Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
File: jhF58KNc8HwWKWcmYoZsoAH3W9M.mft (raw, json)
Hash identifier: apGO0NqB9PTDzhtim9Tx6V9Shv65fBINZ3/dJAtz3i0=
Subject key identifier: 21:B1:9E:A6:2C:75:16:83:B3:02:A3:18:AD:1B:A1:32:F5:F1:98:D7
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial: 019F916C685BFCD714374C25A2EE6D55D621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
Manifest number: 0ADD
Signing time: Fri 24 Jul 2026 00:00:28 +0000
Manifest this update: Fri 24 Jul 2026 00:00:28 +0000
Manifest next update: Sat 25 Jul 2026 00:00:28 +0000
Files and hashes: 1: THMUwp1z_8yM4YT3tCOSI8jHXpc.roa (hash: Lr+q9lzNVfojfVbAAoJyDVcA+Kbg/x3ZRCV9JR35aYs=)
2: g1S-kxOnMbzdndrLbUeaCJYPOxw.roa (hash: jkv9kYNLwqMU1Z9MYM3vG7XQkKfgh1lByWmby4H5OPY=)
3: jhF58KNc8HwWKWcmYoZsoAH3W9M.crl (hash: KO4ztGYmV55nXAw+FPdoiu5tp0N2HwNv+vhHmzNcMZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:68:5b:fc:d7:14:37:4c:25:a2:ee:6d:55:d6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Validity
Not Before: Jul 24 00:00:28 2026 GMT
Not After : Jul 25 00:00:28 2026 GMT
Subject: CN=21b19ea62c751683b302a318ad1ba132f5f198d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:21:1f:d1:39:bb:c9:d1:d3:9d:45:97:b0:17:
4d:a5:c3:eb:10:75:62:14:99:d0:bc:fc:b2:24:c9:
57:a8:fa:77:52:85:7e:25:8d:a4:77:f5:f4:c8:ec:
e3:59:aa:0a:df:47:15:6a:41:4c:84:e4:19:57:b0:
13:bb:2c:17:4a:67:c0:8e:7b:ba:97:8c:73:56:34:
07:9e:c0:57:13:db:20:df:56:d6:2e:83:80:84:2f:
f9:76:da:00:f8:96:5d:5a:50:b7:1b:57:d0:36:8f:
03:a4:74:9f:f6:f3:c0:1f:cc:b2:a1:3e:bd:cb:93:
88:eb:f9:75:fe:87:d7:81:07:82:3d:81:c0:e7:d6:
67:1c:b0:b1:fe:0e:00:6e:0f:0c:27:03:c1:b4:a9:
1c:57:41:3d:ca:c2:ae:87:3b:f3:f8:58:e0:ba:e1:
f2:b4:b2:8c:1d:97:90:10:fa:e2:13:36:9d:72:5d:
61:13:62:b8:ac:15:e3:d3:2e:38:3f:16:8f:dd:2f:
b6:ed:9d:0c:eb:a2:fe:07:bd:92:02:fd:7e:cc:0a:
84:2d:7f:c2:e1:7c:86:62:b6:ad:d3:8e:ca:8a:08:
2e:4c:35:80:27:c1:ac:21:f8:e2:cd:ef:04:d2:49:
7d:f2:f0:dc:9a:03:bc:41:3f:42:c1:3e:93:a0:37:
e8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B1:9E:A6:2C:75:16:83:B3:02:A3:18:AD:1B:A1:32:F5:F1:98:D7
X509v3 Authority Key Identifier:
keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7d:a4:ad:89:46:9c:9e:6d:92:69:19:90:3c:1a:7b:45:f1:
a8:f5:b0:e5:0a:2e:47:dc:47:e5:02:8c:ac:c5:ba:93:5e:e4:
9d:7b:c9:4c:11:f3:47:c1:5d:bb:4a:eb:9d:8e:a8:fa:b3:3a:
ee:cc:19:30:86:17:c8:5c:1d:73:40:97:4f:91:cc:cc:dd:75:
82:7c:87:44:bf:48:b0:0b:44:76:e9:57:b5:b1:f6:2c:21:e0:
c3:a4:ce:6e:e2:9e:d4:1e:c3:47:09:22:c7:35:ab:8b:27:fe:
36:0d:a2:75:49:d5:e0:27:38:db:2e:24:c6:88:7a:36:45:a6:
ac:46:94:ac:02:a9:23:82:24:73:e7:b8:ad:61:08:77:1d:ac:
68:53:38:80:1a:58:d9:a3:d2:c4:76:df:a0:74:73:05:3d:0e:
b0:65:4f:83:87:2a:4b:ca:25:18:68:81:c4:63:4b:6f:b1:c4:
38:dd:29:c8:84:ee:00:44:59:55:e9:42:78:53:7b:3b:e8:ee:
8c:fd:3a:73:36:13:7c:4b:7e:ba:57:ca:e2:26:0d:f1:0b:b1:
b7:64:ca:07:f9:c5:1a:a4:71:f3:a2:47:ba:71:48:cc:11:49:
6e:06:4d:75:1e:be:75:32:de:5d:14:fc:e2:43:f8:82:01:7c:
ff:89:91:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:56:34 2026 by rpki-client