Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
File: jha95kqam7o_-hQ4oZesP5SYn68.mft (raw, json)
Hash identifier: VtnNeh6eFahBijvmZpP2rDkMvaTIgtsBonFmQQuIgik=
Subject key identifier: 9E:08:6C:28:F8:74:D5:C2:87:A3:F5:CA:D4:96:6D:FB:C7:45:D2:1B
Authority key identifier: 8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF
Certificate issuer: /CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf
Certificate serial: 019FA33C30E4021B01B29EFFB1CE2D0D08F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
Manifest number: 0D64
Signing time: Mon 27 Jul 2026 11:00:58 +0000
Manifest this update: Mon 27 Jul 2026 11:00:58 +0000
Manifest next update: Tue 28 Jul 2026 11:00:58 +0000
Files and hashes: 1: jha95kqam7o_-hQ4oZesP5SYn68.crl (hash: P3ZAbrraRGD84nf7gnZhj+11l8wq+UNegk7a13oGGXQ=)
2: rIbppOfNfFYdHELW2Brc9R0i8ZQ.roa (hash: 6K2aNO9ERJucL5JHeR5DeWEg9tZjVrX7Cr/llqySGJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:30:e4:02:1b:01:b2:9e:ff:b1:ce:2d:0d:08:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf
Validity
Not Before: Jul 27 11:00:58 2026 GMT
Not After : Jul 28 11:00:58 2026 GMT
Subject: CN=9e086c28f874d5c287a3f5cad4966dfbc745d21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:8e:4b:0b:4c:7b:30:0e:32:63:ab:e2:64:
3a:a3:fd:52:52:43:2a:59:04:8c:62:a5:66:13:78:
70:1d:65:9d:9f:91:74:a4:ed:5e:53:df:09:10:fd:
7f:b5:47:f4:0f:c7:d9:ff:99:4f:a2:72:e9:ca:4c:
88:8e:78:a1:eb:90:8d:9c:26:1a:80:e1:bb:53:1d:
20:2b:39:db:b2:e8:94:62:c8:46:07:ff:ac:4c:26:
fb:8d:2f:cd:8e:33:6d:58:90:71:97:ce:3f:76:a6:
e5:10:85:4b:63:04:5b:f9:e0:d0:7a:bf:80:53:e6:
5c:79:4c:33:e3:03:62:20:20:b5:ae:66:a7:61:2d:
50:73:3c:8b:f8:ca:40:0a:17:b4:23:18:e5:2e:c8:
9e:00:b8:5f:01:ac:2d:7d:0a:91:0d:6e:d9:51:f9:
92:8f:65:59:8c:e6:4c:8f:2b:68:28:38:a1:0b:2d:
6d:b4:a3:f4:0f:44:19:72:62:e4:e4:6d:d5:bd:b3:
b7:4c:74:3a:b1:61:3b:76:22:32:1b:ec:f2:ea:d8:
d5:ba:a5:51:ba:72:71:1b:58:36:3a:49:6f:d4:e9:
04:6d:77:fa:74:b1:be:0b:57:c6:3c:fb:dd:b3:51:
6b:37:c9:e0:97:8b:04:de:3c:e3:da:08:b6:44:88:
8e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:08:6C:28:F8:74:D5:C2:87:A3:F5:CA:D4:96:6D:FB:C7:45:D2:1B
X509v3 Authority Key Identifier:
keyid:8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2f:ef:d8:8c:04:8b:ee:1e:08:76:69:e5:37:40:34:dd:e0:
bc:fe:18:da:f0:42:d8:56:a1:ef:80:53:b9:3c:e1:23:b9:95:
14:c1:1c:2f:83:4a:bc:27:d4:df:e4:16:e2:65:ef:16:22:83:
5f:d8:00:1f:cc:d4:ce:ea:62:fa:54:27:f3:6b:36:07:0d:56:
a7:e0:41:f3:4a:5c:14:71:9a:97:d2:17:a8:fc:41:76:66:ff:
38:64:4e:dc:76:9b:de:48:10:12:03:cf:9c:9a:f4:01:2b:42:
78:68:fd:8c:61:63:79:3d:93:ac:60:ba:36:f3:f7:35:bd:d8:
71:bf:c8:6d:26:75:25:2b:99:f1:78:fd:49:60:a1:28:9d:6d:
2f:9c:5e:cf:04:46:88:29:6d:c9:38:95:e8:37:73:db:67:e0:
2f:f9:ad:a2:4d:0a:23:9a:12:0f:6f:2f:ac:1e:66:1a:a4:cf:
4b:25:a3:7d:9d:d5:01:a1:0a:24:05:ca:4a:7b:79:78:ed:98:
04:41:a7:36:18:8a:7f:7c:32:ea:2f:74:f6:c1:32:d6:80:e3:
a4:87:ed:6c:96:6b:73:03:4f:df:d1:65:82:8c:7d:3d:4a:60:
3f:d6:1d:23:7f:c8:25:85:91:66:9d:f3:83:8b:ed:98:a2:67:
ec:87:f6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:23:28 2026 by rpki-client