8e:8d:f8:11:31:73:c3:33:f4:6f:a4:
51:72:e0:95:59:18:bd:35:40:82:e6:d7:be:9f:f5:
c5:f3:b5:4d:b1:7d:2f:9a:b2:20:05:50:de:ef:10:
5e:d9:76:e9:a1:85:99:93:a9:df:91:65:79:45:fd:
41:cd:8f:a3:78:9d:09:3a:93:e7:d9:9f:71:9c:ef:
06:62:3d:8f:86:e3:e2:e1:30:b1:57:d5:29:c2:21:
ce:06:a7:e6:f9:38:b7:d7:1f:d0:19:88:70:c1:a4:
6e:e2:95:34:35:a1:1c:1f:20:6e:96:a0:77:20:d8:
b8:d5:c7:e5:a1:18:9f:b4:c9:55:53:92:37:db:74:
a4:31:10:82:10:33:f1:ce:6a:95:e0:0e:08:85:af:
35:03:28:86:f8:de:57:e7:22:53:df:b1:58:ec:e2:
6f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3D:E9:55:14:DA:15:89:28:D7:AD:DF:81:C2:38:45:99:59:93:3A
X509v3 Authority Key Identifier:
keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c0:3e:24:5f:a0:cd:ae:27:90:88:11:8a:af:30:f3:dc:da:
fd:68:bb:27:d4:20:f8:55:44:fb:f1:9b:3b:91:64:84:b6:67:
5f:4b:cf:37:e1:8e:ed:3c:70:de:05:bd:e2:a5:16:82:a3:ac:
3c:2b:84:dd:1c:18:35:68:20:99:71:d1:97:51:69:3e:dd:7f:
d5:6f:45:25:cb:9d:8d:52:38:2d:2a:8a:12:fa:67:20:82:a6:
77:fa:e1:b5:c9:2e:e8:0c:69:6f:d3:e1:20:b9:35:b5:6f:ea:
b4:5f:a5:aa:42:a9:9e:66:2b:44:4c:50:38:42:e3:44:ba:e8:
bf:6c:a1:96:ed:fe:4a:28:20:97:8e:37:8b:14:c5:04:05:63:
8c:06:e4:b0:a5:78:8a:bd:b7:0a:91:05:25:cf:5f:a9:64:80:
be:92:68:d9:38:a6:71:c4:55:8c:dd:6b:57:53:c7:e8:5c:78:
1b:5d:5f:8f:73:f6:bc:aa:c8:7b:7b:12:70:01:d2:50:d6:78:
59:29:25:87:8c:15:72:d8:b5:ad:e8:0e:f5:04:1d:df:ea:e6:
b0:ff:a0:73:6a:c2:72:dd:a8:a3:74:5b:de:ef:24:04:d9:40:
ab:b2:f3:65:89:60:e4:f9:39:0c:f6:45:d8:ed:db:10:03:4e:
34:69:06:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrilW/8AD3KWjk1T8vW0MwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NzQwNWU5Y2VlMzlkNzE5NDRkNWUzMTQ5ZWIwMWI2MWY5
YWRiMWUwHhcNMjYwOTI5MDUwMTQ2WhcNMjYwOTMwMDUwMTQ2WjAzMTEwLwYDVQQD
Eyg4OTNkZTk1NTE0ZGExNTg5MjhkN2FkZGY4MWMyMzg0NTk5NTk5MzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/+LBqCsHfsKZhWbGM1XdpOLvyBL
iLNXimX76gVUuIrMI/W81hrUIosLlol7t+rHadEPj2Pn8kA1I9buZXttS/PURXEv
zfbh4Ga3Cug8INBHjh7EEO7naCSuV5Mxjo34ETFzwzP0b6RRcuCVWRi9NUCC5te+
n/XF87VNsX0vmrIgBVDe7xBe2XbpoYWZk6nfkWV5Rf1BzY+jeJ0JOpPn2Z9xnO8G
Yj2PhuPi4TCxV9UpwiHOBqfm+Ti31x/QGYhwwaRu4pU0NaEcHyBulqB3INi41cfl
oRiftMlVU5I323SkMRCCEDPxzmqV4A4Iha81AyiG+N5X5yJT37FY7OJvpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIk96VUU2hWJKNet34HCOEWZWZM6MB8GA1UdIwQY
MBaAFCR0BenO451xlE1eMUnrAbYfmtseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkhRRjZjN2puWEdVVFY0eFNlc0J0aC1hMng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85YTNhOTgtZDY3MC00MzQzLTkyMDYt
NDdiYmFjYTA3OGZmLzEvSkhRRjZjN2puWEdVVFY0eFNlc0J0aC1hMng0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC85YTNhOTgtZDY3MC00MzQzLTkyMDYtNDdiYmFjYTA3OGZm
LzEvSkhRRjZjN2puWEdVVFY0eFNlc0J0aC1hMng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsA+JF+g
za4nkIgRiq8w89za/Wi7J9Qg+FVE+/GbO5FkhLZnX0vPN+GO7Txw3gW94qUWgqOs
PCuE3RwYNWggmXHRl1FpPt1/1W9FJcudjVI4LSqKEvpnIIKmd/rhtcku6Axpb9Ph
ILk1tW/qtF+lqkKpnmYrRExQOELjRLrov2yhlu3+Siggl443ixTFBAVjjAbksKV4
ir23CpEFJc9fqWSAvpJo2TimccRVjN1rV1PH6Fx4G11fj3P2vKrIe3sScAHSUNZ4
WSklh4wVcti1regO9QQd3+rmsP+gc2rCct2oo3Rb3u8kBNlAq7LzZYlg5Pk5DPZF
2O3bEANONGkG4g==
-----END CERTIFICATE-----
Generated at Tue Sep 29 12:28:39 2026 by rpki-client