
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.mft
File: jh2gFsQyBxOU1vaZrX7iQPvAd3o.mft (raw, json)
Hash identifier: swoSagEmN5sxr2zpcrP+J0PbIX3eI0T7dboe8JNYDnE=
Subject key identifier: 3A:58:82:9D:2E:92:74:7F:97:99:BB:67:26:BA:0B:0A:0C:28:F3:7E
Authority key identifier: 8E:1D:A0:16:C4:32:07:13:94:D6:F6:99:AD:7E:E2:40:FB:C0:77:7A
Certificate issuer: /CN=8e1da016c432071394d6f699ad7ee240fbc0777a
Certificate serial: 01A0016F82BAE824DA5FC04194F1AFA803E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh2gFsQyBxOU1vaZrX7iQPvAd3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.mft
Manifest number: 7A
Signing time: Fri 14 Aug 2026 18:01:20 +0000
Manifest this update: Fri 14 Aug 2026 18:01:20 +0000
Manifest next update: Sat 15 Aug 2026 18:01:20 +0000
Files and hashes: 1: XJya-NN--kVHLC8Eeq45UT2PGho.roa (hash: u0qg1SxkbakG4KokOoISrPOk++v8JDawI8U08mxXhpk=)
2: jh2gFsQyBxOU1vaZrX7iQPvAd3o.crl (hash: Ff02KsudSQoejfmiGuKzk+ewPgOXsa/j2yj57BplP7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jh2gFsQyBxOU1vaZrX7iQPvAd3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:82:ba:e8:24:da:5f:c0:41:94:f1:af:a8:03:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1da016c432071394d6f699ad7ee240fbc0777a
Validity
Not Before: Aug 14 18:01:20 2026 GMT
Not After : Aug 15 18:01:20 2026 GMT
Subject: CN=3a58829d2e92747f9799bb6726ba0b0a0c28f37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:09:36:01:1c:eb:f8:7e:e5:c8:14:84:6b:
65:e5:09:a8:db:d0:52:12:a1:05:a9:3f:fe:70:a5:
41:07:3b:f8:ca:63:3c:37:cb:3e:29:44:81:10:56:
3c:92:22:d6:7a:b6:b4:8a:38:ac:82:39:f9:b0:40:
d7:0f:dd:d3:c0:94:26:fc:55:d5:15:17:09:6f:8a:
7c:e3:23:a7:a4:ce:be:22:ff:e9:8b:ce:1e:5f:08:
01:8b:e0:09:7d:4e:52:20:e5:36:20:b4:0f:4b:7d:
d2:98:f6:00:8e:f3:3b:2f:4a:0d:49:73:93:3d:6b:
8c:79:7c:e8:bd:b1:9d:ee:06:16:c0:27:39:0b:47:
72:c4:be:54:b7:5d:f8:71:7a:63:d9:70:77:6d:58:
6a:fa:e8:7b:a3:d1:91:d0:8b:fe:84:bd:e1:0f:cb:
89:93:38:d2:6b:8b:8a:30:8d:c3:46:3a:4a:14:43:
11:d0:a8:fd:37:83:0a:ff:94:a6:56:dd:62:6a:83:
21:3e:ee:23:47:f4:90:18:0c:c7:ab:cc:c5:c0:eb:
94:52:b1:e0:9c:9a:c7:c7:d2:39:9d:92:61:66:03:
14:22:a0:6d:e2:17:72:17:ae:1f:55:75:dc:83:83:
c1:69:f7:46:2d:9e:e1:84:aa:17:34:9c:43:65:78:
7a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:58:82:9D:2E:92:74:7F:97:99:BB:67:26:BA:0B:0A:0C:28:F3:7E
X509v3 Authority Key Identifier:
keyid:8E:1D:A0:16:C4:32:07:13:94:D6:F6:99:AD:7E:E2:40:FB:C0:77:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh2gFsQyBxOU1vaZrX7iQPvAd3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:53:ac:f4:26:ee:ae:84:9b:fa:53:a8:12:de:8c:5f:f6:bc:
92:10:c2:2a:fc:04:b9:ec:76:83:9b:f7:44:b4:e8:92:04:0b:
8a:c4:58:77:9a:ac:ff:48:0d:85:67:0d:10:fd:99:bd:85:17:
bf:ad:db:d2:d7:ac:14:fc:85:df:01:7b:dc:3c:ee:3d:d8:c4:
44:41:76:ce:4b:bd:22:15:63:99:f2:11:0f:8b:4a:6b:34:f1:
fe:ba:5f:fc:ce:49:12:16:0c:1a:bb:71:1a:7b:a2:e1:6b:2e:
0d:a3:2d:3d:b4:e7:48:5c:1f:63:52:08:7e:5f:42:11:21:5f:
6a:35:35:65:b9:8a:af:43:de:3d:f2:6b:5f:73:fc:51:d6:9c:
77:39:2e:45:3d:85:91:03:52:40:3f:53:21:5b:71:0c:33:67:
5c:e1:39:22:a8:22:d9:4d:a8:43:0a:b4:85:ba:90:95:43:31:
66:e3:4e:9a:89:53:6b:d0:7f:b9:40:4e:1c:82:81:04:e2:20:
af:87:cf:11:8a:27:28:6f:27:2d:e2:63:02:b0:85:84:9f:33:
86:38:be:a9:ec:0f:59:53:df:c0:ff:aa:71:7c:7f:68:7f:97:
a6:39:86:7a:e4:8c:b4:3e:cd:f1:1c:db:0f:f7:1c:dc:98:5b:
3e:49:aa:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb4K66CTaX8BBlPGvqAPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWRhMDE2YzQzMjA3MTM5NGQ2ZjY5OWFkN2VlMjQwZmJj
MDc3N2EwHhcNMjYwODE0MTgwMTIwWhcNMjYwODE1MTgwMTIwWjAzMTEwLwYDVQQD
EygzYTU4ODI5ZDJlOTI3NDdmOTc5OWJiNjcyNmJhMGIwYTBjMjhmMzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBwJNgEc6/h+5cgUhGtl5Qmo29BS
EqEFqT/+cKVBBzv4ymM8N8s+KUSBEFY8kiLWera0ijisgjn5sEDXD93TwJQm/FXV
FRcJb4p84yOnpM6+Iv/pi84eXwgBi+AJfU5SIOU2ILQPS33SmPYAjvM7L0oNSXOT
PWuMeXzovbGd7gYWwCc5C0dyxL5Ut134cXpj2XB3bVhq+uh7o9GR0Iv+hL3hD8uJ
kzjSa4uKMI3DRjpKFEMR0Kj9N4MK/5SmVt1iaoMhPu4jR/SQGAzHq8zFwOuUUrHg
nJrHx9I5nZJhZgMUIqBt4hdyF64fVXXcg4PBafdGLZ7hhKoXNJxDZXh6XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpYgp0uknR/l5m7Zya6CwoMKPN+MB8GA1UdIwQY
MBaAFI4doBbEMgcTlNb2ma1+4kD7wHd6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamgyZ0ZzUXlCeE9VMXZhWnJYN2lRUHZBZDNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjct
ZDAyYWFmYjgzMmM0LzEvamgyZ0ZzUXlCeE9VMXZhWnJYN2lRUHZBZDNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjctZDAyYWFmYjgzMmM0
LzEvamgyZ0ZzUXlCeE9VMXZhWnJYN2lRUHZBZDNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1Os9Cbu
roSb+lOoEt6MX/a8khDCKvwEuex2g5v3RLTokgQLisRYd5qs/0gNhWcNEP2ZvYUX
v63b0tesFPyF3wF73DzuPdjEREF2zku9IhVjmfIRD4tKazTx/rpf/M5JEhYMGrtx
Gnui4WsuDaMtPbTnSFwfY1IIfl9CESFfajU1ZbmKr0PePfJrX3P8UdacdzkuRT2F
kQNSQD9TIVtxDDNnXOE5Iqgi2U2oQwq0hbqQlUMxZuNOmolTa9B/uUBOHIKBBOIg
r4fPEYonKG8nLeJjArCFhJ8zhji+qewPWVPfwP+qcXx/aH+XpjmGeuSMtD7N8Rzb
D/cc3JhbPkmqCQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:26:08 2026 by rpki-client