Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: GD0gc3Wfurhps/yBuAYa11O0Lr47A7bVaYubqFYb6qA=
Subject key identifier: CF:89:D9:6F:1D:5C:EE:29:4B:FB:B6:B3:C7:2B:83:4A:EE:C3:E3:0C
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 01A0C030E0CDF0ED488690E6CA1DD6BBBC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 0B7D
Signing time: Sun 20 Sep 2026 19:00:23 +0000
Manifest this update: Sun 20 Sep 2026 19:00:23 +0000
Manifest next update: Mon 21 Sep 2026 19:00:23 +0000
Files and hashes: 1: AYUN6ILq1JnFNEGuiy9hczdbqfk.asa (hash: bnGV0TOXh2rgHledmfvQi6p7Cgl6Yx1IR8kXhvgGxxg=)
2: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: ohcIO5SiqNDNYA0xawe/NNtnTWjKkJolbEhVdDkUjIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:30:e0:cd:f0:ed:48:86:90:e6:ca:1d:d6:bb:bc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: Sep 20 19:00:23 2026 GMT
Not After : Sep 21 19:00:23 2026 GMT
Subject: CN=cf89d96f1d5cee294bfbb6b3c72b834aeec3e30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:7a:77:2f:22:66:6c:52:0d:35:fe:5b:40:
b6:98:50:08:29:c6:5f:59:94:f6:b9:f7:d2:fc:37:
17:9d:11:3f:d8:dd:ad:00:27:67:d3:48:f1:4d:0a:
84:93:b2:72:dc:8a:10:09:75:76:fa:7c:73:a7:66:
a0:22:47:19:68:f2:ad:cc:a3:33:4e:0b:c6:2c:59:
60:1c:d6:98:6b:8d:20:a6:be:1e:fe:03:3c:4d:20:
0e:ba:52:ea:ba:93:72:68:11:2f:3e:51:0e:84:fd:
8d:d9:c8:de:d4:d0:d3:4d:cf:57:13:5f:a0:4c:15:
88:fa:73:62:e7:d6:0b:ab:cc:dc:bf:64:a5:a8:8d:
68:8b:35:31:4a:2b:d1:8f:bb:4c:e9:8a:2e:5f:fe:
d0:71:3b:c3:5d:0c:cd:d0:65:c7:f8:93:ce:ea:7b:
fd:85:1c:0f:59:ad:ad:0d:88:bd:7b:0c:38:27:5a:
52:9e:35:33:39:19:1e:ee:6b:85:29:8f:c0:eb:81:
4d:0f:10:63:d4:ee:c0:7c:6a:fc:c6:24:bb:e5:e6:
fe:93:3f:1e:11:ea:e1:72:5c:21:19:0d:b3:54:74:
85:41:bf:b0:27:07:7b:0a:13:41:26:f1:f3:26:3f:
68:ef:68:03:d3:89:d8:31:e2:c8:6f:45:62:56:0f:
8d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:89:D9:6F:1D:5C:EE:29:4B:FB:B6:B3:C7:2B:83:4A:EE:C3:E3:0C
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:db:70:e1:ce:20:e1:9c:bd:c4:53:6e:3e:28:b5:96:f1:bc:
03:95:98:e5:64:1c:35:d7:e8:1b:de:8c:12:92:31:48:84:a5:
97:e9:be:81:a5:af:06:bf:30:04:2a:e0:5f:75:51:d1:86:1a:
3d:28:3b:e9:5a:2a:b3:4a:92:57:57:89:ac:0e:67:d7:c2:4f:
4b:bf:12:02:58:2e:3f:f5:cf:2c:e9:b3:b1:78:30:44:ac:e0:
29:21:2a:45:17:06:f2:97:77:7b:93:ed:47:d6:61:b3:60:c8:
61:21:af:dd:4f:b7:80:53:7a:05:4f:c8:6e:67:96:b9:44:9f:
56:f1:72:22:4c:ef:04:18:5e:98:8f:d4:e1:ea:25:74:9f:ef:
c2:8e:5a:f9:80:d1:9e:d4:64:c3:fb:a4:23:88:f9:34:d9:a1:
b7:97:7b:65:12:5b:29:7e:73:c8:2d:b0:03:36:d3:68:2f:59:
7b:9d:75:c9:15:02:b5:6b:2b:ea:e0:7a:7b:f2:b5:6a:34:dd:
6c:fe:8d:e7:2b:b4:3f:9d:ad:6f:ce:1e:1c:49:04:0f:6b:57:
44:b0:11:f3:55:a2:c6:0f:9f:7a:5b:9c:37:6e:cc:db:7e:2c:
f0:22:a0:38:ee:f5:9e:7b:27:7d:e9:27:f2:87:b1:39:79:fc:
50:b2:35:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:41:01 2026 by rpki-client