Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
File: jghAgExmgMQfIehybzgLleaelEc.mft (raw, json)
Hash identifier: yOOMxfiuPsWU+tDVx8bKOfQCFAfE5ystoCsKIGCXYdI=
Subject key identifier: E1:6C:29:BD:92:6F:C3:DE:FE:A6:27:94:7B:2D:B9:48:D1:12:44:78
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial: 01A003265CADC40272D6ADA46C2565AF4411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
Manifest number: 0F52
Signing time: Sat 15 Aug 2026 02:00:40 +0000
Manifest this update: Sat 15 Aug 2026 02:00:40 +0000
Manifest next update: Sun 16 Aug 2026 02:00:40 +0000
Files and hashes: 1: FcDP4t2fUN_dTrYyfxsE8QW3Eyg.roa (hash: sDQcJIThGsK9Nrdf2isebfLDyVxi7JAHTUMrXx4QKTw=)
2: cjfADLaDEFlQK8qrVJ5NipbhmYQ.roa (hash: IRslVjUODdyfex5FaSaSEKWcalRpU1+utYy+dcv1SD4=)
3: jghAgExmgMQfIehybzgLleaelEc.crl (hash: YAmSjka7FuGSkCHaLwCcU+r7c0cmeqahPQ12/V5t6w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:5c:ad:c4:02:72:d6:ad:a4:6c:25:65:af:44:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
Validity
Not Before: Aug 15 02:00:40 2026 GMT
Not After : Aug 16 02:00:40 2026 GMT
Subject: CN=e16c29bd926fc3defea627947b2db948d1124478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:de:4e:ee:a4:77:4a:37:60:25:2b:d3:cb:57:
1d:4c:d9:91:ad:4b:5b:69:88:7d:79:79:4f:c3:f2:
c6:38:91:b3:45:3f:e3:a6:f7:13:91:fa:2f:05:e2:
7a:5f:e6:05:2d:ae:a9:55:e9:a0:b8:d0:72:e5:5c:
f0:b5:16:02:75:72:8b:44:27:86:89:bc:35:6d:97:
e2:41:c2:2e:3b:e1:7c:2a:a1:91:d6:37:95:c3:8d:
8b:da:c5:ed:b6:54:19:18:4f:41:8a:89:e2:2a:18:
66:73:af:91:fe:cc:6f:30:11:ea:9c:5c:23:07:f1:
d2:fe:fb:3c:6d:03:02:d5:2e:fd:cf:b6:00:74:39:
da:f0:a1:de:ce:24:05:84:60:2a:80:8c:9f:88:78:
c6:de:25:68:01:33:43:ef:4f:b2:46:10:21:d2:c2:
24:be:2c:a9:aa:a2:c7:03:0a:1f:fc:54:9f:64:a6:
46:c0:b2:dc:41:c1:74:07:d5:84:f3:0c:0e:61:f2:
d8:3d:fe:00:8d:b1:1c:37:76:68:88:4b:a8:1e:63:
9a:a2:1f:35:b2:1f:12:00:7f:88:56:90:d4:23:5c:
ee:33:ca:2c:d5:e1:ab:77:1c:1b:2a:dd:c0:57:ac:
56:ed:b3:8d:cd:1a:be:7b:1a:65:83:13:28:06:7d:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6C:29:BD:92:6F:C3:DE:FE:A6:27:94:7B:2D:B9:48:D1:12:44:78
X509v3 Authority Key Identifier:
keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2c:6f:3f:01:6c:5b:99:dd:52:f1:a9:43:bd:44:d2:b4:48:
89:cc:d2:c3:24:aa:93:52:cd:bf:3e:95:5e:2f:7b:6a:67:0d:
11:42:0d:f7:3f:d3:1a:3a:5d:8c:a0:fc:59:95:32:84:ae:d8:
ea:f9:9a:6e:7d:3d:34:fb:a4:9c:a3:d3:10:2a:fb:31:1a:1f:
4e:85:04:4e:bd:d7:a0:0a:8f:ee:d1:c3:7c:c5:29:e8:ae:f1:
30:7a:83:67:ad:0e:8f:e7:43:c3:19:04:3d:06:b9:dd:7b:6d:
4e:ab:19:aa:37:80:9a:36:12:bb:c3:b9:25:cf:46:f3:1a:f6:
aa:84:28:d4:d6:66:86:b7:95:3f:9d:5a:b0:fa:cc:65:2c:6f:
8f:58:a5:0d:f7:53:23:7e:80:3a:ae:fc:2d:f0:0f:c7:d1:23:
b9:5e:c5:9d:d9:6a:06:67:57:b2:b0:f9:d7:63:78:c9:f5:cd:
7d:ef:d3:ae:f8:01:7c:66:6b:ea:6e:8a:66:64:d4:4b:cf:14:
fc:85:4e:8c:b1:67:c7:df:7e:a7:82:76:11:00:cd:08:c1:41:
87:c8:65:9e:15:45:f3:23:69:8f:15:f1:b7:b8:1b:f9:f8:29:
74:51:96:77:b4:3b:78:2f:89:e7:d3:9c:fb:38:dc:df:e2:ea:
8b:8d:fc:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADJlytxAJy1q2kbCVlr0QRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMDg0MDgwNGM2NjgwYzQxZjIxZTg3MjZmMzgwYjk1ZTY5
ZTk0NDcwHhcNMjYwODE1MDIwMDQwWhcNMjYwODE2MDIwMDQwWjAzMTEwLwYDVQQD
EyhlMTZjMjliZDkyNmZjM2RlZmVhNjI3OTQ3YjJkYjk0OGQxMTI0NDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt5O7qR3SjdgJSvTy1cdTNmRrUtb
aYh9eXlPw/LGOJGzRT/jpvcTkfovBeJ6X+YFLa6pVemguNBy5VzwtRYCdXKLRCeG
ibw1bZfiQcIuO+F8KqGR1jeVw42L2sXttlQZGE9BioniKhhmc6+R/sxvMBHqnFwj
B/HS/vs8bQMC1S79z7YAdDna8KHeziQFhGAqgIyfiHjG3iVoATND70+yRhAh0sIk
viypqqLHAwof/FSfZKZGwLLcQcF0B9WE8wwOYfLYPf4AjbEcN3ZoiEuoHmOaoh81
sh8SAH+IVpDUI1zuM8os1eGrdxwbKt3AV6xW7bONzRq+explgxMoBn2/PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFsKb2Sb8Pe/qYnlHstuUjREkR4MB8GA1UdIwQY
MBaAFI4IQIBMZoDEHyHocm84C5XmnpRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamdoQWdFeG1nTVFmSWVoeWJ6Z0xsZWFlbEVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jZWU1NzItMzQyMC00NWU0LTg3YjYt
YzI3OTk3NTNjODUzLzEvamdoQWdFeG1nTVFmSWVoeWJ6Z0xsZWFlbEVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9jZWU1NzItMzQyMC00NWU0LTg3YjYtYzI3OTk3NTNjODUz
LzEvamdoQWdFeG1nTVFmSWVoeWJ6Z0xsZWFlbEVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkixvPwFs
W5ndUvGpQ71E0rRIiczSwySqk1LNvz6VXi97amcNEUIN9z/TGjpdjKD8WZUyhK7Y
6vmabn09NPuknKPTECr7MRofToUETr3XoAqP7tHDfMUp6K7xMHqDZ60Oj+dDwxkE
PQa53XttTqsZqjeAmjYSu8O5Jc9G8xr2qoQo1NZmhreVP51asPrMZSxvj1ilDfdT
I36AOq78LfAPx9EjuV7FndlqBmdXsrD512N4yfXNfe/TrvgBfGZr6m6KZmTUS88U
/IVOjLFnx99+p4J2EQDNCMFBh8hlnhVF8yNpjxXxt7gb+fgpdFGWd7Q7eC+J59Oc
+zjc3+Lqi4386A==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:54:37 2026 by rpki-client