Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
File: jhF58KNc8HwWKWcmYoZsoAH3W9M.mft (raw, json)
Hash identifier: dlJfVhf587LPv7YC7fEXe7sM0AFpKSkJ9rcHxr0nFIQ=
Subject key identifier: 93:B2:53:37:C7:67:96:76:C6:02:41:8D:FF:EA:09:D4:B4:F2:E4:F2
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial: 019D9774B1CBCFF1D029BFEE22525271A50A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
Manifest number: 09D7
Signing time: Thu 16 Apr 2026 18:01:40 +0000
Manifest this update: Thu 16 Apr 2026 18:01:40 +0000
Manifest next update: Fri 17 Apr 2026 18:01:40 +0000
Files and hashes: 1: THMUwp1z_8yM4YT3tCOSI8jHXpc.roa (hash: Lr+q9lzNVfojfVbAAoJyDVcA+Kbg/x3ZRCV9JR35aYs=)
2: g1S-kxOnMbzdndrLbUeaCJYPOxw.roa (hash: jkv9kYNLwqMU1Z9MYM3vG7XQkKfgh1lByWmby4H5OPY=)
3: jhF58KNc8HwWKWcmYoZsoAH3W9M.crl (hash: gAvN87g2W7dREml6Tr7drhfhGaYNuOxjP0JO5ycf3zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:b1:cb:cf:f1:d0:29:bf:ee:22:52:52:71:a5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Validity
Not Before: Apr 16 18:01:40 2026 GMT
Not After : Apr 17 18:01:40 2026 GMT
Subject: CN=93b25337c7679676c602418dffea09d4b4f2e4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:e2:f7:c6:d3:1b:61:63:53:25:61:6c:8c:
5e:ce:95:75:24:a2:88:b8:8c:8d:c0:62:29:c6:e8:
e6:d2:8c:17:fd:06:23:8a:a5:13:7d:f0:77:56:96:
96:df:1f:e4:b4:40:40:51:29:13:2b:e4:2d:88:05:
cb:7b:71:6d:78:e2:e9:dd:3d:69:0e:17:c1:54:f4:
cc:e4:00:83:71:b3:55:93:a4:f4:97:20:4a:77:38:
c9:9b:d3:8e:fe:46:d9:b9:17:7f:6b:6c:65:60:b9:
25:c4:9d:7c:e6:80:1f:df:d9:e6:34:f0:6b:3f:fd:
1b:ef:0f:0c:ec:fa:21:0a:6b:59:ac:42:ed:25:57:
13:21:1e:04:f6:60:c5:35:9b:04:8f:60:9e:2e:1f:
ac:5f:81:25:4c:c7:17:46:7a:f2:2f:3c:9c:07:47:
2d:92:99:3e:b8:08:c7:cc:39:40:00:4a:58:e6:dc:
2e:8b:2b:21:06:c9:96:93:42:8d:74:7e:78:b6:6a:
29:d1:40:2d:d7:5a:fd:66:6f:a7:24:46:de:2e:87:
18:d1:72:81:b4:1f:29:f3:5c:b4:2c:8f:44:86:9b:
45:4d:99:53:b6:16:aa:f9:99:2d:a5:c1:07:7e:1c:
0c:62:97:dc:90:e1:b0:35:08:e3:05:d5:02:c7:f3:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B2:53:37:C7:67:96:76:C6:02:41:8D:FF:EA:09:D4:B4:F2:E4:F2
X509v3 Authority Key Identifier:
keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:cb:d0:23:3c:5b:61:ff:0b:24:d0:a9:9c:d1:43:b2:53:d0:
3f:c7:2f:ba:87:cb:29:59:92:87:60:4b:1e:ef:a8:cb:ee:29:
5a:be:17:f1:7e:18:e4:9e:95:4b:ca:54:02:dd:f1:74:ea:30:
38:0e:28:bf:cd:a0:b8:14:e2:f1:dc:f7:0f:52:4c:07:38:b1:
29:0b:4a:ba:7e:f7:fc:e5:1b:b5:f8:f0:02:2b:e7:68:92:fc:
a4:86:d0:97:18:c5:a5:b8:fc:b3:83:17:f0:07:20:07:85:da:
07:d0:18:3f:2b:4d:cb:81:9b:36:5c:f3:d4:cb:39:9c:e3:43:
4f:47:74:45:14:f4:c3:2e:66:95:9f:c4:0f:df:cd:8a:06:e6:
71:a8:23:5f:70:32:fc:a2:15:d7:5c:14:59:4b:0c:fa:3b:85:
94:d7:f7:39:38:63:43:13:dd:60:b9:4e:62:aa:cb:75:b2:70:
99:ca:1d:da:fd:d2:c7:8c:45:10:fe:d0:23:5a:52:a0:7e:1e:
ac:04:9c:f2:34:fa:4d:51:b1:f8:c3:6c:8c:51:b4:12:5b:8f:
f7:d7:bd:08:2a:dc:18:b7:95:36:fd:dd:f5:43:ab:fb:4a:57:
f2:f1:39:00:b8:87:b9:f0:a9:ec:4c:db:36:8c:f6:fe:98:9f:
7c:e8:ca:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:08:39 2026 by rpki-client