Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
File: 0jbg4txaKEOOMOv9HWpqlNs9HEA.mft (raw, json)
Hash identifier: zVxHXsJKmlzy+NVDv6Z1vlw+vKn5M/YPCDCisWseH5Y=
Subject key identifier: 67:4D:E5:A2:E7:9B:53:5B:05:E1:80:6D:E8:03:24:B0:49:F1:24:FE
Authority key identifier: D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40
Certificate issuer: /CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40
Certificate serial: 019D98F45FDFC052BE89644D24BC552B4CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
Manifest number: 133B
Signing time: Fri 17 Apr 2026 01:00:45 +0000
Manifest this update: Fri 17 Apr 2026 01:00:45 +0000
Manifest next update: Sat 18 Apr 2026 01:00:45 +0000
Files and hashes: 1: 0jbg4txaKEOOMOv9HWpqlNs9HEA.crl (hash: PN1ggjDYVZivklFuKWIBhSXYdceKt33PqtqrNapSymo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:5f:df:c0:52:be:89:64:4d:24:bc:55:2b:4c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40
Validity
Not Before: Apr 17 01:00:45 2026 GMT
Not After : Apr 18 01:00:45 2026 GMT
Subject: CN=674de5a2e79b535b05e1806de80324b049f124fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:ff:23:8f:4e:b2:d6:78:57:41:86:2c:bc:
fc:c9:fe:37:96:4c:0c:fa:ac:9e:c1:51:7b:38:a8:
39:79:cf:f5:43:c8:44:1f:8d:4d:d6:ee:ff:91:41:
bc:f6:31:29:97:43:96:1b:6f:90:ce:a9:79:29:73:
23:96:da:43:d2:b3:f4:ae:f0:2e:4f:c8:9d:93:7c:
b6:71:dd:26:c5:0c:83:d2:1d:d4:ab:2a:e7:4f:82:
3f:b2:d8:70:d1:ef:0e:fa:b6:5c:fb:d1:70:3b:2d:
9d:42:0c:2a:8b:dd:87:42:df:cd:fb:0a:d4:2b:84:
f3:a9:19:8d:d2:59:31:5c:27:47:77:31:db:34:a5:
84:8f:9e:da:d9:73:56:dd:00:07:c1:e4:0b:21:69:
7d:a7:9e:1b:85:02:91:ef:f5:a8:2f:a3:15:1c:3f:
d2:2e:51:be:e1:50:df:ca:75:98:b2:e4:d5:7c:e9:
63:ec:7a:e8:f1:ce:89:31:a0:1d:32:09:c2:cb:31:
3f:f8:c8:7c:31:ab:4d:36:82:3a:e3:d1:7c:e8:dc:
0a:06:65:9c:5f:0b:4a:ad:7b:58:86:7d:3f:d1:56:
f1:43:bc:30:9b:ed:44:2e:17:f5:c3:6b:28:0a:2e:
14:17:76:74:b9:5b:12:c3:dd:44:04:d9:70:c2:1b:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4D:E5:A2:E7:9B:53:5B:05:E1:80:6D:E8:03:24:B0:49:F1:24:FE
X509v3 Authority Key Identifier:
keyid:D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a0:15:3b:67:93:6d:f7:bd:11:69:0e:3b:a3:0f:65:42:0d:
49:13:fa:06:b7:c0:00:3d:69:f0:72:7c:30:c5:08:c5:00:2b:
69:8b:14:9d:35:f9:5d:c7:bf:47:15:e4:41:94:f9:0d:d3:49:
4b:aa:11:b7:63:fc:4a:01:73:51:5b:2e:6a:b4:f2:84:f3:e0:
8a:aa:8d:d4:30:a5:6e:e7:e4:f3:fd:3c:1d:db:29:64:ef:9e:
e4:c8:d7:48:97:d8:43:c6:3d:2a:78:ea:a5:26:3e:8a:6a:7f:
21:64:2b:0e:36:29:99:04:6c:1e:e1:3f:63:45:28:d9:ef:f8:
fe:40:1a:50:56:21:13:36:9a:60:54:30:f7:58:0b:5f:9f:4b:
71:4d:5d:fe:58:69:f7:0d:2a:39:69:ce:56:48:83:24:cd:c5:
4e:fe:dc:e5:3a:46:64:43:c9:c4:97:60:b0:d4:2d:45:eb:42:
13:3c:81:40:ed:1b:49:7b:e4:9c:3d:28:62:2f:3b:27:90:7c:
aa:d1:3f:a0:90:23:7c:e1:84:80:ac:a0:9d:b0:01:99:9e:5f:
05:28:22:11:4f:71:5c:cb:73:b2:17:b4:0f:26:85:85:31:55:
4b:d8:ce:08:3f:1d:da:1e:e3:94:80:5e:b1:cc:0c:b1:0a:3a:
fd:50:c7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:30 2026 by rpki-client