Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/8b013c-1dde-4307-991f-3cc98d88f2ef/1/0JQjRCm6rxXN03YLqkK5RLwxkYo.mft
File: 0JQjRCm6rxXN03YLqkK5RLwxkYo.mft (raw, json)
Hash identifier: FfuGJ0t+j4kPwulTIZf4mPEY1bwaQsR3EXuRFavT+Xs=
Subject key identifier: C3:9B:EA:DD:D5:14:C7:49:FC:FF:A4:9C:58:56:E8:84:D9:24:D4:E2
Authority key identifier: D0:94:23:44:29:BA:AF:15:CD:D3:76:0B:AA:42:B9:44:BC:31:91:8A
Certificate issuer: /CN=d094234429baaf15cdd3760baa42b944bc31918a
Certificate serial: 01A0D3EFB9F0B5FE064662635446E6F09D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JQjRCm6rxXN03YLqkK5RLwxkYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b013c-1dde-4307-991f-3cc98d88f2ef/1/0JQjRCm6rxXN03YLqkK5RLwxkYo.mft
Manifest number: 19
Signing time: Thu 24 Sep 2026 15:01:38 +0000
Manifest this update: Thu 24 Sep 2026 15:01:38 +0000
Manifest next update: Fri 25 Sep 2026 15:01:38 +0000
Files and hashes: 1: 0JQjRCm6rxXN03YLqkK5RLwxkYo.crl (hash: kA9cJasXosZ2uMIhvgiFGD07vgAXf5rcrEuA6dtn7C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b013c-1dde-4307-991f-3cc98d88f2ef/1/0JQjRCm6rxXN03YLqkK5RLwxkYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8b013c-1dde-4307-991f-3cc98d88f2ef/1/0JQjRCm6rxXN03YLqkK5RLwxkYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JQjRCm6rxXN03YLqkK5RLwxkYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:b9:f0:b5:fe:06:46:62:63:54:46:e6:f0:9d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d094234429baaf15cdd3760baa42b944bc31918a
Validity
Not Before: Sep 24 15:01:38 2026 GMT
Not After : Sep 25 15:01:38 2026 GMT
Subject: CN=c39beaddd514c749fcffa49c5856e884d924d4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:23:38:b1:80:e9:c9:76:b1:7f:ed:fe:b4:
f6:20:36:23:b0:f0:ce:33:10:85:29:a7:6c:3c:f4:
e3:21:02:f9:fa:df:5f:bd:4a:dc:79:34:e7:fc:eb:
bd:30:5f:fa:a1:ab:4e:3b:1c:22:4f:23:92:3b:28:
8c:16:b4:4a:c6:5e:78:c3:36:4f:eb:aa:9c:85:2d:
a1:f8:40:11:9e:c6:be:f7:1a:74:96:83:94:68:a1:
eb:c7:93:fa:15:1d:5e:9c:15:dc:72:f1:5d:2e:ac:
3f:54:09:97:32:82:ab:37:82:94:f2:b3:11:fd:2c:
f8:df:30:aa:0f:a5:5d:b2:2d:70:7e:e9:ff:07:8c:
32:98:f5:9f:67:74:b6:36:ed:88:4f:9f:ae:42:8d:
b1:b8:06:07:07:74:87:8c:d0:18:92:43:da:72:78:
df:bf:d0:a0:02:9e:1e:d7:30:15:a2:82:e0:28:fd:
83:56:83:f3:22:38:82:96:13:0b:5e:6b:0a:00:78:
e8:af:a0:b4:e2:5b:2c:ca:fd:4e:3b:b3:b2:0c:43:
72:80:87:70:86:1f:00:fb:c3:f7:e6:4b:52:a7:af:
27:d6:ac:f1:ee:67:91:bb:46:a9:eb:d9:f0:cf:09:
0b:c9:0a:21:38:4a:f3:29:21:6f:6f:36:f5:70:5a:
61:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9B:EA:DD:D5:14:C7:49:FC:FF:A4:9C:58:56:E8:84:D9:24:D4:E2
X509v3 Authority Key Identifier:
keyid:D0:94:23:44:29:BA:AF:15:CD:D3:76:0B:AA:42:B9:44:BC:31:91:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JQjRCm6rxXN03YLqkK5RLwxkYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b013c-1dde-4307-991f-3cc98d88f2ef/1/0JQjRCm6rxXN03YLqkK5RLwxkYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b013c-1dde-4307-991f-3cc98d88f2ef/1/0JQjRCm6rxXN03YLqkK5RLwxkYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:43:67:3e:e1:3a:a6:cd:70:87:bd:84:0e:c2:bc:d3:1b:a4:
85:63:01:6d:65:95:9b:95:31:e1:db:e3:c0:1d:0e:74:97:bd:
e1:9b:7e:a9:e0:a8:a9:03:e9:8f:59:e1:46:01:53:3f:bf:80:
cf:a3:19:5f:d7:56:1e:1e:17:ff:94:c1:4a:ff:1a:c2:99:f1:
c2:a8:e6:f2:79:7e:67:49:46:25:a1:21:1e:23:71:90:5a:0d:
04:64:85:6d:48:09:38:4e:2f:94:2c:bd:be:67:fb:b5:2b:55:
cf:e2:58:1d:a8:22:79:88:60:dd:62:74:c3:5c:4c:50:6b:52:
47:4a:81:ce:44:06:64:af:f7:ab:55:4c:bd:5d:9c:2b:c3:99:
82:0a:d8:03:9e:80:64:f4:73:64:9f:30:5f:d9:27:9a:e9:d8:
9e:9c:06:cb:fc:90:c2:cb:6f:32:3a:d6:5c:15:d8:19:ea:4c:
d6:81:25:af:a3:72:c1:2a:6c:5e:75:94:ae:c7:ba:1f:25:d8:
de:96:95:6d:d0:cc:2a:c8:24:a6:81:57:f9:e0:66:33:15:47:
09:a8:db:bc:87:8b:15:0e:a8:f2:d9:ca:93:d9:2c:ab:87:56:
b2:c6:59:37:65:5d:23:f0:a0:d1:84:02:21:42:2c:77:92:11:
de:87:1e:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT77nwtf4GRmJjVEbm8J0aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTQyMzQ0MjliYWFmMTVjZGQzNzYwYmFhNDJiOTQ0YmMz
MTkxOGEwHhcNMjYwOTI0MTUwMTM4WhcNMjYwOTI1MTUwMTM4WjAzMTEwLwYDVQQD
EyhjMzliZWFkZGQ1MTRjNzQ5ZmNmZmE0OWM1ODU2ZTg4NGQ5MjRkNGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT8jOLGA6cl2sX/t/rT2IDYjsPDO
MxCFKadsPPTjIQL5+t9fvUrceTTn/Ou9MF/6oatOOxwiTyOSOyiMFrRKxl54wzZP
66qchS2h+EARnsa+9xp0loOUaKHrx5P6FR1enBXccvFdLqw/VAmXMoKrN4KU8rMR
/Sz43zCqD6Vdsi1wfun/B4wymPWfZ3S2Nu2IT5+uQo2xuAYHB3SHjNAYkkPacnjf
v9CgAp4e1zAVooLgKP2DVoPzIjiClhMLXmsKAHjor6C04lssyv1OO7OyDENygIdw
hh8A+8P35ktSp68n1qzx7meRu0ap69nwzwkLyQohOErzKSFvbzb1cFphGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOb6t3VFMdJ/P+knFhW6ITZJNTiMB8GA1UdIwQY
MBaAFNCUI0Qpuq8VzdN2C6pCuUS8MZGKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpRalJDbTZyeFhOMDNZTHFrSzVSTHd4a1lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84YjAxM2MtMWRkZS00MzA3LTk5MWYt
M2NjOThkODhmMmVmLzEvMEpRalJDbTZyeFhOMDNZTHFrSzVSTHd4a1lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84YjAxM2MtMWRkZS00MzA3LTk5MWYtM2NjOThkODhmMmVm
LzEvMEpRalJDbTZyeFhOMDNZTHFrSzVSTHd4a1lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUNnPuE6
ps1wh72EDsK80xukhWMBbWWVm5Ux4dvjwB0OdJe94Zt+qeCoqQPpj1nhRgFTP7+A
z6MZX9dWHh4X/5TBSv8awpnxwqjm8nl+Z0lGJaEhHiNxkFoNBGSFbUgJOE4vlCy9
vmf7tStVz+JYHagieYhg3WJ0w1xMUGtSR0qBzkQGZK/3q1VMvV2cK8OZggrYA56A
ZPRzZJ8wX9knmunYnpwGy/yQwstvMjrWXBXYGepM1oElr6NywSpsXnWUrse6HyXY
3paVbdDMKsgkpoFX+eBmMxVHCajbvIeLFQ6o8tnKk9ksq4dWssZZN2VdI/Cg0YQC
IUIsd5IR3ocekA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:43:13 2026 by rpki-client