Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
File: 0jh3jxNJtXVBjBnjg9BXGuvuot8.mft (raw, json)
Hash identifier: b9djTaeG3fat8f0jquT++K52I10xTQtS5rSsZKSePRo=
Subject key identifier: F9:4A:97:11:BD:24:AD:B3:44:7E:4B:3A:09:EE:13:55:08:3F:31:50
Authority key identifier: D2:38:77:8F:13:49:B5:75:41:8C:19:E3:83:D0:57:1A:EB:EE:A2:DF
Certificate issuer: /CN=d238778f1349b575418c19e383d0571aebeea2df
Certificate serial: 01A03F72C2ABFD318E828C2DE25DBFD392A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
Manifest number: 0134
Signing time: Wed 26 Aug 2026 19:01:20 +0000
Manifest this update: Wed 26 Aug 2026 19:01:20 +0000
Manifest next update: Thu 27 Aug 2026 19:01:20 +0000
Files and hashes: 1: 0jh3jxNJtXVBjBnjg9BXGuvuot8.crl (hash: esRsK0unnffDW32ZlLONOn2y6CkJFX2uljkm2PZHzBI=)
2: Ja7890_tG369n2EpikrlxKOH7eo.roa (hash: dUDn7iA585Me0xPD3yCTHJGFysgJ0UVLXEuuoAzLUoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:c2:ab:fd:31:8e:82:8c:2d:e2:5d:bf:d3:92:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d238778f1349b575418c19e383d0571aebeea2df
Validity
Not Before: Aug 26 19:01:20 2026 GMT
Not After : Aug 27 19:01:20 2026 GMT
Subject: CN=f94a9711bd24adb3447e4b3a09ee1355083f3150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:b3:68:0f:30:84:04:fc:7b:6d:e9:bc:16:
21:d3:25:82:35:85:6b:1c:71:85:19:05:a3:0f:19:
40:8f:a1:5b:76:59:af:dc:41:64:8d:56:8a:3d:a8:
6a:9a:a0:d9:a6:8b:70:55:ed:1f:1b:c4:d2:e8:55:
80:71:74:ff:c2:34:60:43:27:df:47:e3:4e:e2:13:
d4:29:8f:39:5b:bd:77:ad:f2:e8:1b:53:19:4a:15:
7b:7f:e3:b1:ff:5d:d8:0a:3d:4e:c5:5f:bf:50:e5:
98:d3:42:b7:26:b0:23:c0:4e:74:5d:de:de:42:c1:
fa:26:47:38:e1:25:31:d9:0c:7c:f3:87:88:d4:7d:
81:0a:73:e4:26:ff:b3:fe:93:55:b6:02:f9:71:11:
53:9a:91:3c:bc:00:f8:2f:8b:f0:d0:8f:14:07:3f:
e5:a2:49:11:8d:dc:50:61:1a:c3:45:08:ad:93:c5:
0c:f2:48:7a:36:a0:53:45:56:9b:e4:fd:cf:ae:be:
34:e0:78:39:55:b2:32:cc:19:fa:cf:a5:8a:8f:a3:
de:e9:7d:25:7f:39:48:a6:75:51:b3:70:48:24:97:
94:b9:8b:d4:d9:c0:d4:58:2e:c3:f0:ff:2b:3f:5d:
8a:51:9b:2b:ec:58:1d:61:0d:61:37:20:64:54:bd:
85:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4A:97:11:BD:24:AD:B3:44:7E:4B:3A:09:EE:13:55:08:3F:31:50
X509v3 Authority Key Identifier:
keyid:D2:38:77:8F:13:49:B5:75:41:8C:19:E3:83:D0:57:1A:EB:EE:A2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:28:20:ab:88:b7:7b:15:95:f6:37:e4:52:e9:c0:ae:41:5d:
31:62:25:8b:f8:2b:49:91:e9:e3:74:83:79:76:cc:f7:ec:25:
38:1f:11:09:fd:29:38:de:5b:b3:54:4a:55:3d:dd:a9:b2:b6:
9b:ac:6f:46:a3:fc:39:7b:a2:e7:8b:a0:c4:6c:23:a6:67:04:
6d:73:59:06:05:cf:92:39:d2:c8:5d:e4:97:fe:65:39:27:dc:
61:d7:04:41:a6:a2:1d:85:e3:cb:45:34:2b:72:cb:fb:38:e5:
31:5a:95:73:2d:e2:76:be:f9:98:36:bf:da:6a:95:d0:41:c2:
d6:cb:0f:58:17:44:42:ec:07:fe:64:a7:cd:ba:6b:07:30:f6:
9d:cb:d1:bb:37:d9:11:88:5a:7f:5b:1c:55:7b:0e:e9:8c:6d:
c4:49:ea:5e:64:7f:43:10:42:32:3b:43:bc:7b:68:ed:e9:30:
f4:f4:90:ff:66:d6:05:b2:89:02:9c:2c:0a:10:fd:4d:9e:cf:
ff:c2:51:18:3d:3c:be:97:da:2b:6c:a1:cd:44:4a:3a:e6:25:
41:0a:ca:fa:39:69:16:5f:6e:a6:d1:77:fa:fa:a7:77:41:a3:
40:58:ac:ed:2e:53:22:94:1e:49:30:db:d8:77:09:6d:3d:6d:
41:d3:d2:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/csKr/TGOgowt4l2/05KmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzg3NzhmMTM0OWI1NzU0MThjMTllMzgzZDA1NzFhZWJl
ZWEyZGYwHhcNMjYwODI2MTkwMTIwWhcNMjYwODI3MTkwMTIwWjAzMTEwLwYDVQQD
EyhmOTRhOTcxMWJkMjRhZGIzNDQ3ZTRiM2EwOWVlMTM1NTA4M2YzMTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdOzaA8whAT8e23pvBYh0yWCNYVr
HHGFGQWjDxlAj6Fbdlmv3EFkjVaKPahqmqDZpotwVe0fG8TS6FWAcXT/wjRgQyff
R+NO4hPUKY85W713rfLoG1MZShV7f+Ox/13YCj1OxV+/UOWY00K3JrAjwE50Xd7e
QsH6Jkc44SUx2Qx884eI1H2BCnPkJv+z/pNVtgL5cRFTmpE8vAD4L4vw0I8UBz/l
okkRjdxQYRrDRQitk8UM8kh6NqBTRVab5P3Prr404Hg5VbIyzBn6z6WKj6Pe6X0l
fzlIpnVRs3BIJJeUuYvU2cDUWC7D8P8rP12KUZsr7FgdYQ1hNyBkVL2FiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlKlxG9JK2zRH5LOgnuE1UIPzFQMB8GA1UdIwQY
MBaAFNI4d48TSbV1QYwZ44PQVxrr7qLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpoM2p4Tkp0WFZCakJuamc5QlhHdXZ1b3Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81ZjcyYmMtY2FmNC00ZWRmLTk0MzIt
ZWMyYzE5ZWI2N2Y2LzEvMGpoM2p4Tkp0WFZCakJuamc5QlhHdXZ1b3Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS81ZjcyYmMtY2FmNC00ZWRmLTk0MzItZWMyYzE5ZWI2N2Y2
LzEvMGpoM2p4Tkp0WFZCakJuamc5QlhHdXZ1b3Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCggq4i3
exWV9jfkUunArkFdMWIli/grSZHp43SDeXbM9+wlOB8RCf0pON5bs1RKVT3dqbK2
m6xvRqP8OXui54ugxGwjpmcEbXNZBgXPkjnSyF3kl/5lOSfcYdcEQaaiHYXjy0U0
K3LL+zjlMVqVcy3idr75mDa/2mqV0EHC1ssPWBdEQuwH/mSnzbprBzD2ncvRuzfZ
EYhaf1scVXsO6YxtxEnqXmR/QxBCMjtDvHto7ekw9PSQ/2bWBbKJApwsChD9TZ7P
/8JRGD08vpfaK2yhzURKOuYlQQrK+jlpFl9uptF3+vqnd0GjQFis7S5TIpQeSTDb
2HcJbT1tQdPSDw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:34:59 2026 by rpki-client