Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
File: 0jtkd-HIT1KQfNYMY-qD715Kx4I.mft (raw, json)
Hash identifier: ucMWmEzhc2xTZ4OVi2iedDCXVsng/oH88U20NcSUihU=
Subject key identifier: DB:2F:38:DB:F7:AF:28:FE:23:33:71:77:89:EB:44:33:B0:1C:A7:01
Authority key identifier: D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
Certificate issuer: /CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Certificate serial: 019F91DACFA9B17C277BFAFDB6ED12595B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
Manifest number: 0D13
Signing time: Fri 24 Jul 2026 02:01:03 +0000
Manifest this update: Fri 24 Jul 2026 02:01:03 +0000
Manifest next update: Sat 25 Jul 2026 02:01:03 +0000
Files and hashes: 1: 0jtkd-HIT1KQfNYMY-qD715Kx4I.crl (hash: RcDqNMCHBL7BMJDGCjF4qcrxDSewusZtvUOIKgxrgo4=)
2: u74Y2DtNYCrFLzeUZsDA2ek1RJQ.roa (hash: v4D4CGF7IK7jFQI/k7wDX6FIFSnqg7cuKSN4Jo5u5mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:cf:a9:b1:7c:27:7b:fa:fd:b6:ed:12:59:5b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Validity
Not Before: Jul 24 02:01:03 2026 GMT
Not After : Jul 25 02:01:03 2026 GMT
Subject: CN=db2f38dbf7af28fe2333717789eb4433b01ca701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:74:ef:81:cc:14:ff:d9:da:86:03:97:34:
2f:2e:a3:05:90:de:2e:a3:ce:c2:50:03:32:a2:b5:
d7:61:b1:02:36:e3:b0:ff:e8:c5:61:9c:74:bb:eb:
3e:81:fe:73:71:d2:fc:9d:1e:d4:43:8e:7b:8b:7e:
e5:8b:e1:ad:93:93:6d:da:ff:d9:25:25:4a:9b:4a:
5b:7f:31:1c:19:6b:b3:20:ea:68:09:bc:fd:59:a6:
79:19:8f:e5:d1:24:b8:f0:a8:b6:75:4f:f6:ef:36:
60:2c:8f:d9:ed:e1:de:f8:b0:4f:e3:8a:11:cd:6a:
2f:14:76:22:a4:6d:d8:dc:06:a2:25:84:5a:f1:47:
6e:e0:d1:98:08:5f:d8:75:9e:8e:95:25:96:67:22:
7d:ba:80:28:17:01:49:c5:55:b9:df:dc:e5:29:03:
45:53:25:97:78:ca:2d:13:eb:e3:38:b6:a9:e0:8e:
b1:52:4e:1b:4c:74:3d:2d:37:76:86:72:1f:e7:92:
ad:95:e4:68:0d:f4:7f:94:63:8b:c7:a9:f9:2c:2d:
91:f4:ad:8e:12:ee:35:8f:8f:fc:ee:6e:70:c3:b6:
f1:5f:9a:8c:f7:20:6f:db:00:88:f9:ad:bd:fe:c5:
cf:fd:57:66:5d:0d:b0:41:33:0e:b7:68:5a:6b:4b:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2F:38:DB:F7:AF:28:FE:23:33:71:77:89:EB:44:33:B0:1C:A7:01
X509v3 Authority Key Identifier:
keyid:D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a9:74:14:09:e7:bc:2d:b9:6f:b3:d1:00:2d:08:2b:2c:f7:
f5:55:51:54:b7:3d:d5:54:29:94:67:2c:c2:8b:2b:52:17:48:
7e:56:86:cd:b4:ed:f6:8e:a0:7f:a1:c8:ff:f2:31:10:99:8b:
40:3c:50:d1:32:a8:57:d8:88:a4:5a:b1:08:4a:3b:09:53:9f:
09:21:d5:be:ec:a9:d4:47:1a:c0:e0:2c:35:03:23:98:8e:29:
60:fc:82:7b:a2:5a:42:d5:69:fb:06:88:37:08:09:76:d3:46:
e7:29:d3:7d:b5:7d:a9:0b:20:1c:ed:22:f5:b1:64:2f:69:7e:
bc:78:a5:88:ae:f2:e4:a9:45:12:47:1e:35:5e:8e:dd:26:36:
a6:83:7a:fa:44:ca:31:4a:30:e4:06:25:35:e2:ef:8a:a6:7f:
cd:e5:9f:40:f1:76:6b:46:30:6b:0f:10:c1:5a:71:49:ea:9b:
42:0a:31:f6:d8:74:d0:b7:76:e1:98:1a:d3:e8:03:23:33:27:
69:b4:69:17:c5:86:5f:c6:dc:5d:11:c2:2a:a0:c7:3c:dc:ff:
9e:14:fe:2a:f5:ee:b9:b5:9f:1d:24:a0:76:6f:a7:d4:13:5b:
42:7b:fc:c4:7a:03:31:41:97:1b:66:38:bc:72:2a:c5:bc:3d:
84:e4:45:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:29:30 2026 by rpki-client