Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
File: 0jbg4txaKEOOMOv9HWpqlNs9HEA.mft (raw, json)
Hash identifier: z1U+ujkIBj2DdoVfEuxKft312Htc8B78AM6t09/ditk=
Subject key identifier: 44:66:54:88:C9:07:0A:E9:2C:0B:52:10:EF:A0:79:56:CB:B0:1C:51
Authority key identifier: D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40
Certificate issuer: /CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40
Certificate serial: 019E1E352CC8DFD749023AF8E22D02E7D862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
Manifest number: 1380
Signing time: Tue 12 May 2026 22:01:01 +0000
Manifest this update: Tue 12 May 2026 22:01:01 +0000
Manifest next update: Wed 13 May 2026 22:01:01 +0000
Files and hashes: 1: 0jbg4txaKEOOMOv9HWpqlNs9HEA.crl (hash: THqWLePKqoNOCDdloOySUSTR8ZmuCTbUgjwykH7hiAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:2c:c8:df:d7:49:02:3a:f8:e2:2d:02:e7:d8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40
Validity
Not Before: May 12 22:01:01 2026 GMT
Not After : May 13 22:01:01 2026 GMT
Subject: CN=44665488c9070ae92c0b5210efa07956cbb01c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:ef:81:b0:33:ab:39:a6:cd:36:28:c9:3e:
be:61:58:90:bf:bc:3f:46:01:98:ce:1f:d9:38:48:
01:50:c3:4b:e7:8a:e0:e0:f9:b6:8b:47:9a:ab:e3:
80:64:4b:37:a8:10:ff:0f:e4:a6:4a:72:49:59:72:
28:3e:ee:1c:06:df:d0:ff:d3:96:30:d2:6b:ee:b6:
89:19:d1:6a:d0:f8:0c:d8:16:9a:22:7f:76:c0:60:
97:bd:7f:19:70:44:66:40:ac:17:7f:24:bf:e8:15:
36:5f:1b:1c:a8:f2:59:3f:fa:f7:8a:e5:66:59:40:
ff:aa:c8:3e:b0:98:20:22:fd:42:6d:fe:c6:32:1d:
1b:72:e9:0b:30:9a:16:ad:96:1c:0a:51:0c:cd:e3:
90:c5:95:71:d4:02:f0:41:dc:97:c5:14:3c:c0:14:
26:be:d3:3f:59:de:fe:18:5a:88:51:8f:98:bf:a7:
cf:4f:51:78:0f:09:3a:84:ed:20:e7:69:e7:c4:1d:
35:9c:b7:37:bb:80:c5:df:78:41:f9:12:39:5f:46:
44:b0:1f:e5:4d:25:b7:a6:31:03:73:60:02:04:ec:
64:79:58:15:3c:9d:2d:24:ec:b4:b8:3d:96:58:a6:
d5:3e:62:3a:e2:01:10:9d:c0:c7:58:5f:3e:04:68:
a1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:66:54:88:C9:07:0A:E9:2C:0B:52:10:EF:A0:79:56:CB:B0:1C:51
X509v3 Authority Key Identifier:
keyid:D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b2:bf:4d:2c:25:fb:83:27:2d:a1:b5:84:c6:10:ea:8b:aa:
65:d0:68:5d:71:88:ad:3a:d7:d7:99:5f:85:cb:e4:8b:a2:c9:
47:93:b6:8b:9b:cd:42:5d:24:9e:d8:3e:8e:d9:e6:32:83:94:
28:86:49:98:b0:14:34:64:56:7d:d1:40:46:d7:03:d4:a4:e3:
d2:08:4b:e7:51:b0:c7:8d:1a:e8:4e:59:3a:be:93:04:ac:fe:
a6:c4:df:ea:e3:87:62:17:e8:e2:11:63:d7:50:8f:7e:b4:c0:
ef:c1:03:51:69:44:d5:d9:98:d5:0e:a3:ba:2c:bd:f0:73:6e:
eb:f2:1a:8a:3d:fe:6b:c0:aa:04:36:ef:55:cd:81:e3:45:4c:
05:63:1f:2b:4c:1f:31:08:f0:67:d4:35:45:fa:90:44:77:ad:
c3:b1:00:ac:81:b9:8c:bf:8c:b6:47:6c:c4:64:3d:24:7b:2a:
43:c0:03:9e:99:39:2c:0e:21:ae:60:85:0d:06:51:42:60:1c:
7e:7b:5e:6f:33:7f:55:2c:31:be:7a:67:82:29:fd:1c:7a:af:
4b:20:cb:a3:84:24:76:96:5b:9f:6c:fe:fa:bb:88:36:07:0b:
23:98:6a:1a:f1:03:40:ef:de:27:9c:2d:ec:13:5f:0a:70:49:
84:04:77:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:20:19 2026 by rpki-client