Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
File: 0jtkd-HIT1KQfNYMY-qD715Kx4I.mft (raw, json)
Hash identifier: 3sSaNP05mlSAL6/zYSytBKsVBH6DQk8VoPGQ7OkyiJ4=
Subject key identifier: 2E:38:77:2F:76:8E:52:38:41:43:53:08:11:2B:00:3F:E6:87:A5:86
Authority key identifier: D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
Certificate issuer: /CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Certificate serial: 01A0D07F64905B0FCB9D96ABB6FEBD679476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
Manifest number: 0DB8
Signing time: Wed 23 Sep 2026 23:00:04 +0000
Manifest this update: Wed 23 Sep 2026 23:00:04 +0000
Manifest next update: Thu 24 Sep 2026 23:00:04 +0000
Files and hashes: 1: 0jtkd-HIT1KQfNYMY-qD715Kx4I.crl (hash: xWrKinomvsH22KQZjN+sDe4PYXesSmPrNA7pnA1a4uk=)
2: u74Y2DtNYCrFLzeUZsDA2ek1RJQ.roa (hash: v4D4CGF7IK7jFQI/k7wDX6FIFSnqg7cuKSN4Jo5u5mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:64:90:5b:0f:cb:9d:96:ab:b6:fe:bd:67:94:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Validity
Not Before: Sep 23 23:00:04 2026 GMT
Not After : Sep 24 23:00:04 2026 GMT
Subject: CN=2e38772f768e523841435308112b003fe687a586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d0:61:4f:ed:57:8f:cf:ba:05:bb:1d:0f:b4:
e9:f4:21:da:56:ed:38:7a:7f:e8:00:10:96:12:58:
39:5d:39:42:17:70:ef:a7:4e:32:0a:d1:5b:85:36:
22:26:dc:f5:92:dd:1e:45:46:76:a4:06:8b:3d:e3:
d3:4c:47:1d:c4:b9:77:58:c8:d3:f0:d5:71:62:3e:
e8:07:61:75:84:ed:81:8a:b6:01:6c:6d:56:87:f9:
8b:6c:ce:d7:3d:39:06:d9:27:07:dd:9b:f4:6a:a2:
6c:ba:67:11:ec:db:39:c4:87:df:1a:ab:c4:21:11:
dc:6e:c0:8a:f5:bc:6e:ce:9f:b0:44:65:73:30:b7:
f5:24:5b:7a:0b:f6:43:a9:fd:37:ba:a7:31:f9:da:
6f:f5:4e:ce:01:59:3f:35:b1:7c:ff:b6:b1:6b:09:
cd:20:49:ef:76:41:b6:98:73:61:69:d4:5f:2a:3a:
1a:22:94:dc:ed:06:94:77:56:29:9e:0d:ae:52:2f:
cc:5e:c0:ad:ec:43:89:cc:46:f3:7b:55:c1:29:53:
d9:9f:b4:43:fd:a3:1f:8b:d8:67:a3:93:0b:94:a2:
f7:96:bb:c8:79:70:c5:a6:4f:99:37:cd:00:10:fe:
73:5f:ae:13:bb:b5:93:fb:7f:8a:87:22:6d:a2:ce:
93:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:38:77:2F:76:8E:52:38:41:43:53:08:11:2B:00:3F:E6:87:A5:86
X509v3 Authority Key Identifier:
keyid:D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1d:d6:78:ef:ae:48:78:58:81:91:1d:a1:c9:97:94:a8:c0:
e5:7d:e4:c2:41:cc:9d:86:b4:ba:0c:8a:fe:a0:5e:81:d3:55:
a4:ba:e4:33:a3:f0:9d:70:83:76:d9:fa:ae:24:92:c5:c2:d7:
96:b0:5a:79:c6:be:24:9c:ae:78:4b:14:fc:af:7c:d9:ba:e4:
20:87:88:2f:0e:f2:d1:07:4e:42:c8:d1:06:27:ce:fc:1b:c9:
81:bf:18:b4:27:7b:c0:a2:bd:91:fb:e0:86:31:8d:8c:59:91:
ae:4d:4c:d1:3f:1e:7a:8b:86:65:b7:c6:e1:1c:ec:2e:62:0a:
a7:27:6a:1b:38:7a:ab:ba:e2:7a:e5:41:a9:d0:d2:6c:73:b9:
c8:4d:ef:c5:ef:30:ae:76:13:99:f7:88:38:95:b1:ee:d4:05:
c0:8a:73:86:48:36:c0:f2:25:ae:5f:92:e9:e8:01:52:13:55:
89:99:58:71:2b:c3:2c:0b:55:e4:8d:b6:be:72:15:59:70:c7:
5e:3d:59:cc:59:6e:e5:92:84:c5:c5:01:47:78:e8:aa:80:1c:
ea:28:5c:1c:42:14:0a:b9:20:41:1b:17:df:06:3c:10:dc:3f:
1e:f2:fd:33:8b:f9:29:03:d0:0c:29:56:75:2f:a8:4d:49:74:
30:f0:dc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:11:15 2026 by rpki-client