Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
File: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft (raw, json)
Hash identifier: sHLB4nVCksUEEItTd/s1gQ5SKxOT/sBHd+wV5Lmr5ow=
Subject key identifier: F9:D4:25:44:AF:56:A2:DD:E3:5E:C8:85:75:F1:DA:84:59:DA:D1:8A
Authority key identifier: D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
Certificate issuer: /CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Certificate serial: 019D2816EE64AEC21B100CF002E2BA9E4009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
Manifest number: 0B10
Signing time: Thu 26 Mar 2026 03:01:24 +0000
Manifest this update: Thu 26 Mar 2026 03:01:24 +0000
Manifest next update: Fri 27 Mar 2026 03:01:24 +0000
Files and hashes: 1: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl (hash: /24tApd4hbRyg3qQb9yE2juFTlLCu2L7Lc1dG2a85jw=)
2: StMUvEenw_x5lHCzPw_YMF_URiY.roa (hash: ENHv8rZKdjNZdtVZ7QRD0qvto/6QSsxusDFFUShLO+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ee:64:ae:c2:1b:10:0c:f0:02:e2:ba:9e:40:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Validity
Not Before: Mar 26 03:01:24 2026 GMT
Not After : Mar 27 03:01:24 2026 GMT
Subject: CN=f9d42544af56a2dde35ec88575f1da8459dad18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:af:06:0b:cd:60:26:49:61:c9:0f:1a:27:f8:
5a:09:53:f5:04:d6:68:32:fc:d7:44:36:a4:81:0b:
da:6b:f1:8d:b2:52:fa:62:58:f5:f9:50:b3:98:5b:
f2:27:d3:38:d3:c3:8f:a3:fa:e6:6b:47:f5:09:1c:
9c:bd:2e:a5:49:85:f8:30:56:16:f5:96:4f:82:77:
3c:2c:39:f2:5e:21:43:ef:de:56:7c:a7:fd:44:d3:
2b:08:50:fd:72:48:fa:68:c7:0a:5e:1d:b1:5e:d8:
8c:e3:e0:45:f9:bb:aa:e7:6b:9a:cb:40:75:77:84:
e1:c2:4d:6d:53:4d:87:61:45:22:0b:de:21:9b:fe:
af:10:a9:80:91:8c:a2:25:2d:ca:81:a8:05:be:61:
a2:db:0d:d9:f5:2f:78:9f:fe:f7:99:e0:9e:fd:35:
2b:83:c2:94:77:2e:df:01:f5:de:89:ba:75:c9:21:
1f:a5:71:42:c0:06:fe:73:1a:b8:ab:f5:46:d8:df:
1a:6e:ec:51:05:13:26:ae:d3:9c:1c:9f:c5:40:9c:
15:a5:c2:ae:49:6a:44:43:81:e1:38:27:47:d4:0a:
f0:db:d5:a0:75:8f:6c:80:af:74:a7:b0:c3:c1:ba:
80:75:70:e9:29:4e:bd:da:31:70:c8:6e:e1:ec:e8:
80:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D4:25:44:AF:56:A2:DD:E3:5E:C8:85:75:F1:DA:84:59:DA:D1:8A
X509v3 Authority Key Identifier:
keyid:D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f5:94:5d:cd:dc:87:ee:8d:f4:67:40:23:07:a8:fa:e0:1d:
a9:7a:49:80:ff:d4:27:49:d3:39:c8:87:25:77:3f:2c:a5:8c:
4c:50:43:1d:39:51:77:ff:8d:2a:98:b8:79:cc:9f:c9:b3:81:
5a:d6:61:65:3f:cf:57:af:38:96:8d:f3:11:58:2f:60:be:29:
16:77:3c:ec:3a:ec:e1:c5:83:4e:e7:50:ef:d4:d7:fb:2f:df:
2d:b4:05:f8:03:bc:69:f2:23:36:f5:d1:a8:79:94:ae:d3:f3:
e5:1d:67:ba:8a:27:23:77:28:3f:a1:0d:9c:76:b8:32:33:b7:
65:7f:04:a7:4b:68:85:ae:93:9c:49:d8:5a:4d:51:77:1f:dd:
dd:3b:cc:27:80:72:d1:32:b6:65:84:7a:6e:94:f5:4c:e3:44:
de:48:bb:3a:fc:a6:7f:7f:c7:8a:4c:05:9a:9f:95:3c:20:a8:
9d:ba:80:e6:33:2c:97:ba:7f:b2:e3:a9:c3:a6:3c:33:cf:43:
60:f4:9f:0b:cf:8b:34:9d:91:67:dd:02:64:4d:2c:1e:d7:41:
b5:db:4e:d8:1d:97:52:90:c0:f1:a1:26:ae:9c:b4:5d:5b:81:
68:e0:f9:1a:ec:d7:96:84:3c:03:f6:2f:1c:11:75:11:c2:c4:
fc:14:d8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:03:52 2026 by rpki-client