Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
File: jghAgExmgMQfIehybzgLleaelEc.mft (raw, json)
Hash identifier: m4DonVB98f9ZmC3jQRwUIusEcIW96uyUT0GlhtLWiIQ=
Subject key identifier: 92:FA:21:20:42:C2:BC:C5:1A:2E:55:5C:8B:A7:8E:30:2B:16:5F:CD
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial: 019E1E6C90FA0E5B6184D2FF7FFD0A5BA9C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
Manifest number: 0E57
Signing time: Tue 12 May 2026 23:01:31 +0000
Manifest this update: Tue 12 May 2026 23:01:31 +0000
Manifest next update: Wed 13 May 2026 23:01:31 +0000
Files and hashes: 1: FcDP4t2fUN_dTrYyfxsE8QW3Eyg.roa (hash: sDQcJIThGsK9Nrdf2isebfLDyVxi7JAHTUMrXx4QKTw=)
2: cjfADLaDEFlQK8qrVJ5NipbhmYQ.roa (hash: IRslVjUODdyfex5FaSaSEKWcalRpU1+utYy+dcv1SD4=)
3: jghAgExmgMQfIehybzgLleaelEc.crl (hash: PmQZE1euwnjL9vA1I52PgwaXJpTHxck1VSPHLQ78KP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:90:fa:0e:5b:61:84:d2:ff:7f:fd:0a:5b:a9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
Validity
Not Before: May 12 23:01:31 2026 GMT
Not After : May 13 23:01:31 2026 GMT
Subject: CN=92fa212042c2bcc51a2e555c8ba78e302b165fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6a:d7:cb:68:23:05:2f:32:03:63:ef:10:a2:
05:38:a2:3f:de:0c:9c:8a:af:68:99:58:33:6a:b5:
76:02:fd:90:51:99:21:1a:88:8b:04:88:98:46:2a:
9c:7b:b5:75:5b:75:8c:f2:a4:07:d7:a6:c3:8b:4f:
69:39:5f:52:23:cc:1a:a9:79:ee:3d:72:a6:97:1e:
61:78:1a:ef:b9:19:30:8a:9d:f6:e1:a5:3f:54:5f:
c2:0b:1d:06:e9:bb:64:d7:af:64:ad:fd:55:49:25:
47:e2:75:86:28:20:46:04:bf:35:05:c6:bb:55:9d:
68:93:b8:82:d9:02:4c:33:9a:eb:5a:2a:e7:ed:f2:
24:0a:01:c5:a8:88:8e:66:1e:95:7b:95:3f:54:82:
a3:1a:3e:b2:16:28:dd:53:f5:78:4e:48:98:b5:b8:
85:98:dc:61:97:aa:d5:56:8a:01:4a:69:9e:42:d8:
bc:0c:46:7a:d0:5b:30:1d:46:ac:4d:da:29:71:75:
bc:2e:67:ad:0b:24:6d:db:93:67:5d:05:b8:c7:39:
42:cf:1d:23:26:ad:76:04:b8:2a:bc:d6:c2:c2:84:
f6:40:bb:cb:62:33:a8:6f:26:92:2e:a0:53:bf:c0:
ee:5e:7e:88:99:2a:69:b0:50:4f:0c:da:18:a9:05:
eb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FA:21:20:42:C2:BC:C5:1A:2E:55:5C:8B:A7:8E:30:2B:16:5F:CD
X509v3 Authority Key Identifier:
keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:25:b4:38:3f:3d:86:fb:a7:f1:5e:cd:bd:23:cd:74:94:a3:
de:dc:f7:24:e3:da:c6:b4:01:64:2b:ec:b1:05:19:9a:a5:38:
ec:4f:bc:a6:20:0b:f9:0f:c8:bf:f8:0d:89:5a:3e:1e:d8:af:
3b:b1:60:56:e8:da:e0:d5:60:f6:35:88:e2:b1:60:77:8d:38:
29:d6:a0:8f:87:0f:1c:aa:8c:0f:f1:e0:43:39:66:d2:4a:f5:
ec:7e:79:83:6a:dd:73:58:44:27:22:6b:49:76:07:17:2b:cb:
f6:10:43:4e:f0:fa:a4:4a:a0:35:66:7f:01:05:d8:dd:db:77:
9c:e7:0a:70:3c:1e:bf:6d:7b:9c:21:c2:6a:56:e2:4e:ca:d7:
32:df:90:46:d4:35:7c:ad:df:52:56:e7:63:88:11:15:1a:50:
3f:d4:5f:20:2d:21:32:c4:e8:15:23:ec:8c:66:57:46:71:58:
d7:bc:1d:77:53:49:32:f9:d5:6a:a1:21:d4:ed:32:72:9e:a0:
a3:cb:04:8b:9a:c2:c6:18:93:1e:fa:36:75:ee:13:fe:e2:12:
b5:07:2b:55:2d:fb:8e:63:9a:4c:a1:ac:f6:4d:1a:93:3d:9c:
14:37:53:16:6e:7d:9f:ea:5e:ff:c7:af:b3:11:b4:c5:2f:1f:
4c:f6:b7:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebJD6DlthhNL/f/0KW6nIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMDg0MDgwNGM2NjgwYzQxZjIxZTg3MjZmMzgwYjk1ZTY5
ZTk0NDcwHhcNMjYwNTEyMjMwMTMxWhcNMjYwNTEzMjMwMTMxWjAzMTEwLwYDVQQD
Eyg5MmZhMjEyMDQyYzJiY2M1MWEyZTU1NWM4YmE3OGUzMDJiMTY1ZmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32rXy2gjBS8yA2PvEKIFOKI/3gyc
iq9omVgzarV2Av2QUZkhGoiLBIiYRiqce7V1W3WM8qQH16bDi09pOV9SI8waqXnu
PXKmlx5heBrvuRkwip324aU/VF/CCx0G6btk169krf1VSSVH4nWGKCBGBL81Bca7
VZ1ok7iC2QJMM5rrWirn7fIkCgHFqIiOZh6Ve5U/VIKjGj6yFijdU/V4TkiYtbiF
mNxhl6rVVooBSmmeQti8DEZ60FswHUasTdopcXW8LmetCyRt25NnXQW4xzlCzx0j
Jq12BLgqvNbCwoT2QLvLYjOobyaSLqBTv8DuXn6ImSppsFBPDNoYqQXrxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJL6ISBCwrzFGi5VXIunjjArFl/NMB8GA1UdIwQY
MBaAFI4IQIBMZoDEHyHocm84C5XmnpRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamdoQWdFeG1nTVFmSWVoeWJ6Z0xsZWFlbEVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jZWU1NzItMzQyMC00NWU0LTg3YjYt
YzI3OTk3NTNjODUzLzEvamdoQWdFeG1nTVFmSWVoeWJ6Z0xsZWFlbEVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9jZWU1NzItMzQyMC00NWU0LTg3YjYtYzI3OTk3NTNjODUz
LzEvamdoQWdFeG1nTVFmSWVoeWJ6Z0xsZWFlbEVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtCW0OD89
hvun8V7NvSPNdJSj3tz3JOPaxrQBZCvssQUZmqU47E+8piAL+Q/Iv/gNiVo+Htiv
O7FgVuja4NVg9jWI4rFgd404Kdagj4cPHKqMD/HgQzlm0kr17H55g2rdc1hEJyJr
SXYHFyvL9hBDTvD6pEqgNWZ/AQXY3dt3nOcKcDwev217nCHCalbiTsrXMt+QRtQ1
fK3fUlbnY4gRFRpQP9RfIC0hMsToFSPsjGZXRnFY17wdd1NJMvnVaqEh1O0ycp6g
o8sEi5rCxhiTHvo2de4T/uIStQcrVS37jmOaTKGs9k0akz2cFDdTFm59n+pe/8ev
sxG0xS8fTPa3HQ==
-----END CERTIFICATE-----
Generated at Wed May 13 10:49:45 2026 by rpki-client