Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: Z5KbCAX8gc6bcKfesUEvx6dR26M+D7ocdlE3EefeBAo=
Subject key identifier: 0B:8B:D6:2B:91:5A:70:0B:5D:0A:7F:53:F7:84:25:3A:39:FB:A1:F2
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 019DA48B64A77D4A7950711105E8F9DE3F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 09E1
Signing time: Sun 19 Apr 2026 07:01:31 +0000
Manifest this update: Sun 19 Apr 2026 07:01:31 +0000
Manifest next update: Mon 20 Apr 2026 07:01:31 +0000
Files and hashes: 1: AYUN6ILq1JnFNEGuiy9hczdbqfk.asa (hash: bnGV0TOXh2rgHledmfvQi6p7Cgl6Yx1IR8kXhvgGxxg=)
2: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: BOZ0Bl7GUPWfUP4oycYcpV5a4RWgdN0EEMU8pF+9rjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:64:a7:7d:4a:79:50:71:11:05:e8:f9:de:3f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: Apr 19 07:01:31 2026 GMT
Not After : Apr 20 07:01:31 2026 GMT
Subject: CN=0b8bd62b915a700b5d0a7f53f784253a39fba1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fa:64:2a:38:8f:d8:d3:af:78:39:e7:60:78:
f8:eb:fb:fc:c6:55:69:75:02:e6:3e:5d:70:18:e4:
e9:d5:2f:1f:b0:dd:41:16:1c:68:ab:43:4b:de:42:
45:f6:ed:38:88:e1:b6:6f:43:78:c5:b6:28:7d:4d:
e1:68:26:a5:e7:5e:c8:c8:bb:68:e9:07:c3:ed:2a:
47:89:e2:35:83:31:1c:a7:4d:5e:a0:1a:20:78:b4:
59:31:39:e7:ba:57:0b:cd:e2:a7:0b:c6:36:64:72:
ce:45:c4:ef:b6:3a:b2:c6:c0:c1:15:7c:65:27:7e:
ba:ac:05:52:33:b7:4c:c9:d7:29:9f:2b:af:1a:de:
29:c8:c9:62:7a:9d:d9:ab:6f:ec:59:9e:54:a7:b3:
c0:34:15:41:10:73:c2:ae:f8:a7:28:71:8f:56:1a:
5e:0f:b0:d7:25:7d:a9:52:0b:87:d6:f9:b9:5e:25:
69:98:05:03:c5:43:b2:00:fe:af:e1:e9:74:69:22:
15:26:74:3a:eb:a9:bf:cd:54:9c:86:1e:0c:5e:a9:
dd:e3:ca:e0:b3:72:8d:49:37:7d:f2:aa:f7:d2:90:
b4:8e:84:64:ea:ef:15:ed:60:fd:c8:f7:ae:9a:98:
22:d1:9c:37:59:9f:46:b3:b2:eb:85:51:13:5d:cf:
ae:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8B:D6:2B:91:5A:70:0B:5D:0A:7F:53:F7:84:25:3A:39:FB:A1:F2
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:32:2d:57:65:a8:1c:61:b6:21:51:cc:00:34:48:66:79:4e:
2e:31:44:74:44:26:82:32:86:0a:47:a1:30:af:f3:73:ce:9d:
fe:06:f5:79:c5:c5:4f:68:7e:48:b9:c1:75:d7:39:49:8a:8f:
af:ff:0e:51:75:72:c6:3d:07:1f:de:52:1d:21:e9:40:31:bf:
74:3c:b4:9e:31:a4:81:63:a2:3f:5d:af:30:cb:24:ed:73:d7:
39:b3:10:86:93:88:7e:16:73:28:ea:a1:3e:0a:a9:ce:e6:4e:
bc:c0:65:4c:cf:c4:13:c1:84:9b:fa:1c:57:6e:d7:de:c2:87:
1a:3c:c7:a9:b1:6c:c9:95:c0:16:bc:b2:2b:7e:33:8a:0d:12:
70:e5:53:77:1a:b3:a9:76:e7:14:a9:71:56:ef:ec:7f:57:60:
0d:74:48:4d:f4:db:63:61:62:d1:da:48:10:18:99:e6:1f:f8:
a7:88:60:e9:a3:a1:9f:46:9e:0b:bd:04:23:72:3d:cb:74:01:
cb:ae:f2:b6:aa:44:18:f4:6e:60:4d:57:da:04:07:44:25:13:
03:c6:e5:ce:31:f3:cd:8e:d9:93:11:99:9e:c8:83:f9:cc:74:
32:6a:93:75:79:c0:16:09:a4:85:13:5b:2b:31:b5:7d:54:75:
3f:b1:fe:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ki2SnfUp5UHERBej53j+PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjN2IxODM0NWEzOTM0MWE3MjYyNzc1MTMwOGMxY2UwMmY0
NmEwYmIwHhcNMjYwNDE5MDcwMTMxWhcNMjYwNDIwMDcwMTMxWjAzMTEwLwYDVQQD
EygwYjhiZDYyYjkxNWE3MDBiNWQwYTdmNTNmNzg0MjUzYTM5ZmJhMWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fpkKjiP2NOveDnnYHj46/v8xlVp
dQLmPl1wGOTp1S8fsN1BFhxoq0NL3kJF9u04iOG2b0N4xbYofU3haCal517IyLto
6QfD7SpHieI1gzEcp01eoBogeLRZMTnnulcLzeKnC8Y2ZHLORcTvtjqyxsDBFXxl
J366rAVSM7dMydcpnyuvGt4pyMliep3Zq2/sWZ5Up7PANBVBEHPCrvinKHGPVhpe
D7DXJX2pUguH1vm5XiVpmAUDxUOyAP6v4el0aSIVJnQ666m/zVSchh4MXqnd48rg
s3KNSTd98qr30pC0joRk6u8V7WD9yPeumpgi0Zw3WZ9Gs7LrhVETXc+uUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuL1iuRWnALXQp/U/eEJTo5+6HyMB8GA1UdIwQY
MBaAFIx7GDRaOTQacmJ3UTCMHOAvRqC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mZjRmMTItNTI5MC00MzJkLWIxZGIt
NTNjYTBkNjVkZDVlLzEvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9mZjRmMTItNTI5MC00MzJkLWIxZGItNTNjYTBkNjVkZDVl
LzEvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzItV2Wo
HGG2IVHMADRIZnlOLjFEdEQmgjKGCkehMK/zc86d/gb1ecXFT2h+SLnBddc5SYqP
r/8OUXVyxj0HH95SHSHpQDG/dDy0njGkgWOiP12vMMsk7XPXObMQhpOIfhZzKOqh
PgqpzuZOvMBlTM/EE8GEm/ocV27X3sKHGjzHqbFsyZXAFryyK34zig0ScOVTdxqz
qXbnFKlxVu/sf1dgDXRITfTbY2Fi0dpIEBiZ5h/4p4hg6aOhn0aeC70EI3I9y3QB
y67ytqpEGPRuYE1X2gQHRCUTA8blzjHzzY7ZkxGZnsiD+cx0MmqTdXnAFgmkhRNb
KzG1fVR1P7H+wQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:53 2026 by rpki-client