Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
File: jha95kqam7o_-hQ4oZesP5SYn68.mft (raw, json)
Hash identifier: dmZm1AfIn7mSlRSNloQlW7lO7rbTpRhA9WDZFXQDf7k=
Subject key identifier: 62:05:D4:02:F3:02:3F:2D:4C:B7:AD:B1:6A:1B:68:5F:9A:C6:DC:20
Authority key identifier: 8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF
Certificate issuer: /CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf
Certificate serial: 01A0F343F2C5427D897C8C8CB39BBAAF98C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
Manifest number: 0E12
Signing time: Wed 30 Sep 2026 17:01:51 +0000
Manifest this update: Wed 30 Sep 2026 17:01:51 +0000
Manifest next update: Thu 01 Oct 2026 17:01:51 +0000
Files and hashes: 1: jha95kqam7o_-hQ4oZesP5SYn68.crl (hash: p9ySztJYkKYFREsrt07HHISJU1QB9vE4s/RFg5txN04=)
2: rIbppOfNfFYdHELW2Brc9R0i8ZQ.roa (hash: 6K2aNO9ERJucL5JHeR5DeWEg9tZjVrX7Cr/llqySGJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:43:f2:c5:42:7d:89:7c:8c:8c:b3:9b:ba:af:98:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf
Validity
Not Before: Sep 30 17:01:51 2026 GMT
Not After : Oct 1 17:01:51 2026 GMT
Subject: CN=6205d402f3023f2d4cb7adb16a1b685f9ac6dc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:9e:f6:37:39:cc:d5:4f:3e:a9:db:49:1e:
70:69:50:63:eb:8d:e5:1a:99:11:16:3d:46:bb:40:
af:9d:6a:a6:d0:af:51:bc:7b:e4:66:9a:ce:3a:82:
09:43:94:fa:64:7f:85:a4:af:23:f9:8b:ad:53:5a:
97:7a:89:ab:c7:a3:9e:3a:1f:c4:9b:c2:58:36:da:
63:75:8a:f3:f2:10:46:3a:54:8c:b8:c0:80:34:f0:
e7:bd:61:06:ce:8e:ba:5c:a4:9f:c3:e5:2e:20:2c:
e1:ca:a6:bd:8c:b2:d4:e9:80:c6:67:21:3b:e3:bb:
52:69:f1:58:fc:88:06:f3:8a:4b:eb:ac:79:18:13:
40:4e:c2:e4:41:58:06:3e:c7:9a:17:35:40:a6:17:
18:d2:e0:b1:87:12:12:91:bc:03:2c:65:eb:57:5a:
7e:a0:36:dd:e4:22:db:19:8e:79:18:b7:91:06:3f:
e7:80:d6:1b:ac:38:98:be:a6:eb:56:97:86:3e:46:
e6:e4:74:23:68:04:ff:06:ba:9a:ef:8c:db:24:2c:
9f:64:65:64:00:c3:e2:81:a0:5a:9e:9e:8f:39:8b:
b8:8b:2a:71:79:e4:0c:75:1e:43:26:58:8e:9e:0f:
a5:7e:fb:3c:59:10:da:f8:9b:0e:09:3d:cd:a6:e4:
f5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:05:D4:02:F3:02:3F:2D:4C:B7:AD:B1:6A:1B:68:5F:9A:C6:DC:20
X509v3 Authority Key Identifier:
keyid:8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c1:6b:64:d8:58:4c:f8:f6:a1:cf:cb:3e:56:0e:bd:9d:24:
29:46:46:61:99:2b:0f:ee:1a:ed:c2:7e:fa:e2:3c:93:e7:62:
fc:5e:11:34:80:ab:03:37:0b:2a:32:33:da:74:a6:9f:87:bd:
68:03:27:8c:2f:a8:5a:e6:37:d1:92:f0:78:5a:03:24:0f:67:
d5:05:a1:44:77:da:f7:a5:c8:5c:15:65:db:de:c6:6a:7d:73:
8f:69:b2:5e:88:b5:48:34:15:3d:d5:73:d9:a4:95:16:69:96:
d2:cb:ba:6c:c1:c1:57:dc:1e:a6:63:f9:fa:49:f8:40:e6:dc:
48:c4:a6:46:12:44:ac:aa:86:99:d3:d2:26:a0:f0:3f:0c:4a:
a4:cd:6d:76:f3:c1:ba:8d:d0:03:7b:45:4b:2d:11:d2:6b:53:
10:3b:9c:b4:e0:cb:eb:b6:bc:c6:29:5b:7f:47:b0:4a:04:80:
31:4c:29:ff:8b:7c:df:ce:e4:ef:b9:dc:cd:b6:c6:98:03:97:
d2:b4:0b:f8:ba:25:05:1c:03:f3:ff:af:0d:6b:a9:08:a0:46:
53:37:e3:06:f4:36:6b:3f:42:79:ca:1d:12:ba:17:f4:0f:4b:
7f:fd:dc:1a:df:fb:e4:07:85:e6:e2:d3:1b:7d:43:9f:e6:a0:
7b:fc:8b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:51:54 2026 by rpki-client