Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: hfbQGudSpPhcZDQrZ+kziW24mkQ2yQetgWErIz8asGo=
Subject key identifier: 97:B6:93:C3:EF:CD:B2:E8:3B:FA:A8:90:35:2F:05:E9:3F:FF:83:3A
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 01A0CFA3E01BC609529D4127E3752BB1605B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 19FF
Signing time: Wed 23 Sep 2026 19:00:18 +0000
Manifest this update: Wed 23 Sep 2026 19:00:18 +0000
Manifest next update: Thu 24 Sep 2026 19:00:18 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: g2JPJ1Luk81fun1m4c047O1J09QnPs03jTMyCW3LKxw=)
2: aEPMVp6ZG-lfJdg7BUkYshYQ4L4.roa (hash: RQFlhaq+IvmsXYe3H4USUsgGJ+1VpvdgyBNJxMdfSfg=)
3: iZokYiXVlyx5GvNo1Dzn4LTps70.roa (hash: qi0aecrIUgmskCKuXu+osfwffjV8gg8iqbSuDQ82uKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:e0:1b:c6:09:52:9d:41:27:e3:75:2b:b1:60:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Sep 23 19:00:18 2026 GMT
Not After : Sep 24 19:00:18 2026 GMT
Subject: CN=97b693c3efcdb2e83bfaa890352f05e93fff833a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:03:7f:db:93:03:f9:e8:0e:e6:80:fc:ce:87:
69:ab:74:ce:bc:55:c1:b6:1c:13:01:fe:75:12:a2:
81:ad:7f:ce:78:47:63:75:d1:de:bf:0a:a5:4b:19:
77:9f:cb:70:a1:78:bb:44:c4:c2:15:e4:22:ba:13:
25:ab:10:3f:d2:28:c1:d5:41:d2:94:21:c0:f5:31:
64:b1:3f:75:d4:89:9b:c5:22:08:ee:b5:af:74:77:
bf:4f:03:55:4c:39:94:8a:a5:44:57:1a:d8:8e:93:
d7:83:f5:71:be:62:e8:5e:7a:04:46:b0:fc:b9:b6:
ae:b8:59:b3:87:3d:a5:73:a2:d2:c0:6d:30:a6:07:
50:9a:58:4a:25:b3:b7:e5:9a:dd:f8:78:87:59:f0:
ec:1d:5b:07:d3:0b:31:ee:47:40:a4:3f:c3:ba:d8:
e3:a8:a3:64:99:2d:8a:ff:63:39:bf:9e:ea:f7:ad:
c8:c7:56:2b:23:eb:2d:2a:a5:ba:f4:02:fa:38:f7:
c2:ac:2e:d6:ed:38:73:27:75:ad:e0:7e:ff:c1:20:
6b:65:78:79:61:91:f4:c1:6b:31:8e:75:ea:75:0d:
34:38:9d:6a:09:5b:8e:43:4e:1a:92:a1:76:48:a0:
1b:a2:20:c8:62:41:eb:19:06:48:22:86:cc:66:fe:
ad:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B6:93:C3:EF:CD:B2:E8:3B:FA:A8:90:35:2F:05:E9:3F:FF:83:3A
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d3:d7:23:af:a2:08:37:71:18:43:c5:aa:c3:b4:c9:fe:ff:
b8:de:26:2f:f3:17:a1:2b:5e:ac:55:ca:da:de:c4:f3:9d:4a:
ae:24:15:1b:77:ef:c0:04:06:48:6d:15:b6:24:f3:78:5f:11:
79:7f:03:8e:3f:ba:ca:31:04:4b:d5:fb:a4:e6:88:ee:d8:d6:
96:73:08:4c:1d:89:4b:15:47:51:63:44:6b:8d:c5:46:a6:5c:
7a:a4:4c:73:c9:fd:b3:f5:da:d8:b9:4c:d5:17:db:c7:9f:88:
7d:e1:59:df:a1:84:11:62:dd:47:b6:5c:64:f0:e3:79:e0:b5:
01:89:38:2d:92:25:da:b5:27:a8:82:71:b0:c3:14:30:6c:63:
92:77:be:fb:2d:7c:4c:5a:c7:5f:f9:d1:01:3b:df:f8:e5:e4:
71:90:4b:bb:7a:0c:22:3c:4b:c4:ab:ed:a9:8b:82:8a:ba:ed:
7d:44:e4:0b:cc:20:3a:93:45:dd:83:c6:b0:5b:48:b9:ba:92:
6a:52:67:31:b9:ab:b0:35:40:e7:31:5d:b3:81:5d:43:8d:4e:
28:b5:f6:e6:e7:34:de:7b:08:a2:ab:54:9c:21:74:1c:75:b9:
2e:37:1a:8a:fb:82:02:fc:26:25:97:97:bb:d4:fd:9e:d2:48:
33:02:3e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:48:20 2026 by rpki-client