Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: IVbNt91pmbZzcf0SVlzI3G0VZ9y8Jv+pcUJoPhQ3PxY=
Subject key identifier: 0B:55:5E:04:01:D8:A3:77:13:4B:73:20:B0:46:97:64:5A:E0:CA:58
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 019CA78E66FB73DE30B79E194FBEA7C88986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 095E
Signing time: Sun 01 Mar 2026 04:00:53 +0000
Manifest this update: Sun 01 Mar 2026 04:00:53 +0000
Manifest next update: Mon 02 Mar 2026 04:00:53 +0000
Files and hashes: 1: AYUN6ILq1JnFNEGuiy9hczdbqfk.asa (hash: bnGV0TOXh2rgHledmfvQi6p7Cgl6Yx1IR8kXhvgGxxg=)
2: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: JBS7X4WgowJlFMVuYfl8DLt13bf350iNMp+GculMSG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:8e:66:fb:73:de:30:b7:9e:19:4f:be:a7:c8:89:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: Mar 1 04:00:53 2026 GMT
Not After : Mar 2 04:00:53 2026 GMT
Subject: CN=0b555e0401d8a377134b7320b04697645ae0ca58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:24:61:27:63:16:95:a4:c8:84:5f:c3:e6:
7d:66:b1:9b:12:a8:e7:f5:b7:23:f5:2d:4c:c3:ea:
96:35:25:9a:f0:01:58:7c:9f:5a:9f:bb:ef:0e:a6:
25:ab:2f:b9:35:3d:d7:5a:d9:5b:3e:c2:c6:db:7a:
57:5d:13:66:e3:af:7d:33:d6:08:08:68:82:ab:24:
bf:7d:d3:95:41:03:01:6d:4f:8c:7f:21:f0:c8:e5:
f2:a7:70:dc:41:30:f6:64:eb:58:ec:67:2c:8a:6b:
b0:8c:0d:a3:6d:f5:7c:59:66:4b:fb:61:f9:f9:c2:
ee:0b:cb:d0:7a:7b:d2:23:26:4c:07:77:49:d0:36:
b0:ef:9d:fd:02:1e:04:8f:96:2d:45:7c:ef:45:96:
e9:86:3b:9a:b3:27:f2:2a:09:28:2a:f8:7a:e8:6b:
59:03:b2:d9:b8:36:46:90:ad:cb:b2:06:5d:c4:9e:
97:4d:a1:6c:d5:3e:c7:97:e9:d5:3f:b1:6b:11:a8:
a9:f4:2d:0b:08:d9:d3:71:6b:31:25:d0:b6:50:63:
2e:98:76:d1:e4:7f:a3:b7:4e:ea:6b:2e:45:14:45:
ad:db:25:50:cf:e4:58:f6:0f:21:17:ae:84:9b:53:
d8:61:b9:fb:5b:e3:d8:d8:08:2b:ee:ed:76:53:e9:
4c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:55:5E:04:01:D8:A3:77:13:4B:73:20:B0:46:97:64:5A:E0:CA:58
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:49:3f:83:a9:66:7a:e9:4e:d6:4c:b0:3f:8a:aa:b6:b4:d5:
05:0a:59:d3:0f:a9:08:66:6f:17:2d:3a:d0:22:89:9a:c3:74:
88:08:89:ba:30:da:cd:9e:2b:7e:01:47:f8:bd:d8:e9:7f:e3:
83:db:3f:9c:93:82:4f:a0:81:d0:09:77:09:93:7b:f1:c0:54:
c3:67:29:7f:ff:ed:b7:f9:e2:a8:a7:32:95:60:be:cb:97:a2:
6d:ea:b7:74:cb:aa:8b:b3:7c:40:cb:2b:ab:71:24:2a:b4:56:
13:ba:b6:78:f5:20:c4:b3:bb:9d:06:2d:24:86:a7:0d:aa:c1:
ad:b4:c3:ed:c5:21:4b:2d:38:21:2c:3c:f3:87:45:8b:e6:90:
dc:da:57:f7:b9:41:28:45:5d:e5:d4:b0:f9:6d:bc:a3:49:5c:
6b:98:98:39:b2:cc:83:6e:d1:9b:4c:07:9f:7c:c9:bc:2f:ec:
12:1f:a7:a1:0b:32:4d:cc:2a:e1:89:26:a3:96:cd:2e:99:14:
b2:ac:1f:d1:cb:29:64:7c:ec:38:90:6f:75:cd:48:03:08:aa:
6f:1c:87:cf:88:b7:0d:26:c9:ff:b6:ac:cc:78:7c:9c:b0:66:
81:66:f6:29:31:56:33:e7:e1:fe:62:5d:32:7d:4c:5d:4e:00:
b2:4c:ec:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:44:46 2026 by rpki-client