Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: Nr7N8/86k6uj8fsG1nU/yldjGkDz8nVNm1SLSKFRlGM=
Subject key identifier: A5:87:63:25:EA:46:53:E0:97:F7:EE:E4:15:06:8D:B5:B2:F4:02:C9
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 019CA97CCA3AE6B81DB42FC8BF818C7BCA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 095F
Signing time: Sun 01 Mar 2026 13:00:53 +0000
Manifest this update: Sun 01 Mar 2026 13:00:53 +0000
Manifest next update: Mon 02 Mar 2026 13:00:53 +0000
Files and hashes: 1: AYUN6ILq1JnFNEGuiy9hczdbqfk.asa (hash: bnGV0TOXh2rgHledmfvQi6p7Cgl6Yx1IR8kXhvgGxxg=)
2: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: ga2RDryynAH6THEZz3GFMUDWLdaJLHivOo8qtvfOXTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:ca:3a:e6:b8:1d:b4:2f:c8:bf:81:8c:7b:ca:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: Mar 1 13:00:53 2026 GMT
Not After : Mar 2 13:00:53 2026 GMT
Subject: CN=a5876325ea4653e097f7eee415068db5b2f402c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:11:9f:6d:ff:f8:ff:fb:73:b3:07:3a:95:c9:
85:0c:dc:76:d5:cc:38:10:2e:74:5e:81:c5:9f:87:
c8:dd:1b:7a:22:88:18:5a:a6:73:51:e1:d4:c6:37:
af:85:ad:03:18:b8:c7:d5:0d:af:17:85:97:9f:c5:
c3:78:62:fe:41:7f:74:80:95:84:02:e9:9d:23:c9:
2e:92:61:0e:df:27:9b:15:51:39:8e:16:f1:54:ad:
88:0a:85:62:98:7d:d0:15:08:a7:80:d4:d2:cd:aa:
93:47:a5:29:82:d2:10:d1:e1:c5:bf:a4:a9:21:69:
f6:1e:bc:b5:e4:be:31:ac:df:4f:8a:62:c7:03:cc:
27:4e:92:39:02:99:77:95:41:7e:b0:68:91:e0:65:
5f:0a:e3:b3:9d:42:47:f4:a0:c0:cb:d9:75:31:ab:
93:89:0a:54:4e:97:5b:bc:76:ef:f9:4d:e1:36:4e:
99:dd:d1:10:f8:c1:84:4f:8c:de:4d:0f:9f:02:a5:
29:6c:cc:90:2d:47:89:7e:0d:2a:6f:f2:42:cf:84:
fe:3c:9a:6e:2e:0d:cd:35:97:77:e4:c0:d2:6d:cb:
b3:36:99:21:4a:b5:87:aa:9e:88:a9:78:7c:05:c4:
9b:96:bb:97:6f:9a:92:c3:11:cc:34:8f:78:7b:e0:
75:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:87:63:25:EA:46:53:E0:97:F7:EE:E4:15:06:8D:B5:B2:F4:02:C9
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cd:ed:8c:91:2f:62:55:81:97:9b:95:3e:01:32:c8:07:25:
f3:7b:39:62:fb:4d:7d:ca:43:86:92:ac:b2:81:bf:70:0e:49:
44:2d:7e:1e:bd:ad:a0:38:7a:a9:c3:98:2b:b8:a4:ce:b0:af:
70:7a:c1:25:2d:84:07:51:ef:c1:71:f3:39:a4:bb:e2:93:88:
ae:c4:1c:81:97:a3:3e:6c:35:78:26:54:8f:8f:ac:3a:c8:85:
5f:30:2c:c9:1c:0a:bd:46:a5:e1:3d:e8:b3:b8:cc:0d:57:1b:
ca:17:7c:57:d5:f0:f6:82:56:30:08:d1:90:30:0d:95:6a:60:
d9:30:eb:af:f6:6b:6f:66:44:a2:d2:06:4e:03:22:35:90:27:
ed:0e:30:49:56:21:18:bd:f5:15:28:12:62:44:d4:fc:b0:8d:
5b:22:44:d1:4d:a1:17:89:e7:fc:e1:80:21:5b:6c:90:4e:65:
42:d7:57:ff:48:7e:cc:6d:16:22:a0:f1:14:80:15:e2:fd:8e:
45:6a:97:ff:9e:eb:90:59:f5:02:c5:e6:0f:4a:45:71:bf:23:
27:fe:5c:71:35:7f:c3:cd:ec:a6:c0:35:91:07:bf:b2:d4:19:
a8:95:49:a1:ac:98:b5:b6:59:2b:15:e3:3e:ca:a1:67:56:c7:
4d:34:74:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:24:45 2026 by rpki-client