Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
File: 0jh3jxNJtXVBjBnjg9BXGuvuot8.mft (raw, json)
Hash identifier: 1ibFh39fAe6+ltHOSiYNRWrQzotyNQG+C/zONvFZARo=
Subject key identifier: 11:38:C1:D4:D0:C1:52:22:0F:D5:DF:74:B0:9F:AF:18:73:AC:9B:C5
Authority key identifier: D2:38:77:8F:13:49:B5:75:41:8C:19:E3:83:D0:57:1A:EB:EE:A2:DF
Certificate issuer: /CN=d238778f1349b575418c19e383d0571aebeea2df
Certificate serial: 019E683C8A2DACDD237C224C54A7E1658BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
Manifest number: 40
Signing time: Wed 27 May 2026 07:00:58 +0000
Manifest this update: Wed 27 May 2026 07:00:58 +0000
Manifest next update: Thu 28 May 2026 07:00:58 +0000
Files and hashes: 1: 0jh3jxNJtXVBjBnjg9BXGuvuot8.crl (hash: PRwaKdygJfuhaTkxFc0tc6qSN83Ejvz1cRxhrX/Iz/M=)
2: Ja7890_tG369n2EpikrlxKOH7eo.roa (hash: dUDn7iA585Me0xPD3yCTHJGFysgJ0UVLXEuuoAzLUoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:68:3c:8a:2d:ac:dd:23:7c:22:4c:54:a7:e1:65:8b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d238778f1349b575418c19e383d0571aebeea2df
Validity
Not Before: May 27 07:00:58 2026 GMT
Not After : May 28 07:00:58 2026 GMT
Subject: CN=1138c1d4d0c152220fd5df74b09faf1873ac9bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:e3:ac:0b:51:2a:ba:fc:7e:c9:b8:2b:91:
9c:48:86:a9:6f:c6:0a:56:c4:c1:63:00:69:69:e7:
b4:6e:2c:76:cc:c3:ea:af:ad:f3:cc:0a:9f:e7:44:
b4:50:cb:c5:d1:0f:48:da:59:d6:b9:f0:c5:e4:b1:
09:ac:10:50:f8:77:d0:bd:a3:5c:fd:87:10:45:73:
d9:cb:95:e2:b2:32:e0:83:4d:9d:02:2d:8b:ee:1e:
d4:71:61:5c:df:96:ef:40:99:6f:f4:00:89:2b:a6:
93:5d:65:13:f9:81:fc:dc:c5:6b:80:de:19:1d:4a:
f8:c8:a2:b3:df:1c:7a:ee:e8:f2:1d:9f:6a:84:c2:
db:49:95:34:ec:af:7a:98:f1:cd:bd:57:f5:13:21:
83:bc:cb:8d:db:62:04:e9:c8:e0:96:0f:b0:f5:74:
22:5a:76:09:54:da:02:1c:0b:80:34:af:cd:e7:6c:
63:bb:bf:d8:0c:1e:0a:ab:96:34:17:32:74:90:4b:
81:18:b1:03:40:35:f9:b6:a3:37:33:bd:cc:35:4b:
a3:2a:fb:0e:3b:57:9c:26:a5:b6:1d:1e:5f:53:69:
34:ff:3a:92:35:e6:23:14:93:1f:0d:8b:f9:be:68:
5f:9f:6f:bb:9d:44:ff:a7:f9:05:33:62:b0:d1:ca:
18:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:38:C1:D4:D0:C1:52:22:0F:D5:DF:74:B0:9F:AF:18:73:AC:9B:C5
X509v3 Authority Key Identifier:
keyid:D2:38:77:8F:13:49:B5:75:41:8C:19:E3:83:D0:57:1A:EB:EE:A2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9a:26:67:dd:73:8a:cc:c2:72:85:4a:34:d3:54:d4:71:f7:
da:6a:f9:2c:fc:76:41:9f:20:84:45:9f:8f:2c:77:d7:ab:68:
af:cd:63:78:ff:8a:62:b3:ea:29:23:49:99:6d:bb:66:87:1e:
bd:07:8b:4f:82:ef:b4:6c:52:d1:8f:ce:c6:0c:3e:a3:57:49:
5c:0f:23:a1:0d:43:a3:00:a1:ec:ca:9b:16:65:60:32:91:b9:
ab:24:59:85:4d:4b:11:cb:54:f1:f0:13:7b:c0:6a:36:de:2b:
3d:a1:d1:bc:f7:54:cb:24:0d:be:ef:ac:99:25:81:c8:dc:c8:
6c:da:d9:fb:20:25:dd:fc:98:02:98:66:f2:8b:74:77:52:1a:
3a:3f:17:15:12:29:a4:66:df:34:5e:55:33:e2:7d:bf:c6:19:
ca:70:b2:de:0e:23:7e:49:31:e0:22:43:84:d4:d9:b5:37:db:
8f:4c:b9:f6:a4:b2:f2:b2:b3:f4:06:e3:5d:f7:19:3b:1a:3c:
9f:e1:dd:76:ef:b7:83:a9:6a:c5:5b:f5:19:87:94:22:10:93:
96:82:35:dc:91:81:46:8c:cd:c5:f1:17:64:28:86:ca:1a:e6:
77:78:66:a7:49:e2:06:a3:57:73:ff:6c:2e:96:76:cd:c9:0c:
78:d4:a9:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5oPIotrN0jfCJMVKfhZYutMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzg3NzhmMTM0OWI1NzU0MThjMTllMzgzZDA1NzFhZWJl
ZWEyZGYwHhcNMjYwNTI3MDcwMDU4WhcNMjYwNTI4MDcwMDU4WjAzMTEwLwYDVQQD
EygxMTM4YzFkNGQwYzE1MjIyMGZkNWRmNzRiMDlmYWYxODczYWM5YmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JrjrAtRKrr8fsm4K5GcSIapb8YK
VsTBYwBpaee0bix2zMPqr63zzAqf50S0UMvF0Q9I2lnWufDF5LEJrBBQ+HfQvaNc
/YcQRXPZy5XisjLgg02dAi2L7h7UcWFc35bvQJlv9ACJK6aTXWUT+YH83MVrgN4Z
HUr4yKKz3xx67ujyHZ9qhMLbSZU07K96mPHNvVf1EyGDvMuN22IE6cjglg+w9XQi
WnYJVNoCHAuANK/N52xju7/YDB4Kq5Y0FzJ0kEuBGLEDQDX5tqM3M73MNUujKvsO
O1ecJqW2HR5fU2k0/zqSNeYjFJMfDYv5vmhfn2+7nUT/p/kFM2Kw0coYcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBE4wdTQwVIiD9XfdLCfrxhzrJvFMB8GA1UdIwQY
MBaAFNI4d48TSbV1QYwZ44PQVxrr7qLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpoM2p4Tkp0WFZCakJuamc5QlhHdXZ1b3Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81ZjcyYmMtY2FmNC00ZWRmLTk0MzIt
ZWMyYzE5ZWI2N2Y2LzEvMGpoM2p4Tkp0WFZCakJuamc5QlhHdXZ1b3Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS81ZjcyYmMtY2FmNC00ZWRmLTk0MzItZWMyYzE5ZWI2N2Y2
LzEvMGpoM2p4Tkp0WFZCakJuamc5QlhHdXZ1b3Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJomZ91z
iszCcoVKNNNU1HH32mr5LPx2QZ8ghEWfjyx316tor81jeP+KYrPqKSNJmW27Zoce
vQeLT4LvtGxS0Y/Oxgw+o1dJXA8joQ1DowCh7MqbFmVgMpG5qyRZhU1LEctU8fAT
e8BqNt4rPaHRvPdUyyQNvu+smSWByNzIbNrZ+yAl3fyYAphm8ot0d1IaOj8XFRIp
pGbfNF5VM+J9v8YZynCy3g4jfkkx4CJDhNTZtTfbj0y59qSy8rKz9AbjXfcZOxo8
n+Hddu+3g6lqxVv1GYeUIhCTloI13JGBRozNxfEXZCiGyhrmd3hmp0niBqNXc/9s
LpZ2zckMeNSp6g==
-----END CERTIFICATE-----
Generated at Wed May 27 17:50:26 2026 by rpki-client