Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: vnuavXVLnxzY7kBoVmJQwD9p+JreZq+M+TtvstIh80I=
Subject key identifier: 80:A7:3F:EB:B2:E1:D7:F4:91:52:F5:DF:6C:EE:E9:75:85:40:B6:70
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 01A17F618F4FF5C177E024177D89E48D3232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 0BE0
Signing time: Tue 27 Oct 2026 22:01:02 +0000
Manifest this update: Tue 27 Oct 2026 22:01:02 +0000
Manifest next update: Wed 28 Oct 2026 22:01:02 +0000
Files and hashes: 1: AYUN6ILq1JnFNEGuiy9hczdbqfk.asa (hash: bnGV0TOXh2rgHledmfvQi6p7Cgl6Yx1IR8kXhvgGxxg=)
2: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: s5zDZLgBFvMjB6lD/SskWNLRXhOEc2pkJ7a+nxCzumw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:61:8f:4f:f5:c1:77:e0:24:17:7d:89:e4:8d:32:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: Oct 27 22:01:02 2026 GMT
Not After : Oct 28 22:01:02 2026 GMT
Subject: CN=80a73febb2e1d7f49152f5df6ceee9758540b670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:56:aa:a4:ad:20:0a:62:6f:ab:99:41:c8:
f1:c5:c4:87:cd:22:50:c2:2c:81:7f:17:40:17:ca:
8e:ed:38:6f:f6:50:e2:b1:34:43:d4:d5:b5:d4:f2:
67:91:70:81:bc:ca:21:16:82:86:03:6f:54:f6:bc:
1b:91:56:65:8f:94:17:a2:ac:cf:39:4c:43:e1:6f:
42:16:e8:f2:25:83:d3:c0:b2:ed:c6:33:72:1d:4d:
a2:c3:3a:82:00:a0:83:3e:fa:4e:e3:b5:c8:e8:c7:
89:8c:3c:ae:bf:f7:65:11:68:80:f2:36:50:90:be:
0f:80:2d:11:96:91:28:9e:98:c5:7c:62:ab:8d:81:
ea:28:2c:0b:d0:51:f3:5e:86:38:e5:92:c2:11:11:
b0:24:34:e3:ee:4e:6f:87:01:5b:2f:73:c3:ba:71:
ec:d1:15:37:c9:7a:0d:9a:02:94:0f:21:4d:7c:91:
07:ac:45:97:d3:2f:5d:8a:0f:af:21:27:61:ea:02:
84:b2:7b:f9:a0:8d:0d:33:d6:c1:93:89:ff:f7:bc:
62:3d:b6:6b:b2:75:ed:29:d7:12:3c:95:87:f2:9d:
dc:80:2a:ff:11:73:11:ec:cd:0c:bb:2d:36:9b:42:
10:53:ba:dc:78:d1:08:1c:c2:93:d5:82:94:f8:c0:
b9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A7:3F:EB:B2:E1:D7:F4:91:52:F5:DF:6C:EE:E9:75:85:40:B6:70
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:51:bd:28:95:cb:24:27:36:f4:b7:cc:72:42:32:d1:09:41:
b2:17:fb:6c:f5:53:95:44:9d:e9:48:04:70:01:95:32:7f:77:
99:00:11:13:00:c4:11:81:f8:21:00:e7:96:23:82:c8:d9:13:
52:0b:26:9e:a8:17:c2:4d:22:0a:9a:fe:9b:b4:ba:c5:e9:ec:
6f:6f:e4:01:3c:34:72:a3:d9:35:32:49:37:6b:b6:1c:a3:7b:
bd:92:1e:0d:f6:b0:39:ea:37:90:5c:8a:ee:d9:35:43:14:28:
b5:5f:95:b6:56:f4:1d:ac:ab:87:87:03:f5:1d:de:31:99:c3:
d1:15:c9:2c:e3:d7:28:63:73:f0:8b:50:12:ce:57:17:6a:f3:
99:fd:1c:21:eb:21:6d:f2:81:3e:10:2b:f7:50:ad:dd:4e:8e:
7c:bb:0e:8a:ce:0e:d5:52:7a:21:e2:5c:54:62:8e:77:b1:c1:
b5:6f:e1:32:84:6c:94:8d:fd:45:c3:1c:78:f1:4f:39:3e:39:
be:e0:85:15:1e:8b:d5:d0:60:a1:d4:4f:ad:e9:c1:77:1a:6c:
67:8f:0a:f8:1b:ed:6b:53:da:ec:0d:72:2b:bb:ac:8d:ee:73:
66:a5:4c:e2:d3:2f:f8:48:da:b5:e5:1d:cd:af:a1:80:89:66:
dd:ea:21:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/YY9P9cF34CQXfYnkjTIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjN2IxODM0NWEzOTM0MWE3MjYyNzc1MTMwOGMxY2UwMmY0
NmEwYmIwHhcNMjYxMDI3MjIwMTAyWhcNMjYxMDI4MjIwMTAyWjAzMTEwLwYDVQQD
Eyg4MGE3M2ZlYmIyZTFkN2Y0OTE1MmY1ZGY2Y2VlZTk3NTg1NDBiNjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtVWqqStIApib6uZQcjxxcSHzSJQ
wiyBfxdAF8qO7Thv9lDisTRD1NW11PJnkXCBvMohFoKGA29U9rwbkVZlj5QXoqzP
OUxD4W9CFujyJYPTwLLtxjNyHU2iwzqCAKCDPvpO47XI6MeJjDyuv/dlEWiA8jZQ
kL4PgC0RlpEonpjFfGKrjYHqKCwL0FHzXoY45ZLCERGwJDTj7k5vhwFbL3PDunHs
0RU3yXoNmgKUDyFNfJEHrEWX0y9dig+vISdh6gKEsnv5oI0NM9bBk4n/97xiPbZr
snXtKdcSPJWH8p3cgCr/EXMR7M0Muy02m0IQU7rceNEIHMKT1YKU+MC5GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICnP+uy4df0kVL132zu6XWFQLZwMB8GA1UdIwQY
MBaAFIx7GDRaOTQacmJ3UTCMHOAvRqC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mZjRmMTItNTI5MC00MzJkLWIxZGIt
NTNjYTBkNjVkZDVlLzEvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9mZjRmMTItNTI5MC00MzJkLWIxZGItNTNjYTBkNjVkZDVl
LzEvakhzWU5GbzVOQnB5WW5kUk1Jd2M0QzlHb0xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx1G9KJXL
JCc29LfMckIy0QlBshf7bPVTlUSd6UgEcAGVMn93mQAREwDEEYH4IQDnliOCyNkT
UgsmnqgXwk0iCpr+m7S6xensb2/kATw0cqPZNTJJN2u2HKN7vZIeDfawOeo3kFyK
7tk1QxQotV+Vtlb0Hayrh4cD9R3eMZnD0RXJLOPXKGNz8ItQEs5XF2rzmf0cIesh
bfKBPhAr91Ct3U6OfLsOis4O1VJ6IeJcVGKOd7HBtW/hMoRslI39RcMcePFPOT45
vuCFFR6L1dBgodRPrenBdxpsZ48K+Bvta1Pa7A1yK7usje5zZqVM4tMv+EjateUd
za+hgIlm3eohJA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:43:31 2026 by rpki-client