Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
File: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft (raw, json)
Hash identifier: aruyvD5Jkce9KPPj4F+Ff7tETVizgsZrMqwEXgV044E=
Subject key identifier: A8:36:5C:AE:42:8C:6D:89:05:00:77:6F:01:CF:C6:7F:39:9A:B7:4F
Authority key identifier: 24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
Certificate issuer: /CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Certificate serial: 01A00213E51E5CED93629C5807DF88463C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
Manifest number: 0800
Signing time: Fri 14 Aug 2026 21:00:53 +0000
Manifest this update: Fri 14 Aug 2026 21:00:53 +0000
Manifest next update: Sat 15 Aug 2026 21:00:53 +0000
Files and hashes: 1: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl (hash: oFV08UX4lYi6T2c0Ly4Uaz+5/lcJXiJ9pJArgarrXYw=)
2: of5fvbBOl_2ZOya6SQ0xsXlOVng.roa (hash: FlPfu4dwMoPwrHiBDoZEfb7scYNLSD/+Wl4U6dL0V+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:e5:1e:5c:ed:93:62:9c:58:07:df:88:46:3c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Validity
Not Before: Aug 14 21:00:53 2026 GMT
Not After : Aug 15 21:00:53 2026 GMT
Subject: CN=a8365cae428c6d890500776f01cfc67f399ab74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0e:21:b0:a6:36:40:5f:86:50:f9:ac:fc:0d:
d0:eb:a3:93:cd:e2:4f:91:d9:ae:44:c8:f7:63:a9:
9d:2c:60:bd:98:9b:21:f9:81:bf:51:2c:4e:9f:60:
c7:e8:af:29:7d:75:42:70:8f:0e:ed:ec:8b:2f:ff:
bd:28:f9:74:44:10:08:cf:1c:d4:0b:00:70:eb:a3:
2b:85:ce:aa:b8:23:5c:32:93:e5:25:2a:cd:29:3e:
d0:0f:e2:16:11:7f:51:a0:5e:19:79:11:0b:6b:f1:
bc:8c:83:cf:e1:97:e0:fe:17:01:cf:e2:d4:d1:5a:
90:18:66:0e:18:c3:7f:c6:ba:87:d2:b1:03:ff:21:
ff:77:e0:d8:2c:3f:01:99:eb:0c:bc:2a:b6:65:ce:
d5:3c:04:e7:cb:18:a9:70:36:7f:5a:2b:d5:11:4c:
e8:6a:1d:44:91:ae:89:58:32:3a:b8:98:46:df:0e:
c4:27:d1:0d:7f:f2:12:ad:02:77:69:1e:4e:95:7a:
31:1c:13:4a:91:be:e8:a4:f9:8e:62:77:3a:cb:50:
e8:b5:a3:1f:03:ea:66:3c:09:29:38:dc:34:47:9f:
06:33:e4:35:b4:60:1d:56:03:4d:c9:89:d1:07:aa:
3a:ae:4a:a0:5b:16:f5:0b:ba:30:6e:18:73:9f:af:
9a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:36:5C:AE:42:8C:6D:89:05:00:77:6F:01:CF:C6:7F:39:9A:B7:4F
X509v3 Authority Key Identifier:
keyid:24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d8:18:20:d2:12:6b:b1:50:8e:e2:d4:64:d0:38:6f:c8:ff:
e7:31:44:1e:9a:0b:9e:71:7d:d1:a5:ac:7b:28:17:b7:18:05:
4f:d0:69:ca:27:a7:31:bc:3a:e6:42:94:3e:31:94:e4:21:a9:
27:2a:31:1d:40:50:f5:de:f0:5f:30:b3:d6:5b:90:b9:f0:48:
73:47:b5:3c:1c:16:2f:15:27:8c:72:6c:90:af:c1:d1:12:63:
98:12:00:b2:1e:58:9a:7a:eb:8d:ef:4a:34:4c:15:ed:cc:21:
ae:c4:24:5d:5c:f2:2a:ef:74:e3:c7:0a:c0:42:14:6c:9e:b1:
49:54:fe:c0:74:38:30:38:0d:53:c0:a8:cc:a6:59:d0:44:ae:
5f:56:2a:7d:c7:86:86:c0:3e:b1:54:7f:5f:1c:a2:84:59:0a:
25:d1:be:4b:64:7c:22:b6:09:5b:2f:a3:02:3e:bb:24:3e:a9:
79:fe:a3:fd:cf:89:24:31:2a:dd:cc:2a:b7:98:e2:57:d3:d2:
50:ba:1c:fe:41:e3:55:e7:d7:38:f5:70:ec:2e:c4:59:c8:6e:
6a:f6:94:c6:df:ad:54:00:20:9f:6a:31:60:2c:e0:b2:ac:b9:
92:f8:83:87:3c:25:5c:16:6e:e6:99:cf:9e:d9:be:05:b7:99:
2f:c4:50:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:17:06 2026 by rpki-client