Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: GQ0OyoPFJ7SvBf3XWoG7SCEylvOtv7doQl0CMeLGWRY=
Subject key identifier: DA:51:95:77:99:22:73:28:5C:CE:44:F9:CB:74:1C:4E:CE:36:C8:7F
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 019FAA1A0AC0F4B2A1EBA0D0F7FDCD67F385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 0AED
Signing time: Tue 28 Jul 2026 19:01:01 +0000
Manifest this update: Tue 28 Jul 2026 19:01:01 +0000
Manifest next update: Wed 29 Jul 2026 19:01:01 +0000
Files and hashes: 1: AYUN6ILq1JnFNEGuiy9hczdbqfk.asa (hash: bnGV0TOXh2rgHledmfvQi6p7Cgl6Yx1IR8kXhvgGxxg=)
2: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: OZtMN2pB16n6G9BAQ8wUn5KKEBH71jAiyrRqF6RjgYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:0a:c0:f4:b2:a1:eb:a0:d0:f7:fd:cd:67:f3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: Jul 28 19:01:01 2026 GMT
Not After : Jul 29 19:01:01 2026 GMT
Subject: CN=da519577992273285cce44f9cb741c4ece36c87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:ca:6e:13:ce:aa:5e:ee:bf:cc:89:ce:79:
79:c4:8f:2f:b1:71:0c:03:ef:6b:a9:a2:8a:d8:09:
d1:39:04:66:0e:56:87:bb:85:28:64:76:a9:9a:3e:
4d:86:50:7e:f3:06:03:23:35:5d:8d:1a:55:2c:d8:
28:30:56:a1:72:8b:2f:5f:31:7d:0e:2b:d4:09:af:
97:ef:00:49:3b:41:fa:32:33:60:42:40:2e:43:eb:
6e:9e:a7:ed:28:d6:c6:89:73:55:09:ab:9b:f1:a7:
78:f2:dc:34:06:86:ac:d8:e3:c0:35:23:8e:89:49:
3d:46:23:9a:13:b8:8b:60:b3:20:23:76:69:b1:a5:
d0:b9:86:cc:03:1a:0c:34:39:a7:47:bc:df:91:48:
79:f6:49:3d:8c:3a:f7:17:0c:f1:f5:ee:1d:bb:3d:
f5:b4:97:75:e3:50:a8:03:51:de:eb:d5:c0:97:f2:
9d:e6:bc:ad:40:c5:53:13:5e:fe:e8:86:4c:2c:b6:
c8:e8:df:51:54:18:79:ff:52:26:81:48:cc:95:df:
27:75:ff:36:09:93:7a:fc:90:a6:5a:c9:85:04:f7:
f3:1a:89:2a:a3:6d:c4:ae:5f:0f:fb:2c:73:13:8a:
ab:89:55:07:57:90:8d:33:0a:23:12:67:d5:fe:da:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:51:95:77:99:22:73:28:5C:CE:44:F9:CB:74:1C:4E:CE:36:C8:7F
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8e:f7:88:24:c8:21:33:11:5b:16:10:4a:89:e0:c3:2a:cf:
fd:5d:63:fc:27:9f:84:9a:85:d4:8c:90:bc:77:8f:40:94:fc:
64:cf:92:33:a4:36:89:11:32:00:31:e0:e4:e2:16:00:3c:84:
70:be:4b:55:71:82:95:52:57:5d:a5:fe:22:28:18:a3:66:e9:
6b:da:f6:70:a3:f1:3d:24:b7:b8:e0:20:4d:ea:16:8b:9f:b7:
f9:8a:0a:78:80:29:fe:b8:38:39:44:f0:87:5e:59:3f:cd:1d:
77:82:e3:71:ab:c2:fd:e0:14:0b:32:87:47:d2:c6:81:ce:5f:
29:9c:50:e4:01:e9:da:38:aa:71:d3:78:f2:ee:30:bd:8a:86:
f8:57:77:2a:f3:d2:f9:7e:3c:28:3a:0b:f4:a6:31:65:d4:12:
64:72:36:e0:b7:60:14:77:10:d4:b5:3f:22:7d:2b:bf:46:e0:
a1:2b:cb:76:b7:fc:2b:fa:c3:4e:9d:05:3b:c6:df:14:68:3c:
9d:45:43:28:7b:1b:04:b2:d8:b9:59:a9:20:e0:32:bd:2d:21:
cf:a0:c8:b7:17:8b:72:bd:bb:23:7e:ce:75:e9:11:41:e9:11:
70:69:04:ad:2d:cd:8d:92:f6:57:02:6a:e4:91:09:d9:1a:67:
9a:8e:e8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:54:25 2026 by rpki-client