Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
File: 0j94Nzy5ZlTQMGBkaS78SudxXxc.mft (raw, json)
Hash identifier: 52/WzNmY1WDiQtiAUiOyr4YJP69TLklLfARy4zl9Svk=
Subject key identifier: DC:31:8F:7E:5B:C9:51:EA:60:D9:7F:EA:2C:74:13:B0:F8:F0:7E:EB
Authority key identifier: D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
Certificate issuer: /CN=d23f78373cb96654d0306064692efc4ae7715f17
Certificate serial: 019E1BD8D2501F54A8F3751869C845294D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
Manifest number: 0D95
Signing time: Tue 12 May 2026 11:00:54 +0000
Manifest this update: Tue 12 May 2026 11:00:54 +0000
Manifest next update: Wed 13 May 2026 11:00:54 +0000
Files and hashes: 1: 0j94Nzy5ZlTQMGBkaS78SudxXxc.crl (hash: 2SGuznMXmOmqLbZPUJwx8yQZ9v5pweK4bEfdgybzX44=)
2: 2k2efwLza4ZnO03YIidqVEqe8vI.roa (hash: B5AmAsDvRZimr7FECRkl2IW5OMCrTl16t1iaHWJsJvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:d2:50:1f:54:a8:f3:75:18:69:c8:45:29:4d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f78373cb96654d0306064692efc4ae7715f17
Validity
Not Before: May 12 11:00:54 2026 GMT
Not After : May 13 11:00:54 2026 GMT
Subject: CN=dc318f7e5bc951ea60d97fea2c7413b0f8f07eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:38:b4:6f:c6:67:27:e0:0f:b7:d1:26:66:
32:dc:7a:23:13:02:48:78:a9:fd:7f:2d:92:1f:d6:
fb:29:a8:2e:f6:bb:a3:2e:0d:9d:79:27:e7:62:dc:
75:f9:a2:be:10:64:cc:a5:18:5c:91:6e:3d:4e:54:
15:92:dc:ca:db:63:55:63:ec:ff:ae:da:c5:7d:ea:
7a:5a:24:ed:4c:32:df:bf:ca:ef:64:fe:05:b4:c9:
c8:0d:19:d1:b2:11:2b:94:7b:13:e8:9a:73:2d:bb:
63:85:a2:da:0d:12:00:bf:d8:4e:20:b4:b5:5d:49:
a9:0c:79:a0:fc:49:19:74:a6:ce:b1:a9:0d:a2:e2:
06:25:0d:40:d9:bb:0c:ec:0d:ec:0d:d8:f0:5a:61:
c4:63:b5:6a:b4:a6:ea:a2:78:b4:f1:a9:98:80:43:
6d:4d:84:b9:32:c2:3b:0d:ca:3f:15:0f:5f:00:47:
90:5f:81:d8:fd:ea:bd:11:d7:3a:1a:03:29:67:28:
6e:3a:61:68:1e:1f:64:67:80:15:d7:29:34:97:36:
b3:05:89:3f:40:ae:b0:7b:08:10:d3:b5:3c:d2:d7:
40:66:af:6c:8d:c3:97:72:d2:18:4d:ff:28:69:6b:
12:8e:d0:63:0b:61:ca:da:08:78:bf:91:f2:2a:70:
b0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:31:8F:7E:5B:C9:51:EA:60:D9:7F:EA:2C:74:13:B0:F8:F0:7E:EB
X509v3 Authority Key Identifier:
keyid:D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0d:7f:5e:a1:3f:c7:c8:f5:f1:78:e1:72:d9:88:bb:9b:a8:
b8:02:95:7e:8b:ab:41:1f:b4:b6:3e:9a:d8:d3:e4:46:d7:04:
08:94:db:b3:48:8b:65:73:6f:63:05:54:a4:10:bd:98:bb:16:
8d:c4:63:85:e0:65:ca:10:7a:8f:bc:f2:67:d7:29:a2:9a:dd:
bb:95:57:06:c8:87:a8:54:82:70:13:29:90:48:ce:47:10:4b:
3b:04:cf:7a:09:ac:fb:13:3b:69:c5:e6:b4:67:9d:ba:9b:3a:
87:2e:b1:dd:b1:8a:f9:08:e4:a1:e1:52:02:15:13:eb:aa:2e:
48:b2:4f:0a:19:1c:58:19:eb:75:c3:15:e9:6f:3e:56:5c:d3:
f5:df:3b:98:d0:fa:72:9b:86:d9:a2:a0:38:a4:20:db:56:cb:
43:51:c1:93:89:fb:76:85:8b:a8:3a:14:a7:17:ad:cb:a0:99:
1a:84:b0:73:b3:23:aa:e4:8d:71:8a:fb:33:e7:1f:18:2a:4d:
4e:fb:ed:a4:19:f2:53:19:85:9c:6a:02:82:8c:cd:97:86:c7:
48:29:9a:48:4c:3f:d0:c7:e3:e8:17:78:3d:60:48:cf:46:87:
a0:77:a5:e3:8a:b6:c0:41:b6:f1:0d:55:dc:99:71:ef:0b:b4:
d2:66:03:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:49 2026 by rpki-client