Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
File: 0jbg4txaKEOOMOv9HWpqlNs9HEA.mft (raw, json)
Hash identifier: PW3TqfTv4NN17B4HCNgYwQ+MfAEQjX6IPY0+lPKM0dM=
Subject key identifier: D4:5D:51:C2:1C:B9:F2:D4:CA:85:1A:79:24:E9:19:75:C2:E1:A1:B1
Authority key identifier: D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40
Certificate issuer: /CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40
Certificate serial: 019F90FE737719367D8E23AFE71FD4083E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
Manifest number: 1440
Signing time: Thu 23 Jul 2026 22:00:22 +0000
Manifest this update: Thu 23 Jul 2026 22:00:22 +0000
Manifest next update: Fri 24 Jul 2026 22:00:22 +0000
Files and hashes: 1: 0jbg4txaKEOOMOv9HWpqlNs9HEA.crl (hash: D2JJRa2k/ydZZQHIKA/Pklvw840ZgC2SPuGVAEws5CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:73:77:19:36:7d:8e:23:af:e7:1f:d4:08:3e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40
Validity
Not Before: Jul 23 22:00:22 2026 GMT
Not After : Jul 24 22:00:22 2026 GMT
Subject: CN=d45d51c21cb9f2d4ca851a7924e91975c2e1a1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b8:54:d1:f6:4e:66:28:50:fe:5e:48:05:7b:
9c:2d:65:e5:20:bc:94:15:66:76:b6:b4:97:bd:79:
50:b3:a1:6f:9e:a2:3b:23:0d:e1:68:26:d3:09:c7:
b6:09:a0:3c:14:2e:95:47:05:30:d6:a2:66:24:43:
1b:df:88:a9:62:43:52:ca:48:0c:48:22:98:e1:37:
0c:1d:95:51:6b:e8:bc:fa:c5:26:8a:8b:a9:24:3d:
cc:ee:d6:ad:c4:d9:92:ea:f7:02:27:22:01:61:70:
07:45:f0:e7:8a:b4:64:54:28:ae:2d:cf:2c:72:44:
04:09:f8:96:29:63:cf:6a:f6:5d:95:20:83:1e:e2:
16:44:17:76:8e:f8:26:0a:18:0d:ab:e7:cc:ed:6d:
77:b1:b1:99:59:66:2d:34:a3:57:ae:de:ec:77:df:
96:44:02:8a:a7:85:cc:89:c3:d7:73:12:58:82:00:
70:8b:50:b0:86:d4:fb:a1:6c:58:37:f5:21:95:41:
17:81:92:42:ae:bf:61:f0:55:85:45:a4:ce:fb:48:
a4:14:93:43:d2:49:42:6d:f0:a2:b3:24:ab:dd:3b:
4b:17:a9:c3:e0:af:0d:72:40:ea:fc:97:02:ce:ed:
51:ae:b7:7b:e2:d6:80:6a:84:d0:a5:e2:11:70:cd:
54:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5D:51:C2:1C:B9:F2:D4:CA:85:1A:79:24:E9:19:75:C2:E1:A1:B1
X509v3 Authority Key Identifier:
keyid:D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:71:44:7d:88:fd:1e:f2:1e:b8:95:39:97:94:90:de:14:7e:
df:73:39:a2:24:01:2f:f6:69:7e:fd:a5:e1:07:69:a5:0a:4f:
a6:b9:bc:cd:92:f6:5d:7e:2a:44:2a:6b:57:a1:87:13:5c:98:
a2:95:65:4d:2c:29:9b:d2:08:d6:66:c4:34:9a:27:bd:81:b4:
ac:74:52:96:2e:35:51:40:14:4a:75:6c:24:87:57:0c:60:06:
96:84:92:65:75:79:32:56:c6:32:8e:47:72:35:e6:24:a8:9d:
3b:e7:30:88:08:86:64:7d:05:c5:1c:0a:bc:b1:6f:1d:c6:e4:
e2:e8:eb:e8:5e:63:79:59:2e:6a:90:a7:74:ce:2a:b4:a5:86:
72:41:b0:0c:80:84:d1:da:53:80:2a:8d:9f:78:98:69:25:fd:
22:b8:16:8a:cf:d9:1b:ed:1c:dd:c5:75:4f:50:72:00:4a:23:
26:90:ac:b7:55:7f:be:58:3b:24:4f:c7:b8:6d:d1:a8:1a:ca:
34:9a:6e:ce:6d:ed:4e:16:3d:0f:03:f7:25:c2:5c:fe:70:04:
e2:eb:9f:b6:74:21:44:1b:e6:5e:40:03:71:f7:19:2a:6e:86:
02:4e:d5:ff:d9:d6:5a:f1:3a:48:49:06:be:19:11:fc:63:52:
ec:e5:70:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:56:50 2026 by rpki-client