Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
File: 0jbg4txaKEOOMOv9HWpqlNs9HEA.mft (raw, json)
Hash identifier: mDskMK3iZDC25z3l24TZt02L7TZa5YGS/otYXHYgO9E=
Subject key identifier: DC:93:1D:B7:62:98:02:3D:C7:CE:65:48:EF:82:FF:D9:27:A3:15:B2
Authority key identifier: D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40
Certificate issuer: /CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40
Certificate serial: 019D27045E85BDF2C04D19867FBD69C56698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
Manifest number: 1300
Signing time: Wed 25 Mar 2026 22:01:30 +0000
Manifest this update: Wed 25 Mar 2026 22:01:30 +0000
Manifest next update: Thu 26 Mar 2026 22:01:30 +0000
Files and hashes: 1: 0jbg4txaKEOOMOv9HWpqlNs9HEA.crl (hash: qyR65ZwibrMLUAo2pU8oDSoOis6S+xGzde/uahhxad8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:5e:85:bd:f2:c0:4d:19:86:7f:bd:69:c5:66:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40
Validity
Not Before: Mar 25 22:01:30 2026 GMT
Not After : Mar 26 22:01:30 2026 GMT
Subject: CN=dc931db76298023dc7ce6548ef82ffd927a315b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:c6:d0:62:13:6b:00:f1:cb:7b:8f:4e:b5:
c2:93:45:c0:94:a6:c2:94:0c:2c:c6:a4:30:a9:42:
16:aa:e5:43:e3:47:fd:20:8a:d9:68:25:9c:bd:7e:
f8:47:78:ca:23:e8:7a:02:20:0a:8d:58:ac:fa:c7:
12:30:a7:ce:a4:25:13:82:b8:f0:b7:01:e5:06:c9:
21:64:55:a7:bd:aa:be:4c:d5:be:3a:7b:63:d7:35:
3f:f7:93:6e:a3:b2:63:92:03:86:80:bf:20:61:65:
c9:19:d4:f9:e0:62:6f:c2:4b:76:48:d3:31:19:fa:
15:f4:ec:62:48:1f:20:e6:5a:22:04:62:6b:9a:40:
6b:5c:e7:77:6c:98:9e:d6:79:14:ae:62:91:48:0a:
2f:12:c8:0a:bd:c9:a9:1d:20:7a:14:29:a6:64:fb:
09:29:67:71:a8:22:e6:d8:00:83:e9:5e:11:b3:8c:
97:52:a4:23:4d:37:de:a7:2a:72:b2:64:83:89:c0:
3c:91:ed:07:e7:d9:71:2e:dd:cc:5f:f5:3d:8d:d4:
a8:f6:cc:d9:23:d5:6c:e6:b2:a9:af:7c:15:8b:fb:
3b:95:d7:94:78:3f:2f:03:69:fc:2b:d8:27:dc:2a:
a5:41:27:ed:2a:bf:f8:07:93:90:23:f0:bf:1f:7a:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:93:1D:B7:62:98:02:3D:C7:CE:65:48:EF:82:FF:D9:27:A3:15:B2
X509v3 Authority Key Identifier:
keyid:D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:16:cb:b8:73:5e:cf:a0:9d:2f:fb:0e:d1:bc:76:17:06:73:
e1:f8:ef:62:73:3c:7d:7b:17:e4:9b:10:25:59:17:95:8a:b4:
8e:e8:79:e3:9b:c0:6f:5b:ef:2f:91:cb:d3:75:e7:40:74:c5:
51:1c:a4:d9:85:38:37:c2:04:97:d4:80:de:a8:81:0d:38:78:
ed:32:95:e9:20:78:69:65:b4:d6:d3:30:23:4e:ec:b0:b3:03:
b3:23:79:a1:d0:24:67:18:4d:f7:c4:8e:a5:0a:25:1c:1b:74:
68:18:2b:cb:9e:6b:a4:8c:79:64:18:aa:75:c4:91:e4:fd:a8:
13:22:45:76:d4:5e:65:1c:1e:d4:51:69:f0:be:94:69:c8:d9:
ad:1e:59:f4:b1:9a:cc:75:6f:91:e6:5d:e7:aa:15:bd:4e:a0:
f6:7e:4f:1b:6c:90:0d:cc:0f:e2:e3:26:51:dd:f3:d3:76:d5:
90:d1:e7:d3:fd:ab:db:93:46:38:1b:bb:b5:37:f7:8d:be:59:
93:9b:72:23:85:e3:6f:fd:88:60:88:e3:ff:6b:ab:4a:ba:e5:
4b:57:70:e0:5e:9a:90:46:02:cd:9e:3b:d3:c2:eb:e9:f0:20:
7b:d2:58:13:bd:8a:e5:dc:44:2b:b8:8c:58:32:43:81:56:f9:
84:b6:b7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:36 2026 by rpki-client