Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
File: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft (raw, json)
Hash identifier: m8WqjjuudgF57IRAg21j+pxBhAVZ2kk93K6vbUx2qBs=
Subject key identifier: 52:67:50:4D:4D:91:28:CB:69:84:CA:F4:FE:91:78:05:6B:78:33:A2
Authority key identifier: 24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
Certificate issuer: /CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Certificate serial: 01A14C4F6FCBAB953B2B3EF6773B1DBF9A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
Manifest number: 08AB
Signing time: Sun 18 Oct 2026 00:00:36 +0000
Manifest this update: Sun 18 Oct 2026 00:00:36 +0000
Manifest next update: Mon 19 Oct 2026 00:00:36 +0000
Files and hashes: 1: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl (hash: cLOTECYW3D0b1puT7l+/sjToI3hXqO2VgTLcydeTe3I=)
2: of5fvbBOl_2ZOya6SQ0xsXlOVng.roa (hash: FlPfu4dwMoPwrHiBDoZEfb7scYNLSD/+Wl4U6dL0V+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:4f:6f:cb:ab:95:3b:2b:3e:f6:77:3b:1d:bf:9a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Validity
Not Before: Oct 18 00:00:36 2026 GMT
Not After : Oct 19 00:00:36 2026 GMT
Subject: CN=5267504d4d9128cb6984caf4fe9178056b7833a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:92:ea:3e:0a:2f:45:e7:6e:06:f7:ff:c7:23:
f2:fa:57:1b:33:c4:67:f7:dd:89:10:65:51:4e:70:
81:80:1d:a8:5a:55:77:20:69:d0:39:b4:98:34:21:
39:e4:4a:64:47:7e:a8:a2:32:84:10:fa:8a:ab:e5:
fc:74:72:87:4d:b1:5d:03:68:39:30:7c:0e:7f:1c:
63:d1:4e:03:b9:ed:59:d7:3a:87:b0:9e:36:08:6b:
0f:91:a9:75:6a:e3:2e:78:76:2b:d0:8c:44:b2:b4:
c4:77:f7:b5:93:25:b4:68:b7:ef:29:6b:b8:0b:bc:
bf:ca:06:38:db:53:bd:af:db:32:c9:88:6b:ce:2d:
28:7b:25:48:94:df:3c:68:c9:e4:f1:41:e6:91:03:
e0:5c:6a:e7:59:da:a6:ce:7c:74:44:f9:ad:40:58:
2e:c0:8d:06:83:76:70:95:f3:4c:77:4c:d8:33:a0:
f1:49:00:d0:3a:4d:b5:c2:88:a2:78:3f:98:8f:04:
af:4a:ef:03:42:cb:ea:64:21:85:8e:4e:61:c7:8a:
1e:96:a0:52:2a:b6:b7:e8:11:14:64:c0:07:19:4c:
bd:3c:e5:b1:35:64:fc:89:81:16:29:9c:a4:b7:51:
26:d3:d9:34:07:d2:47:7e:ec:9b:f9:eb:6e:3b:d4:
d0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:67:50:4D:4D:91:28:CB:69:84:CA:F4:FE:91:78:05:6B:78:33:A2
X509v3 Authority Key Identifier:
keyid:24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cf:cb:36:f5:7f:6d:91:4b:53:3f:39:d0:ec:b9:74:8e:1e:
e0:11:ab:f8:22:9b:c9:72:c5:8e:4a:5a:f8:ac:67:1a:b5:29:
6f:62:ca:f1:c9:ac:e4:7f:c4:cc:0b:64:c4:12:86:fb:e2:8d:
ec:1c:25:5d:50:d8:9f:52:1b:17:47:a7:9c:4e:dd:32:6a:9d:
80:16:55:2f:8f:63:6d:9f:ec:f9:61:0e:00:e9:2b:9a:03:7a:
2e:49:46:66:bb:fa:a4:90:a4:90:f8:52:eb:96:aa:0f:b7:e3:
50:42:5c:f8:d8:33:62:a4:27:a7:35:3d:03:47:09:1c:f0:65:
72:d4:d6:fd:f2:8e:19:72:6c:55:f9:65:14:f0:96:80:b7:11:
63:29:f0:53:ca:02:1d:6a:de:1a:41:13:59:38:41:e3:dc:8e:
0e:16:4a:96:b7:2b:8a:0e:70:37:3e:f7:c1:5e:b0:04:21:c1:
39:ed:69:3f:46:60:c1:6b:44:c9:6d:fd:7f:ad:1b:d0:3f:d9:
13:70:08:87:01:d7:12:73:7b:1d:31:cd:a8:e8:40:67:14:3a:
07:14:7d:7a:d0:8d:ee:b8:67:c4:7e:72:6c:76:84:09:44:33:
ef:2b:4c:23:34:07:9c:a2:08:6d:54:fe:bf:d5:42:1d:26:36:
98:0d:2e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 04:09:52 2026 by rpki-client