Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
File: jhF58KNc8HwWKWcmYoZsoAH3W9M.mft (raw, json)
Hash identifier: Kiv/FKbYmy9e/q08g2MwQr6LdzBAnqUdZyOBvhxzOIs=
Subject key identifier: F7:2C:F1:C9:B1:A0:FB:7B:B0:C5:E2:CC:33:0A:A1:9A:D3:3A:68:0A
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial: 019CABD8FC63F6A347CCB166EBB28F73D68F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
Manifest number: 095D
Signing time: Mon 02 Mar 2026 00:00:50 +0000
Manifest this update: Mon 02 Mar 2026 00:00:50 +0000
Manifest next update: Tue 03 Mar 2026 00:00:50 +0000
Files and hashes: 1: THMUwp1z_8yM4YT3tCOSI8jHXpc.roa (hash: Lr+q9lzNVfojfVbAAoJyDVcA+Kbg/x3ZRCV9JR35aYs=)
2: g1S-kxOnMbzdndrLbUeaCJYPOxw.roa (hash: jkv9kYNLwqMU1Z9MYM3vG7XQkKfgh1lByWmby4H5OPY=)
3: jhF58KNc8HwWKWcmYoZsoAH3W9M.crl (hash: Ui44WpKXH200pY1D5Le3u2SKqtmNB8WZcJXGdsHjrDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:fc:63:f6:a3:47:cc:b1:66:eb:b2:8f:73:d6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Validity
Not Before: Mar 2 00:00:50 2026 GMT
Not After : Mar 3 00:00:50 2026 GMT
Subject: CN=f72cf1c9b1a0fb7bb0c5e2cc330aa19ad33a680a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:66:d4:bb:b8:65:29:0d:d3:58:a1:6b:76:
0f:40:d1:02:19:da:91:8f:83:d5:c4:c9:1c:24:1e:
4e:6f:cf:ec:09:7e:ca:44:42:81:57:cd:59:23:a8:
68:bb:55:0e:e0:ae:c5:c1:62:ff:04:53:7f:f5:8c:
28:3f:f8:88:a0:0f:59:ff:bc:92:5b:69:41:20:25:
46:f4:13:19:54:c8:c2:33:fb:1b:ec:05:e6:82:b4:
31:42:2f:e6:fe:43:d0:bb:9a:45:e0:58:13:a1:90:
a7:34:a8:00:29:1e:3f:02:98:e2:ef:c6:5e:fb:5c:
48:ea:a6:93:65:18:32:0a:d0:4d:11:c5:a5:24:9b:
80:7d:1f:bc:5e:6c:75:43:1c:2b:6d:08:0a:12:d7:
23:2e:66:d8:f7:2e:82:8b:13:ad:46:fd:85:2a:84:
d9:71:cf:db:94:ef:dd:01:24:ec:0d:40:3a:04:51:
8b:24:99:e9:f8:a0:19:33:90:ba:eb:4c:69:0d:56:
db:1d:a2:39:8b:fd:e4:ae:06:7f:e7:e6:fb:21:12:
9c:b0:b8:ca:c5:2a:2c:13:03:8e:8a:14:04:c7:86:
3a:89:d3:83:34:bd:9e:03:f4:fb:ac:ba:89:4a:30:
d1:71:03:f1:d4:ff:b3:46:e2:da:7b:bf:d3:e8:3c:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2C:F1:C9:B1:A0:FB:7B:B0:C5:E2:CC:33:0A:A1:9A:D3:3A:68:0A
X509v3 Authority Key Identifier:
keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2d:ed:2f:b9:66:38:9f:28:18:f8:33:d8:13:b8:f7:77:04:
4b:43:43:c3:ec:a8:ff:ba:18:b0:e5:b9:97:da:b4:69:36:bf:
76:f3:4a:31:a3:6e:29:5e:43:56:77:d8:8d:f6:0d:eb:f5:7d:
27:f6:68:92:d1:13:bf:95:5a:cc:42:00:a9:b6:fa:98:84:00:
cc:83:6c:a6:bf:7b:3e:ce:7c:96:e6:51:19:bc:c3:2b:b9:da:
5b:09:7b:1f:47:ed:65:32:2c:bd:10:a8:5b:02:8c:a9:b4:f5:
44:4d:b3:ae:5b:77:05:b2:ed:e2:5e:87:c2:0e:50:83:50:9e:
1f:d1:d6:97:da:8f:88:48:bf:0d:b8:5b:62:7b:c1:74:44:44:
58:42:f0:54:25:79:1c:37:59:a0:ae:c0:39:bb:a6:7d:1f:b7:
e0:db:cc:a7:ac:af:2a:f6:cf:b4:50:51:d3:89:f4:3e:87:a9:
da:b7:6f:a8:71:5f:89:c7:8b:59:e0:4d:61:7c:9e:55:6a:c8:
4e:e7:8d:52:43:1e:f8:38:fe:48:e9:32:98:ad:86:6e:c5:4b:
b3:fb:ba:ac:ce:25:a0:c8:18:03:2a:3d:eb:26:85:11:79:d2:
0e:f5:44:93:37:6a:7f:4a:37:d7:c4:b8:a3:54:1b:76:9e:4a:
27:a0:96:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:32 2026 by rpki-client