Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
File: jha95kqam7o_-hQ4oZesP5SYn68.mft (raw, json)
Hash identifier: lt145hLrxMR393j/sIeQQm26JNHp2ISrtOuk00ImJoQ=
Subject key identifier: E6:A3:C6:12:28:D3:51:89:F3:08:67:07:BE:6D:2A:E5:3E:B9:B9:05
Authority key identifier: 8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF
Certificate issuer: /CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf
Certificate serial: 01A1976A047EB0BB83714372F65E9BCF922C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
Manifest number: 0E67
Signing time: Sun 01 Nov 2026 14:01:09 +0000
Manifest this update: Sun 01 Nov 2026 14:01:09 +0000
Manifest next update: Mon 02 Nov 2026 14:01:09 +0000
Files and hashes: 1: jha95kqam7o_-hQ4oZesP5SYn68.crl (hash: 2svGdS6mQ4E+US7atxCLrzbGxiMBNONBj05iJ9G+VJ0=)
2: rIbppOfNfFYdHELW2Brc9R0i8ZQ.roa (hash: 6K2aNO9ERJucL5JHeR5DeWEg9tZjVrX7Cr/llqySGJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:6a:04:7e:b0:bb:83:71:43:72:f6:5e:9b:cf:92:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf
Validity
Not Before: Nov 1 14:01:09 2026 GMT
Not After : Nov 2 14:01:09 2026 GMT
Subject: CN=e6a3c61228d35189f3086707be6d2ae53eb9b905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:8d:a6:e6:4f:a9:54:28:52:fe:64:8f:14:
2d:55:ad:b0:52:73:95:f5:19:bc:4d:b8:6b:1f:81:
e0:c8:e6:7d:91:93:f9:a5:b1:45:ce:24:75:df:c7:
90:96:5a:72:61:14:ea:37:e9:62:7d:65:b1:67:db:
39:a3:f0:5f:73:c7:2e:ae:f3:b9:85:d5:e3:2c:70:
6f:76:2c:d4:be:39:23:8d:a2:b8:79:5f:50:c2:e6:
6b:d9:c1:f0:9d:80:31:83:1f:ba:dc:bc:38:b2:05:
85:cc:99:a1:8b:e0:83:0d:58:b0:00:7e:8a:65:85:
2f:da:3f:6a:f4:9b:d3:6c:1c:3d:12:01:85:73:91:
58:d4:cc:9b:a8:e9:33:bc:26:39:0a:e5:f9:f3:f4:
5d:82:06:31:a0:b9:4f:95:42:4a:6d:c1:89:45:c5:
dd:22:85:87:61:c9:22:34:3d:b8:47:0a:77:d2:57:
b4:85:ee:75:1f:01:93:f7:9e:90:7e:4b:ee:9e:b3:
71:50:09:46:77:58:ab:a7:f1:90:7d:d6:49:6d:b7:
35:a4:c0:f2:2b:4d:6a:7c:b0:7a:de:56:b8:fe:5d:
0e:4a:8e:40:a3:d8:c7:f9:84:a6:a4:54:3d:80:5c:
2c:c9:49:62:69:4a:f4:9a:e2:08:df:54:81:cf:cd:
ca:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A3:C6:12:28:D3:51:89:F3:08:67:07:BE:6D:2A:E5:3E:B9:B9:05
X509v3 Authority Key Identifier:
keyid:8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5a:ab:42:c7:16:5e:a8:19:2c:69:b3:0a:d4:74:c0:6b:c1:
13:63:9e:04:40:e5:4d:ed:8c:fc:9e:23:a0:52:58:ef:14:b3:
36:7a:98:29:9d:e7:4d:ec:1b:53:e3:82:a3:06:75:d6:c1:99:
5e:42:ed:f0:2d:9b:35:de:07:af:37:3c:10:99:77:c5:5b:d8:
a1:7d:b7:e2:8c:89:dd:f1:97:62:1c:36:05:ef:d1:66:ad:41:
4f:75:46:06:e4:19:6f:0f:20:18:b7:2f:e5:6d:3e:ac:79:18:
df:b5:91:96:94:b6:28:61:d7:b6:bc:5e:54:fb:2f:17:59:62:
36:db:a9:4a:b2:71:a6:bf:4e:85:04:17:db:2d:9a:c4:75:a1:
0d:fa:af:4e:48:76:d1:f0:66:22:38:9a:7d:7d:3b:6f:60:fc:
e1:7b:45:fd:f9:f1:f9:7a:4e:6f:bd:e9:40:3c:e9:7c:3e:94:
bd:cc:28:ee:01:73:08:7a:64:7d:7f:8f:6d:45:68:99:42:17:
c2:c9:35:3b:7b:7d:21:27:d8:a5:ae:fe:8f:de:10:d6:05:01:
b0:6e:5a:6e:df:a8:6f:36:ef:cd:6a:14:e4:c5:67:ef:2b:49:
74:51:73:d8:e4:61:f0:73:5d:18:20:7f:1c:c9:d9:5d:a1:5b:
08:5b:5e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:42:06 2026 by rpki-client