Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
File: jha95kqam7o_-hQ4oZesP5SYn68.mft (raw, json)
Hash identifier: z6c1Xv4MSVb+y+zfGsppn7/9E2gk482dKFAs5wiJla8=
Subject key identifier: B4:5B:9D:3C:34:A7:99:F9:E2:4D:EB:62:DF:E2:5F:0E:B5:28:12:E6
Authority key identifier: 8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF
Certificate issuer: /CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf
Certificate serial: 01A08CE87A2DC33C8C9A273D22C2F5535CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
Manifest number: 0DDD
Signing time: Thu 10 Sep 2026 20:00:40 +0000
Manifest this update: Thu 10 Sep 2026 20:00:40 +0000
Manifest next update: Fri 11 Sep 2026 20:00:40 +0000
Files and hashes: 1: jha95kqam7o_-hQ4oZesP5SYn68.crl (hash: MjU0AxRERwxchepbFm5YBtMcy2qFGoJgpK/d+IkvujA=)
2: rIbppOfNfFYdHELW2Brc9R0i8ZQ.roa (hash: 6K2aNO9ERJucL5JHeR5DeWEg9tZjVrX7Cr/llqySGJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:7a:2d:c3:3c:8c:9a:27:3d:22:c2:f5:53:5c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf
Validity
Not Before: Sep 10 20:00:40 2026 GMT
Not After : Sep 11 20:00:40 2026 GMT
Subject: CN=b45b9d3c34a799f9e24deb62dfe25f0eb52812e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cd:ff:1a:51:0f:f0:5c:bd:86:ce:7d:ba:a0:
3b:90:0b:5e:9d:5b:c8:5b:28:96:15:47:d3:be:4f:
15:5e:bd:c7:5e:74:69:ca:6c:8a:b1:98:91:50:5f:
ff:59:4c:07:d4:2d:57:84:30:d4:b6:73:e4:2f:29:
27:46:aa:2a:a4:39:c7:09:b6:13:31:be:f9:f8:5a:
6e:a4:63:fb:83:22:62:d5:bc:d9:9b:11:37:b0:2a:
c5:47:c3:e9:cb:fe:20:6f:58:ae:11:8b:37:7a:31:
95:34:cc:3d:15:d3:b3:24:43:4a:91:3a:98:2b:91:
a9:fa:3d:1b:ca:73:27:a3:c7:00:45:1e:9c:f2:31:
cd:77:62:83:a0:7f:42:3f:f7:9a:dc:f1:71:ec:c5:
fd:51:2a:9e:32:f9:15:5c:b9:f2:a0:0b:97:97:c0:
86:05:c9:56:7a:1c:62:15:f8:d6:95:09:3d:03:cd:
9d:57:8f:ec:c4:41:94:dc:2a:42:c0:a8:ea:8b:2b:
9a:87:ea:1f:e6:ef:61:1e:bc:39:c9:56:3a:29:1a:
c2:fc:6b:b4:a6:29:c1:0a:c7:36:df:e3:e3:48:87:
5c:5a:91:b7:c3:2c:89:4a:eb:ab:d6:67:a9:98:a6:
90:d4:35:4d:00:0f:aa:d8:ca:88:08:dc:02:ae:60:
88:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5B:9D:3C:34:A7:99:F9:E2:4D:EB:62:DF:E2:5F:0E:B5:28:12:E6
X509v3 Authority Key Identifier:
keyid:8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:05:42:40:7b:c3:47:19:bc:6f:64:db:d7:4f:28:37:d4:d7:
9b:c9:2d:1d:48:49:f7:ce:3f:34:58:6d:f5:50:57:62:85:94:
73:36:c4:71:be:a5:78:4d:f0:c5:a3:49:53:6a:49:8b:17:86:
f4:e6:4a:48:4c:b6:70:b2:fd:fd:e3:5d:50:49:fb:dd:72:7e:
28:fc:54:ba:11:3a:47:1d:c8:c5:4e:4e:b6:4a:29:a5:f1:a3:
d2:7f:22:96:de:39:96:c7:2b:a6:d9:a6:46:95:db:c4:76:91:
be:1f:de:3c:e3:10:80:dd:b3:d8:df:39:47:b8:f7:79:a0:d4:
a7:6d:09:7b:33:0c:a5:16:91:30:e9:8d:29:a0:85:76:37:ca:
6c:44:d2:3d:b2:33:40:13:e1:11:4d:dc:05:93:e1:3c:35:5b:
74:a2:84:18:41:98:e1:60:86:b8:82:24:9f:6a:34:3d:f7:9f:
63:1a:3c:c6:7c:56:e1:fa:42:66:13:15:96:0f:63:9e:fc:29:
a5:e2:e5:1c:c9:d9:ea:c5:f9:f3:7e:ef:e7:8c:19:19:de:c7:
01:2d:02:0e:15:d7:f9:1a:a2:98:a0:4d:60:b1:1a:66:bd:06:
37:d9:83:41:94:60:f8:ec:2b:21:ca:71:84:97:c8:fe:3f:97:
80:d0:45:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:13:48 2026 by rpki-client