Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
File: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft (raw, json)
Hash identifier: g8dc70DD57yj/n0E9Ve6Flmdp0YL4r9PbZLEXBqVHRQ=
Subject key identifier: AF:90:38:B5:5A:0A:D3:8C:FC:33:22:34:43:99:A4:6F:46:00:25:2B
Authority key identifier: 24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
Certificate issuer: /CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Certificate serial: 01A121D3A46687CEDB13288FBF7321545AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
Manifest number: 0895
Signing time: Fri 09 Oct 2026 18:01:20 +0000
Manifest this update: Fri 09 Oct 2026 18:01:20 +0000
Manifest next update: Sat 10 Oct 2026 18:01:20 +0000
Files and hashes: 1: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl (hash: MFZWfYsIPguAaWWWMqJaQfVIuVf770sPIomoz4laB7w=)
2: of5fvbBOl_2ZOya6SQ0xsXlOVng.roa (hash: FlPfu4dwMoPwrHiBDoZEfb7scYNLSD/+Wl4U6dL0V+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:d3:a4:66:87:ce:db:13:28:8f:bf:73:21:54:5a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Validity
Not Before: Oct 9 18:01:20 2026 GMT
Not After : Oct 10 18:01:20 2026 GMT
Subject: CN=af9038b55a0ad38cfc3322344399a46f4600252b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fa:25:02:27:ff:00:4e:ad:fe:b0:0a:01:b9:
11:f1:07:f8:0c:e5:a8:b3:53:be:48:19:4b:0a:f2:
c2:f6:01:42:04:57:8c:6f:bb:06:e5:e8:52:2a:9c:
23:5d:85:4b:34:32:dd:f2:40:c2:9c:21:eb:11:46:
00:27:97:cd:bf:94:ee:47:41:63:c6:13:f7:5b:61:
1b:e0:10:d8:41:f3:2d:49:dd:5a:8a:f5:42:70:46:
20:8d:46:4f:22:0d:7c:4d:ae:69:64:c3:85:e5:ad:
07:04:5f:2e:85:c0:72:58:23:d9:52:60:ea:ab:af:
1b:10:99:c7:7d:15:d0:f2:a2:09:43:81:24:7b:da:
92:55:67:15:5e:00:18:c5:0f:3c:cb:11:d0:c8:91:
04:d2:08:93:8a:25:6a:fd:86:1e:25:90:a6:99:29:
69:9b:dd:77:c4:f3:9c:ec:51:a1:9c:e6:e0:da:85:
d4:e8:0c:ed:c9:12:e6:0f:f8:0b:4b:6a:4a:2d:b7:
60:cb:d0:7d:bd:74:7a:af:6f:e6:d9:3e:ec:95:07:
3d:2e:9d:57:62:ef:69:5f:74:e7:ee:93:c3:19:59:
43:20:6d:19:95:9a:1f:c6:75:06:a2:9d:34:c2:d9:
0d:0f:7f:46:49:01:ec:f4:78:b3:28:64:eb:09:10:
b0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:90:38:B5:5A:0A:D3:8C:FC:33:22:34:43:99:A4:6F:46:00:25:2B
X509v3 Authority Key Identifier:
keyid:24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:94:3f:1b:18:ad:b3:66:19:ec:4f:95:6d:36:d0:97:ca:14:
6e:e4:72:86:70:b2:71:26:e6:ce:91:03:a1:a9:75:0d:97:6f:
fa:2d:20:84:43:a4:cb:73:b4:e3:e6:89:7c:5c:f7:b9:cf:3c:
00:98:0d:f5:ed:f5:96:ea:cc:5d:91:5a:58:70:26:e3:9f:7e:
6d:24:e9:f9:40:49:91:fa:84:7f:02:40:2c:ec:46:b2:f0:ac:
8d:9f:06:e0:98:2f:8c:c9:bb:b3:04:66:cc:3d:58:d2:9c:ce:
00:2e:40:4a:f5:f8:5a:3b:99:ba:0a:a9:78:5a:43:d3:6c:61:
f8:c0:9b:3a:2a:a8:e6:fc:c3:d0:6a:57:08:58:d8:8e:fb:b5:
fd:a1:7d:d5:24:32:60:46:39:72:4a:38:39:3c:84:42:fc:ea:
f0:55:8a:e7:9f:c2:cc:00:33:98:46:b0:6e:a7:0b:15:3a:0d:
26:74:51:57:7d:a9:1c:a4:70:79:2b:5b:75:74:bd:a5:90:d5:
48:a9:0e:09:44:6e:ae:80:69:58:b1:a0:ec:46:57:23:00:3a:
74:f8:c8:03:9d:b4:d8:27:2e:7e:6d:15:72:59:22:12:d3:c9:
6a:c9:3f:54:e5:79:e7:06:03:1f:9f:e4:71:d5:52:06:2e:a6:
a5:e0:7a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:40:05 2026 by rpki-client