Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
File: 0jtkd-HIT1KQfNYMY-qD715Kx4I.mft (raw, json)
Hash identifier: 9H+z9yDA69yGGSIA3rVzsT77vdYk8R+wcM3b5/fteT0=
Subject key identifier: EC:CB:6E:54:16:91:1C:AE:9C:E2:50:9A:3C:07:51:5D:59:DD:B0:CE
Authority key identifier: D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
Certificate issuer: /CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Certificate serial: 019E1D2245804D54A29B0C55A3BA1CC411D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
Manifest number: 0C52
Signing time: Tue 12 May 2026 17:00:45 +0000
Manifest this update: Tue 12 May 2026 17:00:45 +0000
Manifest next update: Wed 13 May 2026 17:00:45 +0000
Files and hashes: 1: 0jtkd-HIT1KQfNYMY-qD715Kx4I.crl (hash: BzY7BlM/XL/20sSMawWoo+czUdvjC5t/ONj/6aBzRQM=)
2: u74Y2DtNYCrFLzeUZsDA2ek1RJQ.roa (hash: v4D4CGF7IK7jFQI/k7wDX6FIFSnqg7cuKSN4Jo5u5mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:45:80:4d:54:a2:9b:0c:55:a3:ba:1c:c4:11:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Validity
Not Before: May 12 17:00:45 2026 GMT
Not After : May 13 17:00:45 2026 GMT
Subject: CN=eccb6e5416911cae9ce2509a3c07515d59ddb0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b2:b4:d2:4c:9e:cf:a6:ef:d8:70:e0:70:97:
3e:84:00:78:6e:12:9e:7a:c5:e8:1f:d6:0e:07:fa:
eb:70:73:8b:fc:86:67:94:44:aa:ed:80:c4:8f:fc:
ad:02:00:3a:be:26:55:d0:a2:aa:d8:03:3e:95:d7:
52:50:ba:36:1d:e9:b9:02:fa:63:74:4f:cc:63:40:
05:8e:5f:fe:a0:85:64:3c:f6:e3:c8:1e:59:9d:5d:
5f:73:19:ea:6e:b9:2c:f3:eb:00:79:d1:5b:6e:a4:
3a:21:e8:cb:13:71:9b:62:9d:74:03:c1:6a:15:bd:
1e:5e:bd:39:b0:6f:25:55:e8:ec:82:6f:7e:53:25:
f0:9a:16:e3:ef:c2:6c:04:ab:4b:12:76:d0:a1:c6:
cd:43:ea:e4:ee:b6:74:32:51:e2:57:e1:d9:4d:d9:
a8:19:11:a0:60:c5:32:c4:29:b0:b8:c1:73:5f:d2:
0e:e0:d9:cc:81:54:77:95:44:2e:e2:75:bf:45:02:
c3:01:14:36:57:6b:12:33:83:12:33:95:b0:6f:56:
a7:30:82:14:1d:59:6c:25:4d:e5:0b:ce:66:a8:9a:
9d:e2:ec:c4:e4:3b:8b:96:c8:ae:5e:22:be:5f:e2:
6e:e1:58:da:21:44:6b:d1:66:42:2e:cb:36:a6:ca:
7f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CB:6E:54:16:91:1C:AE:9C:E2:50:9A:3C:07:51:5D:59:DD:B0:CE
X509v3 Authority Key Identifier:
keyid:D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:12:a5:5d:67:66:98:93:d6:3e:95:01:6b:79:6e:6f:29:08:
d7:2a:6f:8d:22:e2:e7:fd:04:e5:56:74:57:08:4d:92:5f:3f:
d7:f2:3d:70:ba:51:48:ec:29:ee:2d:06:3d:41:a9:c7:60:25:
e4:f6:02:5b:2a:1a:61:cb:90:25:b4:c5:c4:fb:a4:67:f1:71:
aa:3d:ad:96:97:e9:67:42:ea:2a:a7:a9:9c:fb:d9:6f:89:97:
7b:91:92:11:67:ba:13:8c:a2:ef:e6:f9:61:d1:82:df:77:7c:
b5:b3:d2:a8:60:09:ed:10:91:61:3c:80:93:7e:86:b6:68:3c:
82:76:23:a9:f1:e2:88:f8:47:e1:c7:42:47:2b:44:d3:fd:aa:
81:36:0a:00:f2:17:93:91:70:e5:53:4a:64:f5:98:de:4c:f3:
b2:60:08:80:d4:c9:cd:ee:4c:b5:8e:8f:0d:1a:27:3a:92:ba:
7b:3e:9b:03:19:57:90:a6:72:81:05:c6:8c:25:f4:c7:25:15:
a1:c5:2a:85:a0:8d:19:e9:03:07:60:17:46:ae:3e:21:4a:8b:
2c:65:00:a9:45:c6:f3:53:34:fd:6c:aa:85:c6:52:6e:71:f4:
8d:41:b9:7c:34:38:e5:a7:1e:52:f4:c0:08:82:c5:1f:bc:91:
53:04:07:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:48 2026 by rpki-client