Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
File: jHSEmpcKkwTfRfjii264f_CeC-o.mft (raw, json)
Hash identifier: 80CtU0JYlMmgc9ROktGx9HIQHS/+oy1+eQD4q+miWE0=
Subject key identifier: 21:2C:EC:75:98:FF:C0:DB:E3:59:1B:FA:5D:20:9E:1E:CD:A1:1E:77
Authority key identifier: 8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
Certificate issuer: /CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Certificate serial: 019D38D3DB795607148C94ED29634764735E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
Manifest number: 0AB7
Signing time: Sun 29 Mar 2026 09:01:41 +0000
Manifest this update: Sun 29 Mar 2026 09:01:41 +0000
Manifest next update: Mon 30 Mar 2026 09:01:41 +0000
Files and hashes: 1: UwIChmxo9QDoLv2cZqzGPfCrUQU.roa (hash: iViSnyemk7R4QbC75JFUXVWz8URlQ9KGxcWEibF4T+E=)
2: jHSEmpcKkwTfRfjii264f_CeC-o.crl (hash: 7TIMjJx24lM+7G6XwG2raWDk+bHP+NAOZNf8A2N5wkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:db:79:56:07:14:8c:94:ed:29:63:47:64:73:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Validity
Not Before: Mar 29 09:01:41 2026 GMT
Not After : Mar 30 09:01:41 2026 GMT
Subject: CN=212cec7598ffc0dbe3591bfa5d209e1ecda11e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:05:38:8d:64:76:2e:44:a3:a6:02:b0:0a:
52:7f:ff:10:e9:c1:6d:82:d8:01:44:9a:f8:69:48:
20:76:d8:04:03:af:01:ea:a5:0b:6d:45:35:81:2c:
2d:6b:46:9f:e4:25:df:7a:a1:30:91:cb:79:08:b1:
ec:c4:8a:40:20:3d:9d:27:2b:00:5c:ec:f9:f1:93:
4d:dc:b2:9b:6a:b2:44:4f:d0:aa:e5:55:84:4c:c9:
58:0e:bf:b7:0e:ac:32:1b:ef:0a:c9:1a:25:cb:97:
90:86:54:96:8b:43:b9:fe:71:d1:06:49:61:a6:19:
ac:a6:e0:e2:38:ba:8a:6c:c5:5b:65:bc:62:ea:f6:
96:a8:64:f5:be:f2:7e:28:84:fd:a9:40:1f:43:3b:
12:f3:7f:a3:80:56:5d:35:ef:09:e7:c3:22:dc:02:
a0:b4:4b:31:8b:22:29:a7:06:c5:6b:af:ee:f9:10:
02:36:9a:e8:d4:d0:9b:59:ee:ad:fc:15:d1:5d:7a:
52:81:65:73:2f:0b:95:03:0a:60:ee:cc:6e:dc:68:
d1:e7:64:ef:63:99:62:64:22:d1:74:57:9d:00:11:
11:96:b2:ff:91:87:56:23:41:b3:aa:3a:29:d6:8d:
4e:ec:38:e1:16:d4:e8:84:9c:28:c1:8c:02:94:35:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2C:EC:75:98:FF:C0:DB:E3:59:1B:FA:5D:20:9E:1E:CD:A1:1E:77
X509v3 Authority Key Identifier:
keyid:8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:dc:5f:e4:3a:8e:c6:96:b5:80:29:7c:80:5d:96:8f:48:64:
a0:b7:ad:1d:1f:bb:6f:e6:fa:da:27:a1:9a:e7:5c:5a:ba:71:
aa:4a:75:27:ba:59:87:b3:91:61:c0:bf:4a:6b:5a:56:27:fc:
24:41:c0:26:06:2c:d7:00:f5:c5:1c:47:06:e5:59:2b:47:6d:
96:01:19:10:ac:e9:61:5a:27:f8:e5:ad:94:a9:63:bf:5f:a1:
ca:9e:aa:1a:01:49:05:d9:e6:71:1b:89:f9:d7:29:8c:82:08:
01:d8:3c:4a:2d:0e:20:e8:26:da:fd:6d:b6:24:75:21:01:29:
4d:da:e9:24:e4:9a:0b:43:a6:c9:a8:49:e5:f7:0d:4f:08:24:
d5:9b:96:c7:03:24:b2:ac:b6:f2:8a:8f:ec:de:48:96:6a:3f:
9e:79:a8:3c:5b:e0:b7:6d:a5:ca:9a:2f:85:97:45:a1:75:b4:
1f:a2:41:a5:71:62:45:12:9d:3e:e4:3d:f5:92:ca:73:84:04:
c3:c9:af:f5:7a:a7:49:02:db:be:49:6d:fa:9a:1c:30:7c:26:
44:15:61:7c:da:0d:4f:43:44:a9:85:35:d6:40:ee:b3:68:6a:
c6:a9:6a:a0:eb:49:37:3e:2c:7b:41:66:53:2b:3d:c0:9b:77:
c0:a7:ee:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:18 2026 by rpki-client