Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
File: jha95kqam7o_-hQ4oZesP5SYn68.mft (raw, json)
Hash identifier: zGU/EFiOK57TjUUPhvx7a2GjUH+wsEewUC5ZbetX0s4=
Subject key identifier: A2:6A:B3:BA:B3:F0:F7:3A:6A:56:3E:6D:5E:E8:41:93:53:B9:82:AA
Authority key identifier: 8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF
Certificate issuer: /CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf
Certificate serial: 019EC149A106852453BBDC645D03B17BB1B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
Manifest number: 0CEF
Signing time: Sat 13 Jun 2026 14:01:28 +0000
Manifest this update: Sat 13 Jun 2026 14:01:28 +0000
Manifest next update: Sun 14 Jun 2026 14:01:28 +0000
Files and hashes: 1: jha95kqam7o_-hQ4oZesP5SYn68.crl (hash: RQXK1Xh7bANaRBffAqcohfRBOxexVPwHzmwjtHkEGkc=)
2: rIbppOfNfFYdHELW2Brc9R0i8ZQ.roa (hash: 6K2aNO9ERJucL5JHeR5DeWEg9tZjVrX7Cr/llqySGJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:a1:06:85:24:53:bb:dc:64:5d:03:b1:7b:b1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf
Validity
Not Before: Jun 13 14:01:28 2026 GMT
Not After : Jun 14 14:01:28 2026 GMT
Subject: CN=a26ab3bab3f0f73a6a563e6d5ee8419353b982aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:86:2f:0c:df:a0:46:c8:7c:0d:b0:2f:39:
be:84:47:a7:f7:83:f4:ec:b0:fe:3c:9a:41:a8:1b:
ad:a0:28:9a:72:57:de:db:8d:42:5b:fd:05:34:70:
79:0c:d1:ff:a3:9c:1f:e2:62:56:19:7a:d9:49:d3:
af:d3:33:6e:2d:75:bd:fa:8e:27:48:f4:d1:27:a6:
43:c3:b8:fe:98:e9:6c:a8:02:ed:78:02:7c:d3:be:
40:10:85:d1:2a:a0:c2:f2:f0:6c:5a:b4:ab:3e:94:
aa:11:13:8f:bb:6c:6f:5b:73:fc:73:0a:7b:a9:d7:
33:a2:fc:db:3e:9e:90:ef:3f:bf:30:f8:85:34:75:
4b:90:ab:9d:19:65:b7:d2:08:f9:e6:9c:1a:68:47:
b9:f1:48:be:5e:89:9e:16:97:07:2f:53:13:b8:ac:
cf:ec:03:bd:a8:f3:5b:1f:57:70:d1:f3:ed:44:bc:
09:92:09:9b:31:fa:07:02:1e:b6:29:27:9e:36:a5:
50:e7:dd:57:3a:f6:bf:3a:45:f0:73:63:ae:fa:c8:
d4:68:70:ba:f3:f4:3d:9b:d7:93:43:42:84:47:00:
4d:ac:47:a4:73:86:3c:74:bd:46:8c:50:ed:a4:bd:
ba:89:66:1f:96:be:45:bb:07:ad:73:00:48:81:09:
14:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6A:B3:BA:B3:F0:F7:3A:6A:56:3E:6D:5E:E8:41:93:53:B9:82:AA
X509v3 Authority Key Identifier:
keyid:8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:65:72:65:17:3f:ea:d6:13:6f:fd:5e:d4:3b:2c:13:c7:7d:
0d:47:2c:e9:0c:f1:85:23:d8:3f:3f:51:04:f9:2e:0b:19:3c:
04:9c:eb:7d:1f:84:27:45:cc:fb:93:23:c4:d1:40:e1:cc:e0:
13:26:67:66:eb:f9:c4:06:69:62:2f:2f:da:2a:7e:46:ab:bd:
d3:ce:2c:7c:3a:f5:84:ea:3c:00:dc:22:56:30:cc:60:7f:84:
e3:c6:8e:53:70:5b:a0:66:8a:b0:7c:6e:67:50:a7:38:ea:a6:
6f:a5:64:00:f7:98:f2:23:22:29:8b:5e:eb:9c:91:d9:dc:da:
5b:09:be:e9:8f:dc:a2:30:67:67:e8:5b:8b:b6:30:c6:8a:5b:
e7:09:00:1b:37:66:be:ad:a6:e5:ff:6b:db:ba:67:5d:c6:bc:
99:fd:a2:bb:21:40:23:54:9c:40:e8:5e:d8:3c:9c:ce:83:c3:
0d:de:c2:ff:06:05:98:95:49:1e:3f:ec:f3:1d:30:d0:7e:fb:
f4:15:d3:ce:1b:1f:86:e1:25:e1:f8:25:5f:73:d7:f0:4e:b5:
28:00:b7:c9:2e:f4:ac:5a:7c:eb:fd:42:0b:5f:cb:93:ac:12:
ea:48:ae:5e:40:41:3a:89:35:03:89:ce:ad:e7:c5:39:35:e6:
21:31:dd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:40:07 2026 by rpki-client