Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: 8ZEe2AxkoR+D7WhIf6lLmyn4DWON7Ht49n4/yaJ6tT8=
Subject key identifier: 4D:85:47:5B:EE:93:08:3C:73:CB:8E:BB:65:37:5C:19:0C:63:0C:CF
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 019CC2980125F43CDC9039DA267D63DC27DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 096C
Signing time: Fri 06 Mar 2026 10:01:07 +0000
Manifest this update: Fri 06 Mar 2026 10:01:07 +0000
Manifest next update: Sat 07 Mar 2026 10:01:07 +0000
Files and hashes: 1: AYUN6ILq1JnFNEGuiy9hczdbqfk.asa (hash: bnGV0TOXh2rgHledmfvQi6p7Cgl6Yx1IR8kXhvgGxxg=)
2: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: pnsFtYvFfcmZN2q97NkipC9wUuuuuMrMdfhZi79bmsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c2:98:01:25:f4:3c:dc:90:39:da:26:7d:63:dc:27:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: Mar 6 10:01:07 2026 GMT
Not After : Mar 7 10:01:07 2026 GMT
Subject: CN=4d85475bee93083c73cb8ebb65375c190c630ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b9:2b:a8:40:07:72:f3:f7:2a:79:83:13:7c:
c0:51:1e:44:f4:d9:b4:30:da:6e:5c:10:17:bd:72:
5b:9a:44:04:bd:aa:a8:4e:d5:4c:b1:d8:b8:f4:35:
d6:19:d9:e4:90:f7:f3:af:53:ca:b1:bd:ee:58:8e:
f0:16:0e:71:d0:8a:65:43:d3:9b:9a:e9:48:cc:d3:
2f:28:29:61:71:7d:c4:39:46:40:fd:2c:37:af:bd:
9a:a5:70:b8:70:b1:84:a7:35:0a:51:f4:d8:4b:0a:
45:92:92:0a:07:d3:3d:59:03:83:86:f8:c5:f2:dd:
f7:28:9c:ba:36:b7:0d:3c:cd:9d:de:a8:3b:c6:88:
e8:7b:86:4f:cf:77:88:ae:14:78:73:e7:91:cc:5b:
53:22:71:53:95:9c:08:36:f8:3e:c5:f9:63:33:8f:
42:32:ac:5f:03:8d:92:c0:f3:eb:8e:c9:58:26:da:
36:af:49:bf:eb:1c:9a:17:eb:82:05:e5:72:f3:6c:
78:3e:e1:ff:59:ac:58:f2:e0:14:97:fe:30:06:6f:
6f:99:12:11:a5:ca:03:6c:ae:0c:53:b6:e4:1d:c4:
e4:57:dc:eb:ef:81:0a:78:e5:ac:5b:04:14:41:74:
55:59:5c:7b:a1:e1:79:88:51:b4:95:de:30:79:4c:
89:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:85:47:5B:EE:93:08:3C:73:CB:8E:BB:65:37:5C:19:0C:63:0C:CF
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:04:f3:e7:50:ce:ad:94:e3:83:f6:d5:7c:b8:92:b1:94:61:
25:00:08:c5:db:aa:48:c0:ef:7f:1e:b9:8d:57:05:44:33:43:
56:18:1f:47:5f:87:e3:99:0c:95:e1:a1:e6:fa:49:5a:be:17:
be:69:9e:fc:c6:a0:a8:90:82:c1:08:f9:29:23:53:85:11:e2:
f9:3d:90:37:28:be:2e:55:30:df:9b:2c:4e:13:dc:25:13:9f:
34:e1:6b:05:0d:2c:20:6f:d8:35:23:89:ef:4a:a3:d3:46:05:
b4:e1:9c:b9:1d:7b:a3:0a:35:62:b8:98:e6:53:de:aa:a1:f2:
f8:e7:45:70:10:1c:88:ff:83:e0:d4:35:e7:83:17:88:ab:b6:
e0:d4:ec:0e:2d:46:7b:6c:b5:fa:3b:27:61:ee:f1:28:89:d2:
91:0e:c5:ee:65:fe:b8:95:bb:2a:21:66:d9:39:30:18:b9:1e:
de:b3:a1:30:6f:0d:78:dd:68:80:b9:5d:60:39:a2:88:53:e4:
8c:1a:ea:d7:45:18:95:f4:01:43:9c:8c:7e:9a:4c:8a:a8:6e:
1e:11:1a:e9:c3:70:7a:82:8b:7e:cd:2c:a1:05:c8:32:e1:fd:
43:04:ea:0c:a0:85:eb:3f:38:c2:66:41:ea:d0:be:09:41:b3:
85:ba:d5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 17:02:37 2026 by rpki-client