Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
File: 0jh3jxNJtXVBjBnjg9BXGuvuot8.mft (raw, json)
Hash identifier: 5g9mUrIufGfDREu6f3ttyvTvz386EwAEQ9+D74n2iOY=
Subject key identifier: 65:11:12:8C:29:7E:AE:51:3A:02:24:28:ED:A8:67:19:EB:DF:E6:A6
Authority key identifier: D2:38:77:8F:13:49:B5:75:41:8C:19:E3:83:D0:57:1A:EB:EE:A2:DF
Certificate issuer: /CN=d238778f1349b575418c19e383d0571aebeea2df
Certificate serial: 019FACACBA1F2AC54119A2C8B78F54D5AA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
Manifest number: E8
Signing time: Wed 29 Jul 2026 07:00:28 +0000
Manifest this update: Wed 29 Jul 2026 07:00:28 +0000
Manifest next update: Thu 30 Jul 2026 07:00:28 +0000
Files and hashes: 1: 0jh3jxNJtXVBjBnjg9BXGuvuot8.crl (hash: t15SWXTzViK8IzH8ulpdCJy3AT8Mm8WTE5WSy2BYFig=)
2: Ja7890_tG369n2EpikrlxKOH7eo.roa (hash: dUDn7iA585Me0xPD3yCTHJGFysgJ0UVLXEuuoAzLUoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:ba:1f:2a:c5:41:19:a2:c8:b7:8f:54:d5:aa:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d238778f1349b575418c19e383d0571aebeea2df
Validity
Not Before: Jul 29 07:00:28 2026 GMT
Not After : Jul 30 07:00:28 2026 GMT
Subject: CN=6511128c297eae513a022428eda86719ebdfe6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f6:44:ef:fa:e7:62:4d:be:37:66:04:45:65:
8d:e4:4f:14:83:e6:38:a7:2f:ea:1f:47:06:b2:85:
fd:73:22:81:e5:fc:43:97:d0:71:ca:ef:20:7e:9f:
6d:09:e6:29:14:f3:df:0e:1f:ab:bb:9a:9b:64:11:
b8:36:ae:74:25:8f:52:55:f1:86:6a:58:d0:eb:92:
e5:33:90:91:8f:67:16:11:82:dc:ef:9a:d0:ca:71:
99:e9:2c:2f:2a:e8:58:e5:3f:4f:bd:7a:13:b0:ef:
5e:84:1a:ab:43:4d:bb:48:47:18:2c:9f:08:1b:17:
f4:0c:41:3f:35:5a:ac:7d:34:b2:7b:19:2c:07:c8:
cd:30:c1:f6:c6:98:24:7b:ff:bf:69:73:50:a4:36:
da:73:9f:cd:91:34:25:73:9d:1a:eb:de:c4:3c:eb:
50:bb:bc:bb:8c:02:a7:23:d0:b0:6c:5e:ff:ca:66:
8c:79:cb:1c:d1:93:ed:5d:6b:a1:ea:68:64:db:20:
f4:25:7d:30:7d:db:8b:8f:c9:03:f8:a3:f5:78:47:
8d:28:5f:7b:06:48:66:54:2c:e3:cc:2f:0a:f2:66:
6b:26:1d:35:93:32:54:6d:2b:25:a6:ec:aa:bd:01:
34:71:29:6e:c0:d8:87:c3:70:49:c1:8f:9b:97:b6:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:11:12:8C:29:7E:AE:51:3A:02:24:28:ED:A8:67:19:EB:DF:E6:A6
X509v3 Authority Key Identifier:
keyid:D2:38:77:8F:13:49:B5:75:41:8C:19:E3:83:D0:57:1A:EB:EE:A2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:10:20:fd:c5:d9:4b:68:cb:8a:98:bd:0c:6a:18:22:9b:40:
c1:4f:4d:74:dc:2b:cf:54:0a:86:23:f3:c7:cf:7b:b6:83:e8:
51:70:92:c2:b1:17:e0:b2:5e:c3:e8:09:0e:d3:57:30:1f:aa:
f8:34:88:c5:8e:75:bb:06:46:a5:93:11:d7:c4:e4:ff:58:25:
9f:96:21:11:a8:e9:6d:aa:8c:de:b7:be:1f:4c:31:ba:c7:be:
6a:5e:69:a0:e1:82:60:27:7f:3d:72:37:75:da:c5:6e:cf:51:
41:d3:9a:a4:03:fc:ca:f2:fb:df:fe:72:e6:b9:a1:c9:ca:4c:
1f:bd:04:9e:40:4d:1d:6f:c2:18:7e:20:c5:17:84:d5:fa:b9:
e3:8f:97:c0:e1:0d:33:dc:21:0c:4e:ef:3c:6e:e2:17:c5:5b:
a4:3c:33:9e:f1:b8:75:e6:97:04:0d:ec:39:f2:0f:b4:ec:86:
80:c4:db:91:61:83:c7:de:5f:e8:30:37:28:77:9b:d8:5a:67:
52:5f:94:4e:22:90:3b:21:ba:a7:c4:dc:52:37:1f:6d:03:9b:
39:13:5a:12:d6:23:57:04:5f:ac:de:a2:a8:00:df:b9:21:a8:
d5:72:cf:13:95:16:82:be:96:49:e4:0c:12:8b:b2:ca:d2:3d:
ae:0e:02:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:23 2026 by rpki-client