Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: IP5IemCL9zYcbzEOUU7MoA4hHHFNtVOQmu/U2aiSy1k=
Subject key identifier: 1E:30:F7:CC:32:6C:18:41:44:B5:26:7F:39:69:93:FF:66:9A:93:87
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 019E0A77E0BAF9AB4957A292114E05EE0D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 18FD
Signing time: Sat 09 May 2026 02:01:28 +0000
Manifest this update: Sat 09 May 2026 02:01:28 +0000
Manifest next update: Sun 10 May 2026 02:01:28 +0000
Files and hashes: 1: 5FzvwUIf_jEUll3PKrQMP5_suiU.asa (hash: MNHOEt9JisPhIb3wm1XE5W+hLf6wZBICFb3kH8XoROg=)
2: 8bD-7QTegEg52E0iZppyCdDUnzk.roa (hash: SIwdtnsAl+O53na0hHcKGea3jeX1u8/+0tuoQrFoHIc=)
3: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: YcEXeH5/p6BkRiQOmQc2M2k+go44TGdHHefE1MzgGO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0a:77:e0:ba:f9:ab:49:57:a2:92:11:4e:05:ee:0d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: May 9 02:01:28 2026 GMT
Not After : May 10 02:01:28 2026 GMT
Subject: CN=1e30f7cc326c184144b5267f396993ff669a9387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:15:3b:2d:fe:11:a0:b1:da:87:93:19:85:de:
77:56:97:27:99:55:d9:8e:09:d2:1f:a6:a2:38:ae:
bb:a4:3b:8f:f3:b7:c1:59:fe:3a:34:27:71:85:21:
75:05:92:a9:b1:52:91:63:1a:9e:b5:da:a1:c4:00:
c2:a3:60:13:3d:81:eb:40:79:ac:1b:97:33:c0:e3:
41:06:43:f6:e8:14:ff:2a:8a:e2:f4:c5:7e:f7:7b:
04:0a:cc:a5:56:6d:ed:b5:38:a5:4d:3f:4a:4f:26:
a9:7a:f6:9e:23:fe:d9:a2:8c:60:94:a7:4c:74:4a:
1c:f2:95:5b:59:d4:f6:db:1d:dd:e5:f9:d4:97:6a:
54:26:fa:55:9f:10:73:3f:7b:50:66:a1:49:91:65:
9b:f9:f6:b6:f8:a5:50:c8:ea:ea:1d:09:04:30:31:
fc:76:0f:15:3f:b0:73:8f:1b:e2:ad:76:4c:62:60:
0e:6d:5e:bf:28:1f:42:63:b8:2f:26:7a:ae:4a:a7:
00:9c:d7:72:19:da:6a:e0:79:92:51:20:00:7b:87:
fb:60:ec:bf:40:d4:06:0d:12:34:9f:77:b0:3a:fa:
2a:e1:6b:fc:d8:6b:6e:f3:68:91:f1:02:93:1d:ff:
78:e1:81:c8:4b:88:34:55:53:74:23:0a:03:9d:5d:
6e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:30:F7:CC:32:6C:18:41:44:B5:26:7F:39:69:93:FF:66:9A:93:87
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:28:07:14:86:2c:97:f3:a3:2c:d7:6f:4f:c9:d2:a3:83:2a:
55:aa:b3:d4:21:64:2f:f7:54:d3:6d:a6:31:fc:e6:4b:d4:19:
1c:42:2f:8f:bf:15:6a:92:30:f3:bb:67:ea:b0:0d:f0:5b:c2:
16:ff:51:5f:49:8e:ce:45:a0:63:9d:72:ac:72:65:03:96:89:
5c:5a:da:6b:f7:d2:60:62:4c:8f:ac:9f:09:ee:70:e2:a0:56:
69:62:b0:88:d4:c8:f5:c0:9e:5f:39:a6:44:51:ce:91:04:a5:
bc:d2:e9:ef:eb:b1:f5:c2:e6:58:b0:78:e9:b4:18:b6:5b:36:
07:f1:7a:db:e2:33:d4:e0:fe:6c:f5:a4:56:e5:62:ea:6e:01:
19:e3:c9:91:92:39:b2:67:72:3c:40:f4:8d:72:54:62:9b:1d:
a1:fe:0f:bd:6a:cd:3f:8b:21:1a:73:ef:2b:29:bb:2a:29:95:
47:55:eb:84:de:8e:de:e5:e5:84:dc:1d:1f:43:bd:73:c2:7e:
e4:6c:01:f3:64:a5:2c:ee:68:11:0f:7b:48:ef:e0:d9:fe:ab:
2c:77:72:68:13:de:37:bb:26:cb:44:45:c1:8a:8a:f7:7a:3d:
f9:41:46:34:a1:91:f6:e6:ca:e5:81:1f:fc:e7:c8:d0:18:c3:
00:19:aa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 13:25:15 2026 by rpki-client