Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
File: 0j94Nzy5ZlTQMGBkaS78SudxXxc.mft (raw, json)
Hash identifier: sbqcwjwqABmKFpzL27LIFrzYu53SmN1xVtHp+4vqYbk=
Subject key identifier: B6:E0:C1:E3:9E:DF:40:62:E7:AC:BF:E7:98:70:F3:83:DF:20:FF:58
Authority key identifier: D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
Certificate issuer: /CN=d23f78373cb96654d0306064692efc4ae7715f17
Certificate serial: 019D341A9F1DDFB40BB016EC41248AFC42FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
Manifest number: 0D1D
Signing time: Sat 28 Mar 2026 11:00:52 +0000
Manifest this update: Sat 28 Mar 2026 11:00:52 +0000
Manifest next update: Sun 29 Mar 2026 11:00:52 +0000
Files and hashes: 1: 0j94Nzy5ZlTQMGBkaS78SudxXxc.crl (hash: H/4e2R3Qw0myWIdiltCtICTFEJvKLNShGcb3g/1CgBQ=)
2: 2k2efwLza4ZnO03YIidqVEqe8vI.roa (hash: B5AmAsDvRZimr7FECRkl2IW5OMCrTl16t1iaHWJsJvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:1a:9f:1d:df:b4:0b:b0:16:ec:41:24:8a:fc:42:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f78373cb96654d0306064692efc4ae7715f17
Validity
Not Before: Mar 28 11:00:52 2026 GMT
Not After : Mar 29 11:00:52 2026 GMT
Subject: CN=b6e0c1e39edf4062e7acbfe79870f383df20ff58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:a8:48:6d:c5:79:4c:cf:94:c0:ad:08:9b:
f5:66:4f:f0:9d:0c:c8:02:ad:c0:7b:57:57:82:6e:
09:06:66:38:fb:c1:00:6f:af:3a:72:d7:53:47:2e:
cc:83:61:9b:c4:20:8d:0b:4f:76:0b:4d:a0:a6:ff:
2f:b9:13:af:60:4f:4c:ab:39:0e:51:cd:ae:37:d5:
4c:6c:36:35:24:ab:90:9f:de:3c:9f:74:2c:f1:08:
cc:d0:21:fa:6e:89:40:00:51:9d:7a:e3:29:24:b6:
10:d2:7f:8e:5a:46:de:b2:b6:10:71:ee:7f:0c:0a:
a1:96:86:ee:10:8b:21:b0:38:cf:29:14:50:be:50:
e6:1f:d7:50:47:21:69:7d:75:de:4e:ea:3d:dd:dc:
b0:97:eb:b1:af:de:d1:27:3c:8d:82:59:45:10:9c:
10:96:7a:da:66:46:23:2d:eb:ba:a3:87:3e:61:c9:
49:1b:bb:93:f7:15:74:a1:ee:d1:ab:75:51:33:0a:
30:1c:fd:d0:16:5c:c0:ec:6e:22:aa:d8:37:45:6f:
82:7d:0c:54:ff:7e:ca:14:fa:01:d5:15:c9:42:17:
6e:b5:80:7a:13:ae:af:32:d8:61:49:26:c0:38:53:
dc:2a:43:9c:f8:05:fb:b6:6b:e9:0c:a6:12:2f:0f:
61:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E0:C1:E3:9E:DF:40:62:E7:AC:BF:E7:98:70:F3:83:DF:20:FF:58
X509v3 Authority Key Identifier:
keyid:D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ef:d6:1b:dd:8c:32:b7:33:49:06:1f:bf:bd:27:e7:3a:46:
d8:9a:24:d5:37:b3:e4:4b:3e:86:b9:22:82:d6:e3:b5:8c:d7:
6f:f3:bf:04:9b:f1:a0:d8:00:6a:39:de:62:ff:0b:da:37:fd:
b3:e5:4e:5b:ca:a3:94:47:5f:25:af:66:9a:0f:bf:5a:a0:f5:
a5:69:16:d3:b4:7c:a9:e2:75:1e:2b:34:89:57:f6:b3:87:02:
f1:a5:4b:cc:2c:51:4d:46:f3:fc:d5:3c:85:78:5e:1b:9e:45:
31:bf:d1:8d:a1:ae:f5:d4:09:b8:c0:17:f9:c1:41:32:5d:7c:
74:06:ba:b4:e3:33:52:71:06:af:31:74:59:b7:dc:40:06:69:
44:42:a4:45:dc:5d:7b:f0:1b:63:b3:7f:e6:99:7c:ad:b4:fc:
87:7c:01:68:10:29:a0:e8:37:6f:5d:16:ba:14:e0:99:53:64:
8b:5e:dc:84:a3:a9:48:c4:99:5f:6f:56:a7:b5:d5:8e:0d:d2:
44:c4:cf:06:fb:b8:ea:16:f5:0a:cd:f5:9f:1c:cd:47:e1:37:
a4:d2:5a:8d:32:61:83:69:42:b8:61:30:26:05:54:9f:57:6d:
2a:f2:76:60:3e:f0:18:41:c0:57:84:ba:ba:ac:d9:62:76:65:
22:43:fb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:26 2026 by rpki-client