Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: G9cJ596wn/kUrB6AlttSm/LyFHW0UMJzHC/B8G0iDOI=
Subject key identifier: 1B:A3:80:07:2A:91:EF:5C:05:BE:70:B0:9D:67:5B:7F:8A:A3:C7:D7
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 019F90FF12EC239953DBA8D31900ADEA0646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 195A
Signing time: Thu 23 Jul 2026 22:01:03 +0000
Manifest this update: Thu 23 Jul 2026 22:01:03 +0000
Manifest next update: Fri 24 Jul 2026 22:01:03 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: 7rIKti4Xhjetj7LMaRwhUSDyzVOGTQtBtRO8PdMVI6w=)
2: aEPMVp6ZG-lfJdg7BUkYshYQ4L4.roa (hash: RQFlhaq+IvmsXYe3H4USUsgGJ+1VpvdgyBNJxMdfSfg=)
3: iZokYiXVlyx5GvNo1Dzn4LTps70.roa (hash: qi0aecrIUgmskCKuXu+osfwffjV8gg8iqbSuDQ82uKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:12:ec:23:99:53:db:a8:d3:19:00:ad:ea:06:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Jul 23 22:01:03 2026 GMT
Not After : Jul 24 22:01:03 2026 GMT
Subject: CN=1ba380072a91ef5c05be70b09d675b7f8aa3c7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:8d:74:13:ae:c3:d2:ca:ca:72:cb:8c:6e:
5b:54:91:70:53:44:5f:17:45:27:28:2b:48:96:ef:
be:5d:00:65:e7:8d:3e:58:bb:d8:77:d5:0b:41:9f:
7e:52:a1:cc:8a:ba:63:f1:c1:e3:46:e3:37:c9:04:
d0:52:34:9d:23:9a:eb:b6:ca:2e:8f:82:4c:ff:99:
1e:8a:ef:fe:1a:db:2a:3d:74:91:04:b7:9d:56:9f:
91:0f:e2:23:a0:e4:b8:e3:e3:61:bf:a5:d7:ef:34:
aa:8b:2a:ac:ff:56:f5:34:cf:fe:ff:f3:0a:90:ea:
77:8a:81:f3:01:9b:84:49:fc:39:29:6c:e3:bb:f5:
8e:cf:6d:f8:d5:3b:3d:75:56:de:4c:8b:19:1b:1c:
48:d1:b5:3d:6a:01:b7:eb:ae:cd:84:25:84:f5:98:
2e:18:d5:7a:d4:46:e0:0d:32:07:16:c0:1f:d5:15:
45:15:f3:8c:ec:97:db:6e:0a:1f:e1:e9:15:2c:73:
77:94:82:11:cd:5f:60:42:87:3d:1f:53:f6:78:0b:
d6:11:8a:27:70:e5:c4:9f:e9:d4:99:4e:c6:1e:84:
d9:7a:e3:e6:6a:a4:14:d1:49:25:e6:d6:a5:c4:b5:
43:ab:d0:03:36:5a:4d:b6:db:da:d7:41:1c:7a:b5:
b6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A3:80:07:2A:91:EF:5C:05:BE:70:B0:9D:67:5B:7F:8A:A3:C7:D7
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:e5:fe:18:7a:87:2c:c0:4a:f3:3d:8d:46:9b:ab:25:4e:ab:
21:41:77:56:51:10:fc:d7:fb:2d:6e:be:13:44:75:f1:af:31:
1f:0c:c7:ea:5f:7d:60:dd:16:70:9e:eb:d9:38:fb:4d:4d:7e:
93:17:34:42:5f:fa:da:a7:b3:19:d8:66:5b:de:45:02:fa:25:
07:09:a0:54:b5:05:b5:09:ac:32:f8:be:9e:07:a3:7c:05:5a:
b3:2a:82:69:06:67:c7:fa:5b:c9:cd:f3:87:df:9d:c7:5f:3a:
53:0e:0e:cd:45:4b:be:4f:58:5c:33:d4:af:5f:e4:e5:2a:67:
66:57:b7:bd:65:d7:64:d6:c5:7a:b9:ee:a1:dc:13:14:21:57:
ac:b7:95:48:6c:f0:42:5f:bc:ab:2e:b4:30:28:33:e2:e3:b1:
9e:ab:96:c3:91:d8:f9:2d:75:a9:89:92:0e:0e:67:0a:6d:69:
f5:b6:fc:f7:d7:dc:01:f8:cd:52:16:cb:bd:95:9d:c5:57:44:
ff:e7:6a:2b:db:61:30:8d:9e:cf:eb:65:50:2e:b8:a4:16:72:
86:92:08:20:eb:50:b8:69:9f:5e:8d:db:fa:72:ff:8c:ba:84:
6d:06:29:af:5c:75:b6:73:bc:9e:9f:a9:7c:f2:92:44:9a:c9:
f4:57:62:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:22 2026 by rpki-client