Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.mft
File: JHBN1wT8Swr7dgh9b3ltuz-IAJI.mft (raw, json)
Hash identifier: AAVNQF9+lHC8Ul/K2DW7xzy6vWz5vHkUn6wBDJseA1E=
Subject key identifier: 20:D5:76:8F:B9:80:34:EC:B0:56:52:4D:86:6F:3C:20:10:A6:D0:09
Authority key identifier: 24:70:4D:D7:04:FC:4B:0A:FB:76:08:7D:6F:79:6D:BB:3F:88:00:92
Certificate issuer: /CN=24704dd704fc4b0afb76087d6f796dbb3f880092
Certificate serial: 019FAA889A646C8706CE00A35B28EE6F07C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHBN1wT8Swr7dgh9b3ltuz-IAJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:46 +0000
Manifest this update: Tue 28 Jul 2026 21:01:46 +0000
Manifest next update: Wed 29 Jul 2026 21:01:46 +0000
Files and hashes: 1: JHBN1wT8Swr7dgh9b3ltuz-IAJI.crl (hash: LHxtSDtZtS0uk1i9pN04m625EPXmPfqKqe6Zapkp8no=)
2: kva9v8qwuzs9AIC6M0Yymc62a-k.roa (hash: jqE5ifSnUoFbCpac7mHFBsd4Kmtc6sUUCcFu2fSyvUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHBN1wT8Swr7dgh9b3ltuz-IAJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:9a:64:6c:87:06:ce:00:a3:5b:28:ee:6f:07:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24704dd704fc4b0afb76087d6f796dbb3f880092
Validity
Not Before: Jul 28 21:01:46 2026 GMT
Not After : Jul 29 21:01:46 2026 GMT
Subject: CN=20d5768fb98034ecb056524d866f3c2010a6d009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ab:b7:4c:3c:1e:9d:d0:e0:66:b3:2b:f1:6d:
10:0f:65:37:50:09:90:18:87:20:48:2a:1d:58:4b:
cc:aa:a6:77:79:6a:cf:a9:12:75:e4:00:2a:b6:78:
24:78:77:50:11:6a:db:46:f4:5e:69:6c:ff:ff:12:
bd:69:55:aa:e0:c8:bd:a3:32:f1:7a:62:71:e9:27:
7a:b1:59:4d:a6:f2:4b:7d:22:9d:0d:cc:02:a1:55:
f1:1e:4e:92:d7:f3:81:99:4b:7e:12:d4:33:a9:36:
70:c9:cf:e6:7b:88:8e:bf:a3:51:77:1d:d8:3d:2a:
a8:23:1a:ca:e5:95:18:f6:a4:28:63:18:e3:fa:66:
0c:7e:d9:6e:50:b0:89:b4:bc:b9:5d:88:c1:b8:2d:
33:f1:05:a7:2f:14:ed:55:1c:fb:ee:ef:03:7a:c1:
0b:e6:92:35:15:01:c4:b1:23:01:df:cb:b6:70:fc:
83:11:b5:c7:e6:4a:d0:2c:86:de:52:51:d3:b1:4a:
70:e8:fa:2a:90:0e:aa:33:35:54:59:98:74:4f:21:
43:f1:93:ea:96:1f:1d:44:cf:f0:60:6c:72:cf:07:
b4:48:65:0b:ae:bb:40:c8:11:35:93:89:b8:87:4e:
2e:ab:ad:65:59:f1:91:2f:dd:9a:55:62:e9:5e:7d:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D5:76:8F:B9:80:34:EC:B0:56:52:4D:86:6F:3C:20:10:A6:D0:09
X509v3 Authority Key Identifier:
keyid:24:70:4D:D7:04:FC:4B:0A:FB:76:08:7D:6F:79:6D:BB:3F:88:00:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHBN1wT8Swr7dgh9b3ltuz-IAJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:82:13:29:ca:3f:44:f8:6f:ac:fa:74:28:c6:7c:17:20:64:
aa:bb:6b:b4:8f:ba:b2:6f:be:1a:e0:db:00:7a:43:ba:76:de:
d2:c0:6d:35:2a:23:1a:5c:8c:69:19:ec:26:47:f5:1c:48:6b:
31:ad:c4:ad:87:8c:f6:1e:a2:d5:5c:ce:c4:ad:bd:41:3a:20:
47:42:46:0c:8c:9a:19:49:55:8d:67:fa:29:b1:5e:f2:80:76:
f8:14:a8:b2:1b:1d:3b:03:e5:7b:41:92:1c:58:52:a0:82:ee:
35:37:75:4f:3e:79:54:75:e4:41:2d:a4:6d:89:ff:c9:7e:46:
ea:a0:65:73:75:7e:68:c0:71:74:19:cb:14:55:bb:c8:31:be:
b2:78:9e:d3:22:7b:9e:86:a7:86:46:3c:cd:9f:8a:b9:b2:68:
23:ca:cd:f6:c3:7e:fd:a6:49:05:c3:b2:95:7c:bc:04:fc:4e:
31:4c:a5:ee:96:1d:3c:26:a4:3b:a2:69:21:3d:b6:23:1c:52:
c1:16:9b:1c:1a:27:fa:db:16:0a:61:c1:6b:2f:41:10:e9:49:
b1:bc:0e:06:61:8d:8f:4a:ca:56:04:20:e1:7a:ee:05:f7:cb:
de:3a:e2:70:8f:f1:fa:36:b0:71:2c:e2:f1:fb:9f:ea:46:28:
b8:19:60:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:33 2026 by rpki-client