Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
File: 0jtkd-HIT1KQfNYMY-qD715Kx4I.mft (raw, json)
Hash identifier: hORzVWZoOaWKNEUef4eBTRNY6KwOuWmxOkFR2qgfjm8=
Subject key identifier: DB:EB:D3:0E:D2:F4:94:B8:2F:0B:21:06:D7:0C:59:97:F5:DF:0A:A7
Authority key identifier: D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
Certificate issuer: /CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Certificate serial: 019D25F1C6BCDE0B389127151100C56FC1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
Manifest number: 0BD2
Signing time: Wed 25 Mar 2026 17:01:35 +0000
Manifest this update: Wed 25 Mar 2026 17:01:35 +0000
Manifest next update: Thu 26 Mar 2026 17:01:35 +0000
Files and hashes: 1: 0jtkd-HIT1KQfNYMY-qD715Kx4I.crl (hash: M9r9SL/U8Dy9HW0TJ/R3hfbqfhD33uy5G07kwp5krHY=)
2: u74Y2DtNYCrFLzeUZsDA2ek1RJQ.roa (hash: v4D4CGF7IK7jFQI/k7wDX6FIFSnqg7cuKSN4Jo5u5mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:c6:bc:de:0b:38:91:27:15:11:00:c5:6f:c1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Validity
Not Before: Mar 25 17:01:35 2026 GMT
Not After : Mar 26 17:01:35 2026 GMT
Subject: CN=dbebd30ed2f494b82f0b2106d70c5997f5df0aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7e:1e:84:21:bb:77:57:0a:41:35:ac:c0:3e:
8c:d1:65:df:b7:9f:b5:12:28:38:b2:ef:c2:1b:a0:
37:5c:16:46:7c:3c:b2:a5:2e:b7:72:b0:df:a4:3a:
c6:c8:f6:3d:01:5b:c4:dc:db:f3:89:c8:f4:b0:b9:
f5:d3:2d:53:b5:57:82:ac:cf:34:70:a9:64:75:d4:
c8:07:d7:3b:93:93:76:b8:49:a1:89:8a:c4:86:7e:
c7:ca:56:d5:0e:2b:36:f4:29:71:15:c5:82:06:41:
2e:60:35:87:1e:1e:3f:67:87:10:98:8c:62:36:94:
0e:38:36:95:17:3f:b9:5b:d5:68:f4:ff:8f:2c:aa:
67:c3:73:96:93:96:55:d2:4d:f5:9e:f1:3e:83:3d:
2f:8f:b6:e2:97:9d:2f:c3:b0:3b:8a:1a:cd:e6:a5:
6b:59:a5:a9:d9:08:bd:7f:ae:11:be:72:e8:c2:44:
ad:4d:d4:53:d9:fa:b6:4f:f5:2e:ed:ec:2b:7f:ce:
62:4b:12:01:11:db:6c:97:58:f9:93:08:21:4c:8b:
f5:e4:ba:5f:f2:79:b4:ae:13:31:1f:2f:5a:d4:ef:
4d:b1:28:54:87:67:35:bc:03:4d:d6:1e:74:a8:a7:
bc:30:c1:20:8e:24:fc:96:a2:f5:b6:53:aa:31:9f:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EB:D3:0E:D2:F4:94:B8:2F:0B:21:06:D7:0C:59:97:F5:DF:0A:A7
X509v3 Authority Key Identifier:
keyid:D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:58:87:00:97:5a:c9:1a:27:4f:3b:d7:da:9a:5e:ed:ad:26:
0c:5c:f8:ff:a5:87:37:12:83:50:b3:fd:74:87:bf:6f:90:d4:
eb:45:5d:0f:e7:db:8a:8f:fe:d8:ce:98:68:a0:fa:a6:21:05:
70:a9:dc:91:0d:5a:ab:30:29:e4:d5:f8:ec:b0:e5:30:2a:03:
a9:92:b6:90:10:b2:be:b7:22:17:d4:92:ac:b8:5c:fc:66:ca:
11:c5:2b:8b:d6:0f:9c:82:ec:aa:33:d8:9d:60:5b:4e:17:25:
29:0e:9e:53:31:ba:a3:f1:00:02:e7:cf:28:59:4b:2e:2b:75:
32:21:dc:f2:58:47:7f:18:cb:a7:35:40:be:10:72:d7:25:23:
81:10:f6:77:3e:f5:ef:d3:cd:e1:f2:53:63:0d:17:d5:a9:29:
d1:28:ba:5c:ef:b5:49:cc:41:04:24:c2:53:cc:28:70:ed:5f:
9f:fb:14:ee:d0:a2:1f:71:64:19:c0:39:9e:ff:9e:4a:f1:85:
19:97:ae:ce:34:bc:3b:c6:9c:90:36:7e:9e:9d:c8:94:17:c6:
28:54:89:a5:c7:98:58:bd:ef:af:61:12:85:d2:9c:8d:5e:eb:
1b:fd:fa:fb:ad:8e:c3:5d:a9:57:e7:a0:d8:eb:aa:ba:34:d2:
d5:20:bd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:16 2026 by rpki-client