Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
File: 0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json)
Hash identifier: k56jeg82lTVLI9VzwHe/0Iv6Q8BLibmtUrrPYSFUU3k=
Subject key identifier: 69:8A:6D:B8:1A:B7:1B:2C:2D:51:94:01:A5:E8:DB:C3:15:9D:8F:9C
Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
Certificate issuer: /CN=d234798e0712f155292d3211f7c447223ccd49ac
Certificate serial: 019D25F1BD9A8AC71B18FCCC1BD1E4309845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
Manifest number: 15A6
Signing time: Wed 25 Mar 2026 17:01:32 +0000
Manifest this update: Wed 25 Mar 2026 17:01:32 +0000
Manifest next update: Thu 26 Mar 2026 17:01:32 +0000
Files and hashes: 1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: DF9ZoQME0SBAVMeIvASrz6H4+ALUBPIWCYFl69DipuI=)
2: RjK8oLQkpJRzAeEdXg6vAbqYOYY.roa (hash: Mnx3rs/opPeBY8JJ1GG9XmHg+1e4VxaebybsYn1/rbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:bd:9a:8a:c7:1b:18:fc:cc:1b:d1:e4:30:98:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac
Validity
Not Before: Mar 25 17:01:32 2026 GMT
Not After : Mar 26 17:01:32 2026 GMT
Subject: CN=698a6db81ab71b2c2d519401a5e8dbc3159d8f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:01:87:98:99:46:55:a2:26:57:63:b9:a2:
1d:b0:aa:03:4b:8c:8f:8d:3c:2b:69:58:37:e9:cf:
17:b9:fd:c6:eb:81:49:55:e9:2c:ff:d4:21:91:2d:
69:81:43:16:ee:e2:9e:76:54:63:f3:ba:cc:93:1a:
be:be:10:90:7d:74:11:f5:c9:cf:4b:2a:69:93:63:
3f:81:64:90:74:a2:4a:14:bb:e3:cd:23:07:e1:11:
55:85:92:f7:a0:76:b8:d1:21:65:70:4e:9d:a6:ae:
b3:02:29:b6:57:82:34:2b:37:b9:a1:5a:c4:f0:59:
4c:44:ec:13:65:98:ad:0f:e1:a9:d8:d3:12:2f:58:
f1:77:83:c5:8f:c1:2b:d6:99:63:e2:c9:bc:c4:a1:
5c:b9:96:7d:a1:40:2a:6d:c9:f4:fc:42:58:33:36:
39:6d:4c:f6:2a:cf:74:cb:0f:67:da:50:66:ab:8b:
b9:7c:1e:31:fc:01:e4:72:e4:61:0a:9e:ab:5f:8e:
46:9e:53:50:4f:0d:9c:b7:dc:49:c5:55:e7:3f:57:
d8:69:6f:47:e3:06:d5:19:5e:b7:62:73:5b:41:de:
8e:28:d7:12:38:f6:5a:0c:8f:ad:55:89:cd:8e:64:
d5:ee:9f:38:d3:7e:5d:94:b2:7e:9b:ae:00:9d:05:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8A:6D:B8:1A:B7:1B:2C:2D:51:94:01:A5:E8:DB:C3:15:9D:8F:9C
X509v3 Authority Key Identifier:
keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ce:91:70:95:67:3c:d7:11:75:96:f0:2c:46:3f:d3:f3:1d:
56:6f:5b:3f:c1:93:af:08:c6:36:90:60:8a:e6:4e:5a:b0:50:
e9:0a:df:2f:2a:87:33:bd:61:d4:26:a7:b3:9c:30:c9:b4:bb:
4c:d4:f5:c1:cb:6d:b7:35:ec:5e:c7:84:a4:73:d7:1b:38:71:
37:f5:b7:07:49:a5:5b:ab:f3:fa:9b:9b:fc:e0:47:6b:13:ae:
93:1f:3c:b1:d3:38:ce:21:e0:9a:4b:af:c5:b4:e8:65:21:24:
dc:9d:3c:ee:1d:7f:6e:cf:1f:41:f6:7b:85:14:f8:5e:99:5f:
30:61:71:84:37:09:aa:b8:d2:54:2d:08:bf:2a:91:43:2b:31:
ee:e9:72:22:d2:f7:6c:99:4e:b9:08:77:8e:d3:11:72:e9:cd:
f1:ac:04:7b:f6:c3:e7:b9:49:bb:45:30:fc:55:c1:92:00:56:
60:c7:6e:1b:74:5d:a3:a4:e4:9d:b6:01:b9:a0:18:10:7b:ab:
29:41:71:fa:ec:9c:48:ca:ee:3e:0f:d4:f4:c9:b5:1a:a4:2b:
44:94:9c:17:3a:18:8d:ad:89:25:44:76:f2:d4:0f:7d:80:4d:
a3:ee:55:2b:b3:11:57:8a:c5:47:7d:01:e6:ad:83:15:97:a8:
29:1d:73:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:52 2026 by rpki-client