Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
File: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft (raw, json)
Hash identifier: tTJGKgPeOwpCtZ0OgJv9bvXdB2zPUtYxlqPX3xgOT3M=
Subject key identifier: 11:2B:9F:74:6D:26:6E:61:17:B6:9F:D7:BC:4F:77:46:DF:B7:1F:5F
Authority key identifier: 26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
Certificate issuer: /CN=261c8e2b00a3d5957d4112daf35b66e429375505
Certificate serial: 019CAB3472C9A1729050E7564608123D71E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
Manifest number: 05C7
Signing time: Sun 01 Mar 2026 21:01:07 +0000
Manifest this update: Sun 01 Mar 2026 21:01:07 +0000
Manifest next update: Mon 02 Mar 2026 21:01:07 +0000
Files and hashes: 1: CWNF4a7mLYbKSGXj37QsRs18EPc.roa (hash: YsCfFIceaBejyXvZZ5Ucl+3/y81JerhJsxljYX0B06A=)
2: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl (hash: XLREgf2urb9PKXbAbI/lgMpl9Dge21YYSVH1U/h/Xv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:72:c9:a1:72:90:50:e7:56:46:08:12:3d:71:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261c8e2b00a3d5957d4112daf35b66e429375505
Validity
Not Before: Mar 1 21:01:07 2026 GMT
Not After : Mar 2 21:01:07 2026 GMT
Subject: CN=112b9f746d266e6117b69fd7bc4f7746dfb71f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:72:0a:27:c3:6a:d7:91:e7:56:d5:69:11:55:
37:0d:52:aa:c4:cb:83:60:e3:42:73:c2:77:7f:fe:
99:5e:f5:32:fc:82:bf:f2:2b:fa:fb:20:3e:9f:13:
e4:8a:48:c4:76:c4:37:da:73:c0:1b:3d:d8:22:3a:
96:ec:43:6b:bc:99:51:40:9c:c2:6a:50:b6:7d:2d:
9f:1d:e1:4c:4b:9b:56:df:2c:28:32:d1:98:e7:6c:
45:88:4c:50:b6:c3:cb:e7:52:5e:9c:f6:f9:de:a7:
cf:65:3a:c9:7b:28:02:7b:98:8c:9b:95:5d:f1:0e:
ec:9a:21:c2:b9:a1:2f:c5:04:8a:96:20:b5:52:46:
3b:6c:7a:28:a0:79:18:0b:81:ee:02:98:f3:af:2e:
d4:6b:03:fd:e6:ed:99:0c:22:ce:e5:fc:2a:76:01:
63:f6:1b:03:0b:fe:2d:9c:56:b3:6c:bf:32:4e:4d:
a2:87:89:46:38:cf:fc:f0:7f:10:f7:e5:6d:83:3e:
38:a8:38:b2:a0:ac:74:e6:a9:c7:6f:cb:56:ed:71:
c9:ec:bc:13:5f:85:26:d2:c8:e3:41:7a:14:48:c5:
31:f4:8e:74:97:e4:94:c1:ab:90:8d:a8:97:4f:4d:
ca:18:e3:f8:70:c9:24:b4:cd:89:f5:67:ad:b7:10:
99:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2B:9F:74:6D:26:6E:61:17:B6:9F:D7:BC:4F:77:46:DF:B7:1F:5F
X509v3 Authority Key Identifier:
keyid:26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c7:70:d5:a7:84:62:62:6d:c1:da:d5:d8:9b:22:32:71:81:
79:87:d1:31:bf:73:1a:3a:ac:3b:79:07:f3:de:d2:93:23:2e:
fc:27:7a:56:e5:c3:69:9a:8b:26:9b:c8:8b:89:f0:5a:57:d1:
dd:75:49:29:6f:eb:a2:a3:ff:c6:d8:da:17:77:76:c8:6c:86:
9d:fd:2f:6e:18:b8:77:2c:74:45:a6:77:39:43:09:1e:af:82:
94:6e:0d:0a:65:6d:80:3b:25:3f:07:4f:c4:b8:41:d7:b0:eb:
de:61:6d:93:b4:2a:6e:14:4f:3c:90:c0:75:34:f4:d3:b2:45:
7b:a0:ad:23:0c:2d:5b:af:bd:88:65:f9:5a:f8:c1:70:e8:89:
d8:a4:70:af:6a:d6:0d:25:08:fd:35:8e:43:da:0d:d6:7b:84:
a0:f8:19:62:bf:d6:d0:f2:e4:0e:31:18:b3:e8:f0:53:b4:39:
71:34:62:fa:55:7b:ed:1e:1a:bf:84:3b:c1:68:d0:83:5f:14:
ec:99:fb:9e:a5:d7:ee:78:ae:83:65:b7:b4:87:7e:40:ea:a3:
c5:20:f2:a2:ca:eb:3b:ae:ef:0c:22:d7:15:c5:e7:7a:39:a6:
3a:e1:9b:c6:b1:96:17:17:a4:ed:e0:5f:ec:c5:11:d4:32:45:
e0:e5:39:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:04 2026 by rpki-client