Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: p8Lt1HngTWzFA3CdHQDH4dbO5/0HKH5MyNmoXTGN2e4=
Subject key identifier: 2C:05:C3:34:2D:30:0B:79:65:A7:DD:6C:FA:7E:B4:88:12:C4:CE:D2
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 01A06D27C6E877186BC239F09D89A6F93FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 0B52
Signing time: Fri 04 Sep 2026 16:01:58 +0000
Manifest this update: Fri 04 Sep 2026 16:01:58 +0000
Manifest next update: Sat 05 Sep 2026 16:01:58 +0000
Files and hashes: 1: AYUN6ILq1JnFNEGuiy9hczdbqfk.asa (hash: bnGV0TOXh2rgHledmfvQi6p7Cgl6Yx1IR8kXhvgGxxg=)
2: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: NE9I49kiY6/cEzCLngJSsYirHF1lVvUfmNxV4mM0tkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:27:c6:e8:77:18:6b:c2:39:f0:9d:89:a6:f9:3f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: Sep 4 16:01:58 2026 GMT
Not After : Sep 5 16:01:58 2026 GMT
Subject: CN=2c05c3342d300b7965a7dd6cfa7eb48812c4ced2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:6c:85:c6:a4:f8:ee:fc:a9:0f:c1:7f:4a:
75:18:dc:d2:6e:50:82:30:66:fa:8c:d4:54:90:b3:
00:ce:9d:48:36:b6:70:8a:73:fc:22:56:c2:52:13:
35:7e:1e:1e:9b:cc:9a:18:f1:d8:27:17:44:ef:c5:
dc:83:d1:d0:b1:27:ac:ae:ef:1f:af:46:d2:68:4a:
e9:ab:94:cb:3e:68:86:9c:e5:6d:d0:f6:73:0f:8d:
04:eb:65:89:ec:ce:90:ad:e5:8d:58:66:f3:41:3d:
c5:60:2b:fd:b6:97:41:cb:53:0d:ea:5d:ef:7b:50:
f4:d5:5f:9c:d6:d4:33:79:44:76:f8:17:fc:f1:e5:
e6:75:81:0b:17:37:91:47:e0:e5:ff:48:5f:d6:2e:
10:ce:4f:19:b9:ac:0e:e2:45:7d:7b:e5:49:86:c4:
4f:01:74:ca:65:98:cd:4c:28:4a:10:45:06:02:b6:
bc:b6:22:a2:0c:68:bb:16:e2:4a:41:22:13:29:bb:
b5:70:63:bb:9f:e7:52:41:84:f7:e8:78:90:c6:19:
ef:aa:6d:1b:a7:18:a1:61:fb:d8:6e:9a:16:4b:ec:
7b:4e:70:dc:52:e3:78:c5:ba:63:da:12:64:91:0b:
ad:e2:c5:79:80:32:c6:68:31:72:d8:03:7d:06:87:
22:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:05:C3:34:2D:30:0B:79:65:A7:DD:6C:FA:7E:B4:88:12:C4:CE:D2
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:af:04:0d:d6:f2:9b:3d:37:e7:f7:b5:2a:a7:e1:32:a5:d5:
34:47:a9:c6:ca:bc:51:4e:f0:63:db:14:c8:8c:15:ee:4f:1d:
3f:17:2b:95:88:47:5b:e6:ec:ae:8a:98:7d:a3:c5:ac:f0:ce:
15:5b:c3:a9:83:25:9d:47:c5:8f:43:0a:bb:56:da:53:f1:27:
d6:8a:d9:92:86:69:b2:13:59:fb:89:79:83:66:dd:5d:e7:45:
22:08:97:13:5a:3f:3b:cb:aa:6e:95:24:08:96:c3:63:e3:ba:
62:3b:50:7d:c0:23:bc:da:a7:32:9f:82:b7:61:61:ef:9f:a1:
a5:31:5f:58:78:1b:23:3b:64:23:ae:8e:90:8d:c1:47:23:f2:
52:af:41:b4:4f:bc:76:56:1d:1d:3a:58:a1:61:be:0d:81:ac:
ab:be:74:94:8e:d5:e1:8b:ab:43:6f:e5:90:8f:03:a7:9b:54:
34:21:34:3b:0d:d6:50:b2:e3:6a:7c:eb:dd:d5:06:bb:82:d6:
f1:14:e4:a3:16:5a:e6:0d:22:31:d2:d7:94:12:b7:b5:07:19:
31:d8:b4:5d:0d:5b:5a:12:37:ef:81:b7:7a:eb:4d:dc:09:e7:
c6:ea:25:85:3c:7f:5b:dc:32:d8:23:fa:6c:ac:a1:90:5c:6d:
a3:75:bf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:29:32 2026 by rpki-client