Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
File: jHSEmpcKkwTfRfjii264f_CeC-o.mft (raw, json)
Hash identifier: zLoqOP7vsA+9O8PUhZ6FfLV/I9ZXod9dGKG0STNwyhA=
Subject key identifier: 12:20:98:F6:A6:7F:A2:5D:7F:8D:82:22:69:7D:0B:5B:90:D8:FF:1C
Authority key identifier: 8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
Certificate issuer: /CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Certificate serial: 019D9961ECA8D55C1A200E0064227C0810F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
Manifest number: 0AE9
Signing time: Fri 17 Apr 2026 03:00:24 +0000
Manifest this update: Fri 17 Apr 2026 03:00:24 +0000
Manifest next update: Sat 18 Apr 2026 03:00:24 +0000
Files and hashes: 1: UwIChmxo9QDoLv2cZqzGPfCrUQU.roa (hash: iViSnyemk7R4QbC75JFUXVWz8URlQ9KGxcWEibF4T+E=)
2: jHSEmpcKkwTfRfjii264f_CeC-o.crl (hash: LAoxu5ShWmBOHTS0pXJQCUuixTmRUadhgmWIMrGOGlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:ec:a8:d5:5c:1a:20:0e:00:64:22:7c:08:10:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Validity
Not Before: Apr 17 03:00:24 2026 GMT
Not After : Apr 18 03:00:24 2026 GMT
Subject: CN=122098f6a67fa25d7f8d8222697d0b5b90d8ff1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e2:9b:86:73:7e:d1:06:11:05:8b:33:e6:ba:
f8:56:10:aa:c8:b3:fb:96:49:2f:76:b6:a5:b1:77:
84:95:3d:d9:18:e7:35:93:6b:90:37:ca:bf:4c:03:
ce:d9:cd:3b:74:0c:51:ba:f2:85:a9:dd:98:6b:bc:
ab:1a:ab:fc:00:82:b9:52:f5:1b:42:0a:99:4c:2c:
f7:5e:27:53:4f:1e:f7:86:cd:6a:c9:94:5b:bd:0e:
c6:d1:07:92:3e:bf:82:3f:06:d6:17:af:cd:6c:bb:
fa:c8:40:3c:d1:94:b0:43:7e:9e:f7:da:26:c2:ae:
64:22:e5:7d:a4:36:0a:12:74:76:9b:eb:85:a9:96:
13:0a:f7:6b:c6:11:82:1b:2c:ec:1c:97:be:41:e8:
ec:61:d1:9f:c7:21:d1:84:d6:cc:04:8b:31:1c:14:
48:5d:1f:82:f5:38:3f:90:f7:ad:d6:f5:df:28:38:
e6:bb:8f:81:ee:9b:e5:4b:6a:3f:c7:23:b8:c8:48:
ce:11:43:d4:e0:a0:8d:75:07:c0:47:60:eb:4a:7b:
75:92:85:99:04:98:38:6e:14:e7:d5:e7:43:36:70:
55:f5:15:39:2e:57:df:b3:1b:1d:a3:04:48:af:e2:
f1:2e:37:18:e1:df:e6:07:cc:72:9f:3a:79:5b:df:
8a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:20:98:F6:A6:7F:A2:5D:7F:8D:82:22:69:7D:0B:5B:90:D8:FF:1C
X509v3 Authority Key Identifier:
keyid:8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:25:39:14:e1:74:12:41:50:91:73:2c:15:bb:df:fc:57:05:
24:9d:04:f4:9d:43:db:dd:53:9c:42:e0:e3:1a:65:45:cc:b6:
48:be:c2:61:8d:d2:58:c0:29:6b:c6:5b:aa:7f:92:59:1d:18:
f4:16:f4:43:64:69:af:3c:a9:0e:90:a8:7a:7a:2e:aa:00:97:
db:32:f7:c5:2d:c3:8c:db:4f:3b:e5:82:d1:e9:38:70:5b:20:
a7:d4:ea:36:e2:1a:27:fa:0c:b8:05:f4:a2:1a:56:3f:7e:0a:
ed:a5:25:d2:b6:d2:54:fd:c5:38:1d:fc:31:02:65:dd:d8:f2:
8b:cf:70:91:2a:6e:ef:97:f8:a1:d7:ff:cb:95:a5:de:1c:a9:
ae:e6:b0:d4:e1:d5:b7:49:ba:22:09:21:e7:95:2a:60:33:5a:
b0:b5:cd:03:71:78:16:af:af:c5:dd:5a:fd:ba:21:4e:87:96:
39:21:c9:b8:34:67:96:8b:47:51:f3:be:1d:84:67:3e:f2:d9:
d0:09:6d:15:08:d3:c1:a0:0c:7e:4f:93:98:60:37:64:b4:c5:
a7:cd:3b:6f:d9:96:f8:a5:68:7e:90:f5:28:24:1d:04:e3:11:
bf:d9:39:27:e5:bf:08:e7:13:1f:0f:c5:3c:fd:bb:2e:1f:49:
ca:73:48:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:44:50 2026 by rpki-client