Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
File: 0jh3jxNJtXVBjBnjg9BXGuvuot8.mft (raw, json)
Hash identifier: RU4CHdKax/Tnmsw0lFAXIFU8wSaKtEHIrXi8hFOwBYs=
Subject key identifier: B3:21:D2:81:48:8F:D0:A5:6A:E9:B1:42:60:ED:17:CD:54:0F:30:44
Authority key identifier: D2:38:77:8F:13:49:B5:75:41:8C:19:E3:83:D0:57:1A:EB:EE:A2:DF
Certificate issuer: /CN=d238778f1349b575418c19e383d0571aebeea2df
Certificate serial: 019F53D7EE9661FC246B40EAD8E56F2E8AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
Manifest number: BA
Signing time: Sun 12 Jul 2026 01:01:27 +0000
Manifest this update: Sun 12 Jul 2026 01:01:27 +0000
Manifest next update: Mon 13 Jul 2026 01:01:27 +0000
Files and hashes: 1: 0jh3jxNJtXVBjBnjg9BXGuvuot8.crl (hash: F5Qko07zhDODgqSdS8molFbUnwWy5ZqLrljGoydknrU=)
2: Ja7890_tG369n2EpikrlxKOH7eo.roa (hash: dUDn7iA585Me0xPD3yCTHJGFysgJ0UVLXEuuoAzLUoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:53:d7:ee:96:61:fc:24:6b:40:ea:d8:e5:6f:2e:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d238778f1349b575418c19e383d0571aebeea2df
Validity
Not Before: Jul 12 01:01:27 2026 GMT
Not After : Jul 13 01:01:27 2026 GMT
Subject: CN=b321d281488fd0a56ae9b14260ed17cd540f3044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2d:bc:2a:56:89:c3:88:d9:1f:0e:e6:7a:0e:
79:29:2f:df:78:c5:fd:35:2f:35:d4:e3:9c:95:cc:
3f:34:8a:68:65:8b:e7:fc:30:2f:ad:f9:f1:f9:20:
40:72:30:5d:9f:5f:96:e5:55:38:9d:98:c9:e1:81:
b6:f3:f9:fb:7f:b5:36:89:9d:38:f0:e4:ea:82:d4:
32:68:64:be:58:6c:eb:2f:68:55:73:54:e4:47:d3:
34:d6:b9:28:67:87:30:0b:49:b6:f4:54:02:71:05:
09:96:7c:d2:a6:1d:b2:48:31:12:f7:b2:53:5a:5a:
8c:49:8d:60:19:62:f6:ff:1f:01:37:0d:88:4e:a3:
70:56:a3:ae:e8:8f:18:fc:e0:2f:e9:f1:7f:e3:65:
a4:fa:d0:28:55:0e:57:cf:7e:46:7b:97:b9:6f:3b:
d3:7d:96:32:19:ad:a9:9e:62:9d:0e:c7:4a:8d:1d:
21:50:cf:f3:d0:d5:70:c8:35:41:86:34:3b:77:5e:
4a:37:dd:70:01:5d:60:5e:30:54:0c:4c:ba:3c:23:
55:c4:14:34:f5:35:89:60:bc:41:a4:3c:84:c4:0c:
4b:ea:85:fb:c3:20:ee:0d:00:fe:9f:fa:25:a7:67:
e7:ee:e1:eb:80:0a:85:7d:28:f1:8d:aa:75:3d:49:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:21:D2:81:48:8F:D0:A5:6A:E9:B1:42:60:ED:17:CD:54:0F:30:44
X509v3 Authority Key Identifier:
keyid:D2:38:77:8F:13:49:B5:75:41:8C:19:E3:83:D0:57:1A:EB:EE:A2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ca:fb:d6:55:6f:a0:97:db:ec:b4:97:6d:23:91:57:1d:d8:
54:0c:df:6f:33:9a:86:31:b3:7d:83:2c:68:0c:05:02:05:f9:
27:df:b9:d9:cf:eb:fd:30:45:8d:8a:02:b0:47:be:c5:91:61:
77:14:50:20:4b:c4:cc:75:03:36:42:04:d9:ae:1d:8c:10:a5:
49:ea:0d:04:e6:71:23:3c:c3:7a:84:42:a2:dd:e0:58:89:9f:
37:10:ed:84:49:04:42:09:3b:83:dd:42:85:bb:e9:95:d0:a7:
3e:e6:3e:ce:bc:47:27:a7:7f:58:c4:0f:bc:c9:03:d8:4a:5a:
3c:3b:b8:d3:b1:dc:7d:71:2a:d8:7a:3f:a6:bb:1e:fa:f3:01:
cd:c5:2e:bb:d7:ee:19:3f:e7:77:f6:d6:97:6b:87:77:ff:46:
a7:49:aa:35:38:96:c9:e5:2b:75:7b:5c:65:71:16:c1:bc:f8:
9b:38:fa:41:f1:28:52:62:b4:74:e6:25:44:9a:e1:24:89:7d:
a5:c0:15:05:83:27:3e:b4:e3:37:ce:16:56:73:0e:6b:f3:fe:
66:ca:54:d8:2e:76:4e:57:a5:0b:8d:7d:10:a9:c7:f7:8b:68:
58:a9:77:af:fd:64:ee:c4:77:7b:0d:54:ab:c6:c9:f5:83:11:
04:59:db:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9T1+6WYfwka0Dq2OVvLorAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzg3NzhmMTM0OWI1NzU0MThjMTllMzgzZDA1NzFhZWJl
ZWEyZGYwHhcNMjYwNzEyMDEwMTI3WhcNMjYwNzEzMDEwMTI3WjAzMTEwLwYDVQQD
EyhiMzIxZDI4MTQ4OGZkMGE1NmFlOWIxNDI2MGVkMTdjZDU0MGYzMDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy28KlaJw4jZHw7meg55KS/feMX9
NS811OOclcw/NIpoZYvn/DAvrfnx+SBAcjBdn1+W5VU4nZjJ4YG28/n7f7U2iZ04
8OTqgtQyaGS+WGzrL2hVc1TkR9M01rkoZ4cwC0m29FQCcQUJlnzSph2ySDES97JT
WlqMSY1gGWL2/x8BNw2ITqNwVqOu6I8Y/OAv6fF/42Wk+tAoVQ5Xz35Ge5e5bzvT
fZYyGa2pnmKdDsdKjR0hUM/z0NVwyDVBhjQ7d15KN91wAV1gXjBUDEy6PCNVxBQ0
9TWJYLxBpDyExAxL6oX7wyDuDQD+n/olp2fn7uHrgAqFfSjxjap1PUnLUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMh0oFIj9ClaumxQmDtF81UDzBEMB8GA1UdIwQY
MBaAFNI4d48TSbV1QYwZ44PQVxrr7qLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpoM2p4Tkp0WFZCakJuamc5QlhHdXZ1b3Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81ZjcyYmMtY2FmNC00ZWRmLTk0MzIt
ZWMyYzE5ZWI2N2Y2LzEvMGpoM2p4Tkp0WFZCakJuamc5QlhHdXZ1b3Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS81ZjcyYmMtY2FmNC00ZWRmLTk0MzItZWMyYzE5ZWI2N2Y2
LzEvMGpoM2p4Tkp0WFZCakJuamc5QlhHdXZ1b3Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsr71lVv
oJfb7LSXbSORVx3YVAzfbzOahjGzfYMsaAwFAgX5J9+52c/r/TBFjYoCsEe+xZFh
dxRQIEvEzHUDNkIE2a4djBClSeoNBOZxIzzDeoRCot3gWImfNxDthEkEQgk7g91C
hbvpldCnPuY+zrxHJ6d/WMQPvMkD2EpaPDu407HcfXEq2Ho/prse+vMBzcUuu9fu
GT/nd/bWl2uHd/9Gp0mqNTiWyeUrdXtcZXEWwbz4mzj6QfEoUmK0dOYlRJrhJIl9
pcAVBYMnPrTjN84WVnMOa/P+ZspU2C52TlelC419EKnH94toWKl3r/1k7sR3ew1U
q8bJ9YMRBFnbOw==
-----END CERTIFICATE-----
Generated at Sun Jul 12 06:56:13 2026 by rpki-client