Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.mft
File: JHBN1wT8Swr7dgh9b3ltuz-IAJI.mft (raw, json)
Hash identifier: RsOJF/DIpqjQ55HGA5g0/FV89TC6e5HG3eJnXf49QpU=
Subject key identifier: 1C:EC:BF:E0:A1:22:57:97:60:27:12:D8:34:69:29:67:D4:CB:52:DB
Authority key identifier: 24:70:4D:D7:04:FC:4B:0A:FB:76:08:7D:6F:79:6D:BB:3F:88:00:92
Certificate issuer: /CN=24704dd704fc4b0afb76087d6f796dbb3f880092
Certificate serial: 01A130A29E3FD2130816889E2A3365153241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHBN1wT8Swr7dgh9b3ltuz-IAJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.mft
Manifest number: 0117
Signing time: Mon 12 Oct 2026 15:02:06 +0000
Manifest this update: Mon 12 Oct 2026 15:02:06 +0000
Manifest next update: Tue 13 Oct 2026 15:02:06 +0000
Files and hashes: 1: JHBN1wT8Swr7dgh9b3ltuz-IAJI.crl (hash: SVu5G7oHQc1yzuNVvgr7emBRTYj++CkfeEwCuiB2h/c=)
2: kva9v8qwuzs9AIC6M0Yymc62a-k.roa (hash: jqE5ifSnUoFbCpac7mHFBsd4Kmtc6sUUCcFu2fSyvUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHBN1wT8Swr7dgh9b3ltuz-IAJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a2:9e:3f:d2:13:08:16:88:9e:2a:33:65:15:32:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24704dd704fc4b0afb76087d6f796dbb3f880092
Validity
Not Before: Oct 12 15:02:06 2026 GMT
Not After : Oct 13 15:02:06 2026 GMT
Subject: CN=1cecbfe0a1225797602712d834692967d4cb52db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:aa:44:92:b2:a4:77:1c:2b:19:9c:49:8b:
7c:6b:6d:a6:0d:6e:2b:6f:41:38:d4:a2:0e:5d:40:
9a:76:dd:1d:9a:bf:1d:b1:1c:2d:dc:bd:9d:bf:40:
f4:c0:ef:96:0a:c4:18:ec:67:e8:fb:9a:bc:f2:63:
45:4d:96:ed:aa:3f:85:43:40:34:1e:ef:65:39:6e:
a6:49:fc:ca:90:b7:4b:63:69:45:31:a2:4a:2e:3b:
a3:cf:11:96:7a:c7:cd:4f:87:74:e8:ef:8a:9d:f7:
df:7d:5e:42:57:01:84:79:bf:8a:76:58:12:89:e1:
5b:06:46:00:d5:d3:5d:60:f1:de:23:0c:b1:0f:3a:
a0:3f:61:39:fb:e9:57:fd:03:14:81:29:c9:b0:81:
ba:21:4b:54:81:7e:d1:b2:39:9d:51:8d:2a:9e:7d:
a5:8b:83:e6:14:5a:f5:59:87:72:a6:11:15:34:1a:
0f:05:6f:11:b2:50:7a:4b:03:84:fc:0b:b1:0c:a6:
b8:fd:fc:9b:b5:cb:cc:a4:bd:36:ee:4e:97:e7:48:
6f:a4:ce:4c:d6:e5:a1:29:27:20:fb:58:c6:c5:77:
49:4d:3d:8e:45:46:8a:41:d7:bf:3c:2a:5b:97:d4:
29:fc:f9:fa:04:53:e6:b9:3d:26:89:be:4e:0f:eb:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EC:BF:E0:A1:22:57:97:60:27:12:D8:34:69:29:67:D4:CB:52:DB
X509v3 Authority Key Identifier:
keyid:24:70:4D:D7:04:FC:4B:0A:FB:76:08:7D:6F:79:6D:BB:3F:88:00:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHBN1wT8Swr7dgh9b3ltuz-IAJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/JHBN1wT8Swr7dgh9b3ltuz-IAJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:97:3b:4a:ce:d3:fb:b6:5b:52:f1:df:33:c8:06:23:35:7d:
c3:09:e4:39:b2:e6:d8:36:a0:52:f7:fb:d9:77:fb:b8:2a:de:
af:4b:8c:94:d2:0c:0f:48:43:e1:7a:fa:5a:32:6f:f3:82:ea:
91:68:54:fa:87:ec:6d:ad:74:b5:61:59:d1:8f:0c:7b:35:cf:
bc:13:89:6e:bc:a8:9f:b9:a2:d4:91:d4:f6:db:a9:e0:35:8d:
46:db:bf:0d:9a:52:3e:8a:b7:7e:cd:7e:77:2c:f0:cc:f5:14:
a7:f3:31:a6:7b:7c:46:4b:2f:c2:53:2f:69:f2:07:fc:03:03:
a0:84:7a:3d:db:89:3d:56:55:12:bf:bd:b9:55:67:92:8f:15:
76:7e:ef:db:8c:cc:a8:01:df:6b:38:a7:08:88:67:61:ec:8f:
40:0d:2e:6a:b6:56:2d:41:44:d9:cb:85:5a:fc:41:47:81:54:
59:b9:fa:5e:0d:71:95:d6:ab:a7:fb:3e:44:2c:11:7f:34:21:
a3:6a:a2:4a:b8:90:8e:94:bd:13:16:e2:83:66:95:cc:00:9f:
84:17:da:0c:7c:9b:c6:e4:ad:da:9c:4d:a9:d0:b1:c6:de:dd:
ff:14:ef:27:e1:ca:56:2e:c3:6f:9f:74:ff:84:84:b6:22:da:
3a:15:69:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:23:36 2026 by rpki-client