Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: JbfJt98C/yLnsOe3wfA2x5Gqa+LOIg2eeRBOHcBSmPo=
Subject key identifier: 90:C5:CC:98:29:E3:4E:5A:E4:39:CB:10:5E:A7:3B:23:8F:9F:3A:95
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 019E1E3602031585FF57EB7581D0E05C2BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 189A
Signing time: Tue 12 May 2026 22:01:56 +0000
Manifest this update: Tue 12 May 2026 22:01:56 +0000
Manifest next update: Wed 13 May 2026 22:01:56 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: 6AeQBWF+JIMf/OsWWV7YiHK68E/tR6K7xMgR5FiHK/U=)
2: aEPMVp6ZG-lfJdg7BUkYshYQ4L4.roa (hash: RQFlhaq+IvmsXYe3H4USUsgGJ+1VpvdgyBNJxMdfSfg=)
3: iZokYiXVlyx5GvNo1Dzn4LTps70.roa (hash: qi0aecrIUgmskCKuXu+osfwffjV8gg8iqbSuDQ82uKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:36:02:03:15:85:ff:57:eb:75:81:d0:e0:5c:2b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: May 12 22:01:56 2026 GMT
Not After : May 13 22:01:56 2026 GMT
Subject: CN=90c5cc9829e34e5ae439cb105ea73b238f9f3a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:f0:41:03:d0:d6:f8:9e:0c:0e:17:09:78:
76:76:6a:89:fd:24:2e:c7:44:e0:bc:ee:8d:69:4e:
c1:4a:87:f8:6a:44:63:45:00:cb:b5:bf:f5:05:7a:
a3:09:0c:33:ac:98:8b:0d:b7:65:2b:f4:55:c5:a9:
e5:8c:c7:2b:7d:e7:c2:d1:3f:75:1a:7f:5e:da:3d:
af:48:61:ff:43:ac:61:44:b7:92:aa:38:c8:b0:f3:
5a:1f:f8:39:2e:d8:23:ca:69:11:0b:78:6c:0f:63:
d2:60:e3:16:a2:89:b5:85:66:4a:53:4f:07:85:33:
fa:ad:00:a5:66:cd:b5:b3:63:40:70:d4:19:a8:93:
8e:1a:a5:6f:2b:6f:79:94:28:da:66:17:2c:fb:fb:
93:e0:54:93:8a:5f:b4:9d:f1:ea:e6:d4:33:ef:f0:
e8:ee:cd:29:6b:70:8b:a9:f7:28:58:7c:86:24:f2:
eb:c0:a5:2f:9c:b0:32:8e:f3:bc:0c:c3:7f:09:5e:
3c:f4:f5:34:7a:45:9a:10:d9:50:69:26:17:4a:03:
27:61:1f:34:06:72:ac:78:51:ff:27:87:10:f5:0e:
4a:b6:0f:b4:f5:ef:b7:40:78:45:39:f4:52:51:33:
16:44:84:95:3b:2f:f9:1b:fe:ff:4b:ee:81:2b:b9:
70:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C5:CC:98:29:E3:4E:5A:E4:39:CB:10:5E:A7:3B:23:8F:9F:3A:95
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:59:48:5e:2a:d6:4c:c4:c9:2d:d8:c9:0d:3b:f0:d4:4c:ac:
2f:3d:d9:d0:d7:13:50:19:5a:3b:4d:96:26:b5:c9:9a:c9:b9:
31:02:1e:8c:e4:a3:a0:13:56:cf:e1:80:c2:ef:b8:2a:ca:1d:
1b:6f:b0:e3:71:06:50:e0:ac:8c:be:0b:0e:cd:d8:ed:0a:99:
75:e9:74:74:ba:32:4e:f9:c6:31:51:a7:e6:32:30:36:41:52:
ff:14:87:6f:a4:6f:8c:22:d1:98:57:3d:e2:8f:6f:6a:6e:0d:
c7:51:d7:be:4a:96:fe:79:5f:6e:cf:71:bd:2b:54:ed:09:e0:
35:26:93:ff:27:04:b2:ed:8c:50:e9:ba:de:2b:9f:19:2a:6c:
55:4e:ee:45:53:ff:6c:53:e3:44:50:29:b0:b1:82:41:2c:07:
37:50:0c:3e:fa:00:04:5a:45:a4:29:b1:dc:1f:de:a8:1c:89:
db:a7:71:49:fd:73:ce:e3:43:43:e6:ab:11:6b:f3:05:4d:0c:
f9:ca:04:db:fd:35:66:08:d1:07:8c:e4:12:ec:7b:21:9c:32:
05:d7:39:ec:5a:e8:f1:32:2e:b9:f9:c8:1a:fd:8a:cc:71:10:
9a:df:06:19:09:0a:55:b9:b8:3b:98:fc:4f:11:ca:e9:cd:f7:
3f:e6:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:36 2026 by rpki-client