Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: 5CPlPyQJuHyXLc2gsMSASSv9UYRmTYdEeHxWf/06itU=
Subject key identifier: 05:9B:E8:A8:94:F5:55:54:6B:52:52:BB:B6:29:AF:3A:2D:F5:A6:3A
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 019EC1EDE3BCB793FF238A9BECFB1243F1E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 17:00:53 +0000
Manifest this update: Sat 13 Jun 2026 17:00:53 +0000
Manifest next update: Sun 14 Jun 2026 17:00:53 +0000
Files and hashes: 1: 5FzvwUIf_jEUll3PKrQMP5_suiU.asa (hash: MNHOEt9JisPhIb3wm1XE5W+hLf6wZBICFb3kH8XoROg=)
2: 8bD-7QTegEg52E0iZppyCdDUnzk.roa (hash: SIwdtnsAl+O53na0hHcKGea3jeX1u8/+0tuoQrFoHIc=)
3: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: 3rhAUNTVf/EFMZUKaXVdk/4tU7SCdSI5JylkTN9rx2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:e3:bc:b7:93:ff:23:8a:9b:ec:fb:12:43:f1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Jun 13 17:00:53 2026 GMT
Not After : Jun 14 17:00:53 2026 GMT
Subject: CN=059be8a894f555546b5252bbb629af3a2df5a63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:e9:ae:de:fd:e8:27:e1:d0:61:39:e5:80:
19:32:18:92:b1:fe:81:cf:42:ba:42:e9:b6:70:ad:
c0:c1:cb:98:5a:1e:d9:01:d5:22:67:f4:2a:db:ee:
b4:ac:1d:14:4a:0a:d0:15:75:47:9a:f9:05:4e:ca:
91:4c:3c:26:03:e4:72:62:0b:da:94:64:0f:71:b3:
fa:72:81:67:73:a6:92:51:4d:d9:6b:16:e4:90:6d:
ce:17:a0:dc:34:a8:b1:10:b2:b0:ca:d9:4d:c6:72:
0f:dc:4e:65:98:04:fe:22:8d:62:48:47:30:e3:15:
68:6c:62:4f:65:18:99:e3:f0:82:66:be:48:e6:1f:
7c:6f:1b:91:7f:88:af:e1:04:46:20:37:69:52:e6:
93:45:1a:ad:4b:05:f4:47:e3:27:c2:69:61:aa:ad:
7b:a2:4d:44:79:5f:a2:8f:59:fc:1e:3c:6e:f2:b4:
4d:98:8f:e3:6e:7e:d8:bd:9a:bb:65:28:0a:d3:a7:
b3:06:c4:dd:a5:0a:1d:10:b7:bb:d6:0c:bd:0f:4c:
7a:7e:d0:7f:65:23:f7:56:37:39:4e:83:36:4f:eb:
6d:0d:18:25:f6:96:6f:0f:ab:fa:99:75:b9:f3:dd:
46:80:4e:b7:a4:d9:15:0b:63:22:fe:51:17:84:92:
7a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9B:E8:A8:94:F5:55:54:6B:52:52:BB:B6:29:AF:3A:2D:F5:A6:3A
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:41:d2:52:2e:09:12:b3:e6:0a:77:ce:8f:7c:5d:b0:7c:cc:
45:5c:a1:b1:5c:e4:ab:1b:f2:1a:6b:b8:68:55:52:a4:a0:7d:
a7:5e:b1:f5:1a:66:2b:a8:90:72:1d:19:1d:c6:a9:71:6d:da:
a6:0d:31:3e:a4:6c:57:4b:d6:be:50:5e:fa:5e:6d:20:94:9a:
5d:17:84:3f:82:e1:67:a8:3d:77:db:1e:63:01:d6:fe:45:74:
f0:72:ff:4b:e3:ee:77:9c:0f:af:cb:38:3b:e2:d7:d5:97:e0:
6f:01:0e:5e:61:e2:25:39:19:26:a6:58:74:63:98:14:ff:5b:
f4:f3:47:74:97:f4:ab:d6:12:58:58:b2:1b:18:e8:f0:b9:c2:
f3:63:d1:0e:21:91:23:da:4c:95:6d:7e:7c:da:15:ed:c9:3d:
61:c3:4d:2e:72:84:57:4f:84:74:50:7a:c2:87:a2:1b:8c:6c:
f4:b5:42:bd:58:1f:4f:d7:15:a3:18:40:ce:f5:68:44:7c:0b:
87:52:a9:73:e8:39:a7:7d:e4:2a:85:b0:00:b8:21:8f:cc:71:
37:b5:c3:2a:11:2e:d5:da:f8:eb:cb:ad:85:4a:87:da:da:3f:
60:99:41:2c:77:e8:c2:57:33:01:80:f8:c0:4e:ac:ea:bf:41:
90:bd:e1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:24:38 2026 by rpki-client