
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
File: jhF58KNc8HwWKWcmYoZsoAH3W9M.mft (raw, json)
Hash identifier: kleDKsdIL2LeaS60BQY3THVoHtgQuVtnuH08U0DopNA=
Subject key identifier: B0:F4:B4:C9:60:A2:74:DF:2A:65:A0:C9:BC:32:13:B1:09:79:D7:9D
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial: 01A0BEB06ED926D425EE79D751C66DBE3E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
Manifest number: 0B79
Signing time: Sun 20 Sep 2026 12:00:28 +0000
Manifest this update: Sun 20 Sep 2026 12:00:28 +0000
Manifest next update: Mon 21 Sep 2026 12:00:28 +0000
Files and hashes: 1: THMUwp1z_8yM4YT3tCOSI8jHXpc.roa (hash: Lr+q9lzNVfojfVbAAoJyDVcA+Kbg/x3ZRCV9JR35aYs=)
2: g1S-kxOnMbzdndrLbUeaCJYPOxw.roa (hash: jkv9kYNLwqMU1Z9MYM3vG7XQkKfgh1lByWmby4H5OPY=)
3: jhF58KNc8HwWKWcmYoZsoAH3W9M.crl (hash: zTTzgP7m7pVCThVcUNH7IT+c9U7BTUwCCj06FK6P2KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:6e:d9:26:d4:25:ee:79:d7:51:c6:6d:be:3e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Validity
Not Before: Sep 20 12:00:28 2026 GMT
Not After : Sep 21 12:00:28 2026 GMT
Subject: CN=b0f4b4c960a274df2a65a0c9bc3213b10979d79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:3a:81:9e:cb:28:d9:13:db:ec:2d:02:b1:
ef:08:f2:83:4b:61:01:ab:27:5b:9d:34:d2:6f:04:
d9:4d:71:4e:c4:83:02:1e:17:e3:59:aa:88:d0:0c:
a1:64:78:4e:59:a1:aa:95:77:fc:c1:76:f8:b9:d8:
f0:17:7d:2e:1e:19:3d:df:3e:ce:66:0d:27:60:fc:
27:40:94:10:99:47:b1:d3:cd:13:55:73:b3:4b:13:
87:9e:c1:e3:09:ad:fe:b0:f8:50:b5:8e:e1:d0:f6:
8c:b0:fa:65:ca:e6:72:87:d6:0e:63:07:29:d1:44:
b6:2d:90:52:bc:5f:75:c7:2c:59:69:12:1b:c6:45:
3e:e9:dd:fa:7e:89:3c:92:91:06:05:e0:0f:11:98:
a2:f9:e0:a6:e2:0e:e4:c9:83:86:57:5c:ea:b9:70:
c7:5b:45:d3:fa:86:11:da:24:8a:44:61:6d:67:41:
d6:ef:31:bb:ca:bc:e6:7a:d9:0b:93:c5:a9:06:9e:
96:ec:5e:0a:bf:a5:b2:08:60:3a:14:a8:8d:f0:69:
9f:90:9e:a5:3d:ab:04:59:2c:da:73:b6:24:05:cb:
98:ec:d6:94:03:0e:8d:d0:01:2b:12:11:af:14:bc:
27:df:ce:e3:00:e8:00:c5:3c:bf:c9:bb:9a:98:3b:
8c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F4:B4:C9:60:A2:74:DF:2A:65:A0:C9:BC:32:13:B1:09:79:D7:9D
X509v3 Authority Key Identifier:
keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:eb:42:64:13:c9:12:07:ed:17:e5:d8:f8:0f:c7:df:0c:4c:
cb:49:2f:91:90:b0:8c:fd:08:cc:b6:03:f9:93:2d:3c:8e:3f:
69:97:13:dd:48:a0:3e:29:b2:b8:c3:fb:08:74:11:4c:13:9a:
c0:77:f1:5d:b0:61:57:bc:26:c9:c2:3b:f8:a7:6e:bf:43:77:
64:d6:51:91:a2:ea:46:05:f6:d4:1a:b2:39:43:9a:e8:86:b6:
11:85:b6:ba:59:46:94:50:d3:50:6a:5f:44:62:42:83:c0:1b:
91:2b:40:51:63:d9:a4:a7:5a:48:52:7a:5b:94:91:24:95:67:
af:9e:39:4d:43:6b:0a:6c:03:fd:78:31:fc:3f:4a:79:2e:71:
80:3e:05:fd:27:7e:09:2c:21:df:73:9b:a9:12:81:b0:85:3d:
d2:c7:be:b1:77:29:2b:39:b8:97:d6:2a:d4:60:c4:f9:4a:56:
1d:d8:98:0e:12:b9:a0:4b:fb:99:63:26:9d:f4:e6:43:0d:15:
b3:7d:00:bd:fb:de:14:3b:ae:c2:22:c2:0a:81:30:a0:cb:f9:
2a:73:07:7b:76:a4:32:01:16:b8:8e:69:73:30:c8:a2:d2:9f:
11:a8:57:a3:57:48:2d:12:47:7b:d3:31:01:e6:90:bf:12:be:
0c:29:8e:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+sG7ZJtQl7nnXUcZtvj4zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMTE3OWYwYTM1Y2YwN2MxNjI5NjcyNjYyODY2Y2EwMDFm
NzViZDMwHhcNMjYwOTIwMTIwMDI4WhcNMjYwOTIxMTIwMDI4WjAzMTEwLwYDVQQD
EyhiMGY0YjRjOTYwYTI3NGRmMmE2NWEwYzliYzMyMTNiMTA5NzlkNzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsY6gZ7LKNkT2+wtArHvCPKDS2EB
qydbnTTSbwTZTXFOxIMCHhfjWaqI0AyhZHhOWaGqlXf8wXb4udjwF30uHhk93z7O
Zg0nYPwnQJQQmUex080TVXOzSxOHnsHjCa3+sPhQtY7h0PaMsPplyuZyh9YOYwcp
0US2LZBSvF91xyxZaRIbxkU+6d36fok8kpEGBeAPEZii+eCm4g7kyYOGV1zquXDH
W0XT+oYR2iSKRGFtZ0HW7zG7yrzmetkLk8WpBp6W7F4Kv6WyCGA6FKiN8GmfkJ6l
PasEWSzac7YkBcuY7NaUAw6N0AErEhGvFLwn387jAOgAxTy/ybuamDuMNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLD0tMlgonTfKmWgybwyE7EJededMB8GA1UdIwQY
MBaAFI4RefCjXPB8FilnJmKGbKAB91vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lZThmOTAtZWYyYi00M2MwLWIwYzAt
NGNiYzY3MjE5YjRhLzEvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9lZThmOTAtZWYyYi00M2MwLWIwYzAtNGNiYzY3MjE5YjRh
LzEvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+tCZBPJ
EgftF+XY+A/H3wxMy0kvkZCwjP0IzLYD+ZMtPI4/aZcT3UigPimyuMP7CHQRTBOa
wHfxXbBhV7wmycI7+Kduv0N3ZNZRkaLqRgX21BqyOUOa6Ia2EYW2ullGlFDTUGpf
RGJCg8AbkStAUWPZpKdaSFJ6W5SRJJVnr545TUNrCmwD/Xgx/D9KeS5xgD4F/Sd+
CSwh33ObqRKBsIU90se+sXcpKzm4l9Yq1GDE+UpWHdiYDhK5oEv7mWMmnfTmQw0V
s30AvfveFDuuwiLCCoEwoMv5KnMHe3akMgEWuI5pczDIotKfEahXo1dILRJHe9Mx
AeaQvxK+DCmOdw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:38:49 2026 by rpki-client