Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
File: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft (raw, json)
Hash identifier: lnAchLT3ZTT86N8IxwzVU8MjXpvma11YjGeVGyD8pzU=
Subject key identifier: 08:42:37:C9:50:51:88:CE:76:8C:3C:AA:23:4E:84:B1:BD:AA:F9:94
Authority key identifier: D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
Certificate issuer: /CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Certificate serial: 01A0DC4D8AC14C90AF2F5B0D18E401DCDB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
Manifest number: 0CFB
Signing time: Sat 26 Sep 2026 06:01:04 +0000
Manifest this update: Sat 26 Sep 2026 06:01:04 +0000
Manifest next update: Sun 27 Sep 2026 06:01:04 +0000
Files and hashes: 1: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl (hash: y4JxOVv+nIuA85q2qlWArl/EXjKRIXK9RrUOskMvEz0=)
2: StMUvEenw_x5lHCzPw_YMF_URiY.roa (hash: ENHv8rZKdjNZdtVZ7QRD0qvto/6QSsxusDFFUShLO+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:8a:c1:4c:90:af:2f:5b:0d:18:e4:01:dc:db:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Validity
Not Before: Sep 26 06:01:04 2026 GMT
Not After : Sep 27 06:01:04 2026 GMT
Subject: CN=084237c9505188ce768c3caa234e84b1bdaaf994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ad:bf:87:17:ee:41:b8:12:f2:f4:9b:7a:ff:
4b:98:bf:2f:6f:db:b0:b0:11:fc:6a:49:64:49:d8:
a1:1d:06:59:42:e7:33:9c:51:2b:0e:1b:80:83:bd:
c6:b6:56:6f:24:eb:33:5a:d7:82:52:b6:25:ac:a8:
4f:db:92:69:39:19:11:20:fb:ad:4c:3c:48:3e:25:
19:15:f4:0f:e6:16:22:a6:72:ec:90:7b:ba:08:d7:
b3:67:b9:46:91:80:e0:a0:c4:32:21:e2:48:a7:52:
ee:82:d0:d9:ac:c4:d4:39:4b:0c:ed:2e:5c:48:65:
3e:91:ba:b8:bb:9f:c6:e3:03:29:0c:f3:47:2a:47:
86:6d:43:db:bd:94:52:95:0f:0f:13:50:89:fe:3d:
97:6d:31:65:b0:46:24:d7:86:3f:06:fc:cf:4e:f1:
91:8e:f3:7c:55:64:c6:aa:bb:07:69:e4:3a:8b:b2:
04:52:9a:93:a6:dc:66:0b:31:cc:3f:33:3e:fe:81:
da:4b:4d:3e:90:8d:40:56:96:23:57:c6:a6:ef:82:
88:55:b7:a7:6e:05:c3:36:c4:57:dc:13:0e:fb:54:
0b:f6:19:5f:e8:81:b7:0a:27:da:40:32:1c:a4:e3:
c1:2a:48:84:8b:ac:6d:32:50:4a:96:f8:c2:01:a6:
d4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:42:37:C9:50:51:88:CE:76:8C:3C:AA:23:4E:84:B1:BD:AA:F9:94
X509v3 Authority Key Identifier:
keyid:D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:97:b9:c1:88:0b:78:46:07:ec:31:5e:e4:cb:68:d6:4c:48:
98:89:83:44:e0:76:ab:3e:05:55:5a:64:d1:e9:70:0c:09:c5:
cf:80:5c:fe:e5:e6:35:58:69:e9:14:ee:e7:c3:ee:55:b1:92:
83:54:f5:a5:f0:3e:cc:32:85:07:1b:90:e1:a6:42:ec:3b:16:
0c:c9:d2:8a:db:bd:44:55:ec:f4:1e:53:40:66:41:9f:79:5a:
36:2e:93:0d:b7:07:24:c2:49:be:fd:78:7a:35:54:0c:f3:52:
df:dc:6a:10:92:c7:00:34:74:4d:42:05:97:3b:1d:12:76:0a:
6f:72:0b:e3:f2:60:79:1b:0d:53:dc:cb:fa:3a:e9:7e:7f:fd:
07:1f:4a:4a:16:15:e3:a5:23:a6:f1:ca:28:60:f3:75:56:13:
fd:5c:88:e9:1a:23:e0:62:5c:78:18:d8:0b:e2:60:0b:f2:59:
f1:4f:51:70:80:18:69:75:9d:ef:b0:fd:22:08:df:62:90:a7:
a8:8a:9c:a7:65:57:1d:6a:74:41:b3:e7:55:70:d8:47:62:51:
44:57:f1:de:23:fc:38:03:b8:70:55:bc:7c:10:80:86:76:12:
ad:81:02:b6:b2:9e:9c:6b:88:6a:8c:28:47:0f:27:50:63:0b:
78:71:7a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:41:16 2026 by rpki-client