Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
File: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft (raw, json)
Hash identifier: 91ZwzIB/4s+chtJ2foNEEAmf3es8AMSB657siUvGzvo=
Subject key identifier: 0F:89:8C:7D:8F:42:F3:B7:74:61:5A:26:E9:B2:F3:BA:EF:31:47:12
Authority key identifier: 24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
Certificate issuer: /CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Certificate serial: 01A104DBDA5F26316E847B3C8466709E0878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
Manifest number: 0886
Signing time: Sun 04 Oct 2026 03:01:19 +0000
Manifest this update: Sun 04 Oct 2026 03:01:19 +0000
Manifest next update: Mon 05 Oct 2026 03:01:19 +0000
Files and hashes: 1: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl (hash: Brn/lPrGAVrPAhyuRBtgho+NOxOzEPSAHv5KaL+kfw4=)
2: of5fvbBOl_2ZOya6SQ0xsXlOVng.roa (hash: FlPfu4dwMoPwrHiBDoZEfb7scYNLSD/+Wl4U6dL0V+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:db:da:5f:26:31:6e:84:7b:3c:84:66:70:9e:08:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Validity
Not Before: Oct 4 03:01:19 2026 GMT
Not After : Oct 5 03:01:19 2026 GMT
Subject: CN=0f898c7d8f42f3b774615a26e9b2f3baef314712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:80:b3:e2:f8:78:50:3a:d9:44:1c:85:84:9a:
53:07:51:66:2f:1a:d6:34:71:cd:45:f8:f2:65:dd:
5d:83:bf:cc:25:7b:81:51:8e:41:3e:6b:c3:27:ee:
ad:35:d5:2e:c7:16:da:af:52:7c:00:00:8f:ec:40:
62:3b:9b:cc:a9:4a:2b:9f:fc:af:7d:e4:b7:22:76:
df:af:34:a4:2a:65:f8:ac:9f:95:04:44:95:c4:7e:
9e:98:d2:63:33:05:e9:b5:ab:93:59:86:e4:71:55:
44:b5:e0:f6:30:22:55:d5:51:39:da:cc:af:fa:2b:
d9:ec:e9:f6:99:59:a1:d0:0b:c1:ea:c5:d6:c0:0c:
80:f9:50:06:34:a0:71:55:93:6b:37:3f:5c:0a:e6:
90:7e:20:d9:15:94:69:9b:93:aa:be:e4:62:83:64:
f2:40:34:fc:c7:5e:ac:ca:db:39:49:45:29:00:f5:
86:71:1f:72:e1:64:c7:ca:e1:8d:7a:eb:48:ba:22:
1b:ff:d7:8e:75:26:f1:29:1f:06:ce:7d:c8:8f:0d:
ed:4c:7c:ea:49:94:d5:d0:ce:a8:62:5e:86:74:15:
ce:e1:81:d5:25:f4:1b:38:35:1f:97:58:53:ef:09:
9a:fc:db:43:28:7f:68:64:54:b9:42:01:b2:5c:7b:
51:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:89:8C:7D:8F:42:F3:B7:74:61:5A:26:E9:B2:F3:BA:EF:31:47:12
X509v3 Authority Key Identifier:
keyid:24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ab:52:9b:6c:c0:95:bc:39:30:50:a0:93:00:9e:c3:46:f0:
f5:35:91:82:dc:b1:f2:1d:ee:d4:63:db:66:64:02:d9:21:89:
9d:13:53:94:be:4f:94:bd:68:86:0a:e7:44:54:73:67:b8:e6:
19:e6:8a:5b:dd:6b:28:6e:5c:5f:b2:a5:a3:c6:37:9d:f5:38:
f6:2a:7f:e5:f6:08:60:76:5d:43:67:e5:64:fe:d1:a8:c5:61:
58:3e:4c:9f:0e:3d:6e:9d:31:ad:26:8c:54:52:71:79:45:2e:
7c:15:3e:df:09:ec:c6:45:fa:15:22:f1:9c:5e:83:66:16:b2:
9d:02:b0:bc:fb:62:93:5c:1f:e4:ac:fe:2c:cb:21:50:05:33:
4f:89:b8:7a:eb:49:3d:c4:f9:99:b9:2c:d0:d3:0f:8b:45:96:
09:08:0d:a8:43:f8:e0:63:5d:e5:9e:82:70:c5:ab:2b:3f:7e:
28:a5:56:c1:ab:ac:31:34:16:d6:bc:1d:16:c1:d0:22:65:46:
7d:33:7f:b3:fc:c3:c5:26:75:fe:21:80:d2:6a:76:f7:d8:ab:
12:64:68:9a:63:cd:9c:3a:89:c5:20:b6:e6:15:d0:3d:4f:0b:
a8:df:e4:3c:98:9b:df:33:df:5d:48:3b:2a:9e:2a:10:54:71:
11:a8:3b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:10:20 2026 by rpki-client