Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json)
Hash identifier: jBdizXoKvrBzP6+lW/zk8WGOJHU1BBppFpk8E+qurAA=
Subject key identifier: 51:2B:7D:0B:B3:6D:C2:D5:83:01:55:E6:06:16:BD:40:96:D4:40:66
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 019D322BE63CFF8B26CF7EFE13E36373EA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
Manifest number: 160F
Signing time: Sat 28 Mar 2026 02:00:30 +0000
Manifest this update: Sat 28 Mar 2026 02:00:30 +0000
Manifest next update: Sun 29 Mar 2026 02:00:30 +0000
Files and hashes: 1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: AOMyCxyJBzx4G1CKBrb4Rn2WyLeyixg9Ov2huX0JkSM=)
2: yA5b7maJfHU0NcBkIvFx-c8-I54.roa (hash: XFcePeHchpjbLRec04pqboXS3/LtfvbSEVpXlPE0ESo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:e6:3c:ff:8b:26:cf:7e:fe:13:e3:63:73:ea:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: Mar 28 02:00:30 2026 GMT
Not After : Mar 29 02:00:30 2026 GMT
Subject: CN=512b7d0bb36dc2d5830155e60616bd4096d44066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:bb:dc:1b:a5:6c:ee:1a:43:67:b8:8e:db:
51:72:7a:50:0f:96:81:66:d9:6c:fc:77:20:d8:b3:
89:fb:55:65:e1:f6:47:be:4e:64:8f:3f:68:96:a8:
ef:64:44:70:f4:a5:e1:00:8f:f4:85:79:83:b2:0b:
90:1d:1d:14:86:8b:20:99:ae:e4:81:15:57:20:a5:
f1:d1:c1:28:1b:94:ba:59:11:0a:12:38:10:6d:69:
e2:cf:08:1d:e5:5e:70:a0:7e:ab:4c:54:06:87:80:
d6:29:2c:14:61:71:d0:51:b6:de:39:f1:36:d0:7b:
93:71:5a:15:92:05:27:80:e0:90:ed:06:d7:df:b8:
da:ad:da:79:13:83:ef:f1:7f:3a:51:52:e5:4f:8e:
5c:da:a9:82:3b:82:ee:c5:24:33:24:9a:03:4d:a0:
b2:cb:db:6e:fc:f4:34:32:0b:00:ec:55:d3:65:1b:
aa:b0:fd:b8:21:59:8f:b2:53:1a:bd:dc:6c:5a:29:
ff:ff:ff:f4:81:49:2f:c5:31:2c:d3:2d:b6:9c:2f:
e9:67:de:47:ec:38:de:99:11:5f:72:04:60:23:a6:
00:33:71:0b:e5:a6:d6:fb:11:f4:85:5a:92:64:b8:
43:e9:e8:c8:5f:e8:15:e2:d5:c0:35:48:0c:bf:95:
43:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2B:7D:0B:B3:6D:C2:D5:83:01:55:E6:06:16:BD:40:96:D4:40:66
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1f:7e:f3:59:9f:5b:cd:1f:0f:85:dd:67:55:0e:08:14:37:
11:78:da:b0:5c:fa:85:87:bf:a0:0c:53:7a:81:67:b0:73:e4:
59:21:92:af:05:7c:e9:bb:9c:cf:56:41:af:5b:78:9d:e1:5c:
e0:69:c0:bb:08:20:94:0e:91:53:e8:c1:38:75:c8:5b:3e:78:
23:8c:67:84:45:21:34:91:cf:46:e4:b9:d2:ce:ea:69:6d:27:
33:a8:44:39:70:e7:48:ea:03:07:5d:74:ce:7d:b3:7b:b2:e4:
f2:22:31:cd:a7:6d:d8:ae:5a:da:dc:25:52:ff:f8:d1:87:09:
5e:eb:6b:d0:27:01:5f:49:f7:f4:38:a6:17:8a:2f:1b:d0:0f:
23:2c:59:ac:6e:fc:7d:47:db:6a:0d:ee:70:99:92:5d:cc:98:
67:ca:57:d2:63:ed:a4:ff:62:68:2f:17:a8:cc:a3:04:23:5f:
83:97:1e:a3:62:98:9f:99:49:c3:f0:9c:25:d5:86:11:99:72:
64:b5:73:d9:1c:f2:80:4e:93:5d:35:60:59:d5:dc:5a:e5:ef:
d7:21:c5:94:0c:aa:fd:56:71:8c:eb:14:65:39:92:1f:11:e1:
b4:bb:90:0a:4c:e1:d6:db:61:35:9d:8f:42:17:11:e0:40:ad:
02:dd:c4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:11 2026 by rpki-client