Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: d/rTfbvsGRczZxJUMzX3HBcYbDQZ+3zYiDT+1mFwPck=
Subject key identifier: 90:42:8D:CC:D5:39:36:BB:61:70:FA:4B:8C:F8:B4:9A:D6:98:DF:95
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 019D27041802D4BAAB85D9FBC40102D65169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 181A
Signing time: Wed 25 Mar 2026 22:01:12 +0000
Manifest this update: Wed 25 Mar 2026 22:01:12 +0000
Manifest next update: Thu 26 Mar 2026 22:01:12 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: id4gpBcW8uhnchww5e+jHAIu7JVrdyAHhJ0F5t3cZnw=)
2: aEPMVp6ZG-lfJdg7BUkYshYQ4L4.roa (hash: RQFlhaq+IvmsXYe3H4USUsgGJ+1VpvdgyBNJxMdfSfg=)
3: iZokYiXVlyx5GvNo1Dzn4LTps70.roa (hash: qi0aecrIUgmskCKuXu+osfwffjV8gg8iqbSuDQ82uKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:18:02:d4:ba:ab:85:d9:fb:c4:01:02:d6:51:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Mar 25 22:01:12 2026 GMT
Not After : Mar 26 22:01:12 2026 GMT
Subject: CN=90428dccd53936bb6170fa4b8cf8b49ad698df95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:09:ea:3f:f7:40:6d:09:9d:3d:47:47:90:
38:32:bd:22:5c:32:7b:c8:77:1d:3e:d9:de:d5:32:
9f:81:ed:c5:b5:aa:8c:8a:01:91:1c:59:23:50:f1:
42:9d:51:62:d0:a9:db:cc:77:ec:1b:8a:2a:f5:ec:
35:b2:39:2b:e3:76:8b:a5:73:42:1d:71:a5:d0:31:
e9:11:b6:48:20:42:60:b1:60:43:fe:0a:c2:87:39:
35:34:23:a3:5e:5f:e9:8d:94:eb:8f:9e:d2:1d:d0:
61:3d:d7:d7:0c:fb:73:9d:ea:2f:1b:49:56:f1:a3:
50:b0:34:ad:bd:bb:51:73:4f:4b:d9:ee:f5:17:94:
f1:f6:6e:b9:2d:5a:01:aa:de:08:68:99:60:ea:86:
43:93:b4:00:b9:47:ae:6c:52:44:c8:58:33:40:4c:
2f:f4:e6:a9:6f:47:78:4f:d1:03:45:fc:e2:ec:a8:
25:e4:12:bf:cd:68:13:74:ad:88:a0:f1:96:17:1c:
f5:d6:7b:89:d3:69:98:1c:6f:f8:40:6c:83:b3:38:
68:a4:98:57:d8:45:05:b6:b1:43:46:8b:a6:28:6c:
e3:17:e2:d1:fb:f1:dd:bb:f0:c6:74:72:38:b6:3b:
6f:02:c7:de:f2:eb:91:a5:48:2c:7a:f7:6a:b5:1e:
e5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:42:8D:CC:D5:39:36:BB:61:70:FA:4B:8C:F8:B4:9A:D6:98:DF:95
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3a:80:8d:ef:56:c0:3d:c4:c8:95:0d:d9:2c:ad:98:2e:48:
39:a1:6a:42:5f:45:79:5f:fa:6b:41:ff:2b:d5:cd:04:52:a8:
06:9d:c7:25:05:00:a6:ca:cb:33:df:c8:f5:5b:9d:49:66:26:
0e:55:5c:b0:c3:4d:a6:3c:45:05:5f:70:8d:ed:14:98:fa:f1:
34:78:ab:b2:ec:b4:fb:2f:1b:6b:a7:2d:83:91:ef:52:c6:c2:
32:34:b0:a7:85:30:a1:90:57:32:2c:93:9b:6a:72:cc:32:b6:
bd:e3:f3:71:f6:86:c2:a4:44:2c:9c:54:d9:8f:77:a1:31:50:
c6:ee:d9:ab:8f:b3:0e:47:d9:f5:61:cd:ca:c4:35:14:c9:18:
75:c3:91:d4:ca:13:e1:2c:1a:89:bb:16:78:df:90:a0:9f:2f:
fc:9f:28:18:8e:89:8f:3c:05:1b:fe:d6:4e:a9:7b:6a:e9:7c:
f7:24:98:81:af:0b:e5:42:3c:89:d8:d1:6d:51:84:6a:f1:1f:
63:00:79:09:67:22:1d:3b:43:e3:56:6b:81:e7:6f:c1:a7:16:
a1:27:5b:c6:3f:ff:67:c3:a3:53:e0:c4:23:38:22:da:93:18:
cf:7e:73:d2:dd:c5:6a:14:f5:78:56:a2:28:c3:dd:24:86:ff:
c2:5a:15:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:52 2026 by rpki-client