Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: 7k+9gRp913hKXGMu9BdXEN4C22YbQ1qrAbVrXnu6cT0=
Subject key identifier: 2F:06:72:D0:AA:BD:4B:6B:42:15:D9:93:77:BC:08:CE:4F:2A:2F:1D
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 019F856948AFA49741DB655F5160F6636993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 0ADA
Signing time: Tue 21 Jul 2026 16:01:37 +0000
Manifest this update: Tue 21 Jul 2026 16:01:37 +0000
Manifest next update: Wed 22 Jul 2026 16:01:37 +0000
Files and hashes: 1: AYUN6ILq1JnFNEGuiy9hczdbqfk.asa (hash: bnGV0TOXh2rgHledmfvQi6p7Cgl6Yx1IR8kXhvgGxxg=)
2: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: rMsvG9YjACjhCvxYBfTBWMBs2oniUibNFMNvQiVfftI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:69:48:af:a4:97:41:db:65:5f:51:60:f6:63:69:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: Jul 21 16:01:37 2026 GMT
Not After : Jul 22 16:01:37 2026 GMT
Subject: CN=2f0672d0aabd4b6b4215d99377bc08ce4f2a2f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:1d:7f:aa:ee:3f:e6:54:b9:ec:0d:ac:41:
a3:be:33:62:ea:be:34:58:ad:9b:26:e1:bf:e7:47:
1d:96:6c:9b:60:b6:90:64:71:68:91:03:f0:f6:fe:
6b:37:a2:9f:2d:f1:b2:b6:7f:81:c3:9c:b1:57:16:
99:26:84:be:ce:c8:87:34:6a:2d:27:4f:40:37:4f:
88:f3:57:fb:a5:e9:43:0e:3d:74:61:1e:d2:d8:4c:
7a:96:d9:bf:0f:74:b4:2a:00:71:e0:1e:97:ca:24:
04:20:c8:1d:9d:2e:f8:4f:2c:be:ec:3e:81:3d:83:
75:4d:58:85:74:ea:66:0c:9d:2f:5c:cf:74:55:ef:
83:e1:be:b7:85:8b:20:ab:e0:c8:a0:9d:62:88:07:
e2:f8:25:b7:e9:0e:7a:30:b3:6f:b8:e2:ae:e7:40:
49:b8:f1:43:a3:6a:4a:47:57:21:41:e3:25:12:30:
29:46:7c:f1:1e:02:72:82:d7:a6:2d:81:1c:1f:0e:
ad:e7:41:62:19:78:60:05:bd:f0:51:ff:28:29:b7:
34:5d:dc:f6:65:06:54:86:82:a0:39:cf:5f:21:e3:
0c:a5:b7:5e:8c:e9:2b:88:17:98:d9:e7:03:b7:14:
be:4b:cf:73:3f:a3:f6:09:5c:53:28:de:f2:1d:2a:
0b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:06:72:D0:AA:BD:4B:6B:42:15:D9:93:77:BC:08:CE:4F:2A:2F:1D
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:44:bc:ca:ee:01:7a:df:9c:7e:3f:1b:35:90:ab:6a:ee:68:
36:8b:7d:ef:9f:65:17:c4:4f:5e:12:72:43:a1:93:a4:d1:73:
0b:48:0b:2e:10:09:09:3a:8f:af:76:62:31:58:10:bd:37:5b:
34:17:54:81:65:4c:63:51:df:2b:1c:b2:4e:7d:0b:fe:22:6b:
26:75:c2:15:02:e4:25:ad:96:10:e4:04:2f:60:67:1f:63:ec:
c0:62:e3:8b:83:9e:71:c7:5f:91:a4:c2:4e:ce:f2:f5:2a:b5:
f2:46:e2:ba:06:56:4d:d7:82:26:c3:00:2e:75:03:83:f9:f8:
4c:85:d0:53:80:40:e2:d6:41:b5:37:fd:92:1f:7a:fd:b5:31:
03:9f:cc:55:34:38:12:2d:7d:35:fa:59:4a:da:db:82:8b:28:
d9:ab:5e:b8:e6:18:6a:34:67:55:53:ff:da:0a:ac:1b:6f:b9:
82:d8:2e:38:30:b9:c8:91:95:38:c5:b7:f7:d5:7a:95:d1:74:
8d:cd:52:bf:8e:b4:1a:a9:20:68:ef:92:e1:a9:65:41:5f:ca:
c4:01:c8:9c:e9:82:6b:52:51:79:2e:2f:6f:91:5c:ff:e4:ab:
b4:1b:aa:de:c4:1e:06:80:ae:f5:95:8a:38:47:cc:97:f3:3b:
f2:40:3a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:26 2026 by rpki-client