Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: Y4j6Rtbr/eSDpYyMW3pbUOHaf+A570Vk/zjAiaNJzb4=
Subject key identifier: 36:A2:32:1C:4E:24:97:05:58:6A:28:63:51:28:DF:3C:32:B0:E2:8B
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 019EF61216F1F80D7E66BC4E1AA7DDC3E4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 1977
Signing time: Tue 23 Jun 2026 20:00:40 +0000
Manifest this update: Tue 23 Jun 2026 20:00:40 +0000
Manifest next update: Wed 24 Jun 2026 20:00:40 +0000
Files and hashes: 1: 5FzvwUIf_jEUll3PKrQMP5_suiU.asa (hash: MNHOEt9JisPhIb3wm1XE5W+hLf6wZBICFb3kH8XoROg=)
2: 8bD-7QTegEg52E0iZppyCdDUnzk.roa (hash: SIwdtnsAl+O53na0hHcKGea3jeX1u8/+0tuoQrFoHIc=)
3: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: 7XQkenWtEtqU9B2L58vhKslsYtXnkdFYqVTS6eAwyWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Jun 2026 19:47:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f6:12:16:f1:f8:0d:7e:66:bc:4e:1a:a7:dd:c3:e4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Jun 23 20:00:40 2026 GMT
Not After : Jun 24 20:00:40 2026 GMT
Subject: CN=36a2321c4e249705586a28635128df3c32b0e28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:98:fe:a3:fa:18:7b:c5:5b:71:99:2c:11:
7c:2e:cf:68:63:29:e7:ca:b2:1e:54:b5:e3:8a:fa:
35:9f:42:61:6c:87:f5:bb:24:a8:e8:6f:36:e7:48:
da:1c:92:d1:c3:d6:d9:ce:78:ed:a2:1b:5a:ce:73:
e0:39:01:3a:7e:ff:90:d7:d4:37:d1:42:bc:35:d3:
20:b0:3c:a5:3a:14:c0:f3:9f:3f:7f:74:b5:9b:7a:
2c:62:32:8b:2a:6f:fb:0f:51:87:97:91:10:5d:28:
96:24:34:28:74:6f:cb:c2:a6:f9:4b:e7:73:1b:ea:
2b:3c:85:64:3a:32:49:9d:f5:a5:87:f1:13:14:3d:
ad:23:71:ba:68:38:ea:82:09:16:e3:43:f1:bd:8d:
22:ac:58:e4:21:8b:c4:fb:b4:98:3b:c5:cb:22:68:
6f:20:d6:92:7d:4b:aa:08:a2:0e:6e:9a:e1:11:84:
50:6a:79:54:f9:86:f5:b9:31:f6:89:ff:42:45:8a:
75:72:ae:9b:22:5b:1f:db:48:38:79:b2:15:25:c3:
bd:a1:e7:f4:98:07:aa:6a:64:3c:72:26:89:2b:35:
9b:5a:61:54:6d:f9:ba:a0:b2:44:21:a6:a9:7a:16:
c9:ff:c2:43:22:72:1d:83:4f:c6:84:21:aa:8a:cf:
53:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A2:32:1C:4E:24:97:05:58:6A:28:63:51:28:DF:3C:32:B0:E2:8B
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:14:60:90:77:8e:10:b9:18:49:d1:7e:02:bd:39:34:2f:dc:
7b:5c:bd:24:97:eb:6c:85:7b:22:fa:31:1d:fd:72:6d:fa:39:
fd:25:9b:72:92:cf:83:54:d3:7d:de:78:a9:cf:04:22:51:58:
25:13:f4:35:2a:ed:c6:f9:e5:d3:1d:9d:a8:b5:21:1a:c7:11:
21:71:fe:5d:7c:0f:4d:e5:7d:f7:4f:fc:eb:5e:a0:3b:95:a9:
7e:54:98:aa:8c:37:0e:d3:dc:57:73:53:c0:de:ff:0b:12:95:
fd:b8:d4:38:b7:88:02:77:ce:2f:01:9f:d5:f7:cb:88:d6:39:
cf:de:72:32:f2:90:97:0b:31:e2:10:36:a3:fa:a0:d2:0e:c6:
9f:56:de:7c:a8:77:52:00:da:d7:85:2e:f8:72:f2:99:74:34:
38:a3:43:a8:94:b2:1d:0b:69:89:e1:30:95:2a:6a:b9:e9:7e:
39:f4:2f:ee:fb:99:e4:92:6e:92:5b:c4:93:17:2e:21:92:33:
38:de:b0:3a:d8:10:75:c1:64:08:04:c6:1f:f5:e2:7b:31:18:
28:5e:bd:74:a6:fb:ed:62:4a:18:ce:32:0b:52:26:80:37:2e:
63:5d:5b:68:84:c2:4e:75:cf:df:5e:47:84:e9:c5:5b:bb:24:
16:d2:5c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 01:34:09 2026 by rpki-client