Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: k9lrWVg7KVb1GRGm5LsYcevwTs+0y2hcLPHiRBbZxOs=
Subject key identifier: 1D:47:7C:76:81:1F:12:66:2D:B2:68:CA:53:35:6C:B9:E9:B8:83:B2
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 019E921495DC1CCB9B5DD4462A4A5501A60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 0A5C
Signing time: Thu 04 Jun 2026 10:01:22 +0000
Manifest this update: Thu 04 Jun 2026 10:01:22 +0000
Manifest next update: Fri 05 Jun 2026 10:01:22 +0000
Files and hashes: 1: AYUN6ILq1JnFNEGuiy9hczdbqfk.asa (hash: bnGV0TOXh2rgHledmfvQi6p7Cgl6Yx1IR8kXhvgGxxg=)
2: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: S1nd7WLz7cQIYjpYa4TVKp4c8TJoMMoVMOGbHg0PoEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:14:95:dc:1c:cb:9b:5d:d4:46:2a:4a:55:01:a6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: Jun 4 10:01:22 2026 GMT
Not After : Jun 5 10:01:22 2026 GMT
Subject: CN=1d477c76811f12662db268ca53356cb9e9b883b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:0c:ff:e6:01:8d:b0:ed:a3:26:13:a0:72:
c1:31:5a:52:27:df:1f:dc:97:9e:9a:ad:7f:6c:0e:
e7:52:4b:92:63:06:fa:0c:cc:83:4a:cc:95:fb:44:
c7:0f:60:92:ca:8f:a2:62:7c:a2:c4:eb:03:55:24:
cf:1d:d1:58:35:c0:79:cf:25:01:51:85:74:0e:bd:
80:17:d8:7a:12:5e:0b:0e:90:16:97:8c:d2:c5:62:
9b:9f:6a:7a:11:c1:59:63:58:ec:d8:21:63:fd:88:
fe:76:6b:90:2a:7f:2a:ec:a3:87:12:ba:46:f8:be:
ac:3c:c1:67:e9:81:9a:ac:a8:be:ce:bf:8e:50:58:
3d:24:97:00:44:2b:0c:56:f1:a2:49:2a:65:d3:27:
8f:ca:6a:15:86:81:c4:76:2d:76:7c:c2:6a:c2:28:
b5:ff:f6:0a:22:7b:16:3e:8c:3f:4d:d5:f5:ef:97:
b5:b3:89:13:c1:3d:74:06:31:97:9a:f4:49:73:ae:
94:07:c7:ad:27:de:43:5c:12:59:81:fd:a7:6e:9a:
47:ba:a8:2b:62:01:1b:f3:65:e9:a1:b4:2d:fe:5e:
88:07:00:aa:6d:df:d0:f5:b6:f6:87:6b:14:d0:56:
fe:7d:aa:0e:ba:fe:9e:df:ae:09:94:90:59:82:32:
70:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:47:7C:76:81:1F:12:66:2D:B2:68:CA:53:35:6C:B9:E9:B8:83:B2
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:99:83:47:46:f1:85:b7:ca:42:31:0a:99:5d:b1:69:e3:2b:
d9:67:90:1b:65:87:86:12:7b:db:43:d0:ac:58:c5:6b:fd:48:
3d:0c:7d:a2:f9:d6:50:ee:c2:33:fa:84:af:bf:61:a0:4b:57:
96:7a:45:ee:23:9b:f1:aa:1f:32:02:f3:55:a2:68:a6:13:80:
a1:96:97:34:e0:01:11:7c:10:1c:31:6e:b3:8c:ce:9e:bc:91:
dc:9c:07:73:35:75:4b:44:d5:d8:76:a8:79:36:6c:97:17:0c:
97:85:42:57:d0:0c:e6:09:30:66:bb:a8:29:4d:35:7f:54:6d:
d6:97:d6:64:fd:61:b3:5e:2f:e2:7a:35:c0:0d:36:b6:3b:96:
4d:56:d4:5b:cc:83:d7:d1:fe:87:52:a2:22:82:5b:8a:04:f7:
45:3a:f1:88:37:76:9f:cd:1e:08:04:8f:53:2e:e7:da:0f:0d:
cd:79:a4:47:3b:57:0c:55:8b:27:2a:68:a6:be:72:35:3a:99:
ea:3c:b4:f1:10:2b:b1:58:bf:7e:73:85:7c:51:92:ee:46:6d:
18:3d:c7:91:45:6d:1c:a9:01:ef:09:c8:bc:d3:f7:ee:c3:d4:
13:1f:fb:3b:98:25:b0:6e:05:13:e2:d7:33:e5:b9:9b:c8:7c:
26:d2:05:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:25 2026 by rpki-client