Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
File: 0Jp_f91UoXzl4SpBgutlJHn511g.mft (raw, json)
Hash identifier: /AQBpfopPJtvEiBa3yK6KY/IZvBnsNZdFuwddUr/5yw=
Subject key identifier: 56:3E:58:44:AD:95:0D:52:D5:4E:28:9A:DA:02:A8:20:FF:4E:C0:10
Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
Certificate issuer: /CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Certificate serial: 019D27DFC2881C7D8EEEF5CDFE233F66473D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
Manifest number: 1708
Signing time: Thu 26 Mar 2026 02:01:08 +0000
Manifest this update: Thu 26 Mar 2026 02:01:08 +0000
Manifest next update: Fri 27 Mar 2026 02:01:08 +0000
Files and hashes: 1: 0Jp_f91UoXzl4SpBgutlJHn511g.crl (hash: SncqAGvh5LROdJMheUvBta6DlKN3MhV3Kr307CZ6Ic8=)
2: 7eWcGeApexXCyJ5zpUATMUfIfjE.roa (hash: 25j7Y9KcJOf9q796TODAMGOZw8uhZj4cuQLUqDrqWiw=)
3: eh5f2bSFFBPtD-itI_yMFOKVNl8.roa (hash: 1eTnOvtuGR3xM5v0Vi+oWqoLUpmMh/7COfXsHBvYGt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:c2:88:1c:7d:8e:ee:f5:cd:fe:23:3f:66:47:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Validity
Not Before: Mar 26 02:01:08 2026 GMT
Not After : Mar 27 02:01:08 2026 GMT
Subject: CN=563e5844ad950d52d54e289ada02a820ff4ec010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:eb:d1:93:4e:8f:c7:a8:27:14:1f:c0:45:
7f:90:9e:1b:ae:f8:9f:de:23:f3:53:3e:55:4b:8d:
d2:37:d4:ee:06:87:10:72:40:b7:c5:0c:d8:d5:f7:
e6:ca:6c:f8:e6:bf:66:83:a6:33:76:5e:b4:da:0a:
10:10:6b:55:87:a4:d2:12:50:e2:11:cb:e2:2d:c5:
d0:1a:db:96:0b:dd:cb:7c:05:db:42:46:64:4b:b0:
07:59:b1:e9:e3:83:3d:fb:5b:d0:ec:7a:ef:bb:4f:
a1:ee:97:f5:0d:b2:a7:79:50:dd:2b:88:65:c7:f5:
ed:66:93:7e:de:88:f3:28:2d:d6:2a:b9:ec:91:ad:
f7:c3:5a:8c:7b:a9:19:c7:c0:1a:a7:c8:c3:e5:ca:
1e:fc:6b:ea:36:fa:01:5a:12:20:c3:2a:c3:84:f8:
f5:15:cd:3b:d3:2e:90:e4:a4:29:2e:a4:f4:1b:1b:
46:e2:83:bd:08:1c:c2:57:3a:be:aa:3e:5c:48:ec:
72:71:4a:a5:53:df:29:d6:36:f2:1d:70:35:1a:5a:
8a:3c:6a:b4:8d:ea:0a:1a:23:ef:71:55:4c:63:fc:
a4:21:6c:fb:1a:8a:c2:26:bd:bf:38:47:0d:f9:52:
0f:bc:b3:ef:8e:c2:e2:73:d0:37:50:05:ba:96:cc:
ad:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3E:58:44:AD:95:0D:52:D5:4E:28:9A:DA:02:A8:20:FF:4E:C0:10
X509v3 Authority Key Identifier:
keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3d:a2:35:f0:b1:ba:f5:7d:fd:90:39:1e:f2:74:a3:4c:27:
60:12:b5:37:d9:3c:a0:75:26:98:9c:71:42:71:7f:4f:4b:bf:
39:da:9e:1a:af:2d:66:d9:1f:4e:2f:69:54:30:0e:55:9a:b6:
de:21:57:25:15:d4:ef:81:5f:43:43:62:c8:7a:1b:8a:0e:f8:
6f:72:11:56:28:a3:f8:cb:75:8d:cb:2f:4e:7f:87:81:d8:76:
95:87:6b:f0:97:97:57:27:48:19:ac:c4:a2:dd:cb:c5:c1:0e:
22:08:ac:7c:9e:62:ef:73:03:68:bf:68:61:41:18:9f:e6:b6:
65:66:60:39:33:0a:a1:88:87:da:80:cb:38:60:e3:66:65:af:
b3:34:c0:41:06:df:02:59:a2:c4:12:9a:7e:f1:f7:4f:0e:b6:
1d:56:7f:e7:70:83:d6:0e:dd:a1:8a:df:7c:3c:0b:0d:ca:fc:
e7:f6:77:1d:90:b8:95:5b:f6:1b:32:49:b3:72:f9:d5:ab:25:
c9:66:66:11:c8:07:61:f9:4b:be:fc:ca:17:62:5d:ff:ed:1d:
10:83:8e:e6:5e:47:4b:84:e6:0d:b6:43:44:e0:bf:75:d9:8a:
5a:12:72:cf:fe:3d:a8:ec:26:6a:9d:4b:7e:7d:68:5e:91:94:
4f:4e:fa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:23:31 2026 by rpki-client