Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
File: 0jtkd-HIT1KQfNYMY-qD715Kx4I.mft (raw, json)
Hash identifier: KDZ0UAxy5jHlTnPVS9I+y4eJsE4PP7/s6Tm819bZP5M=
Subject key identifier: 1F:40:C4:66:5D:2C:C9:9D:52:44:65:20:79:97:60:F3:15:E2:27:E5
Authority key identifier: D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
Certificate issuer: /CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Certificate serial: 019FA907B67A2C30296918684A228B3B7F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
Manifest number: 0D1F
Signing time: Tue 28 Jul 2026 14:01:22 +0000
Manifest this update: Tue 28 Jul 2026 14:01:22 +0000
Manifest next update: Wed 29 Jul 2026 14:01:22 +0000
Files and hashes: 1: 0jtkd-HIT1KQfNYMY-qD715Kx4I.crl (hash: zGRsKHxylYI35RtCtBmb5A6CumYqe+U2hNDCvdtgXtw=)
2: u74Y2DtNYCrFLzeUZsDA2ek1RJQ.roa (hash: v4D4CGF7IK7jFQI/k7wDX6FIFSnqg7cuKSN4Jo5u5mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:b6:7a:2c:30:29:69:18:68:4a:22:8b:3b:7f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Validity
Not Before: Jul 28 14:01:22 2026 GMT
Not After : Jul 29 14:01:22 2026 GMT
Subject: CN=1f40c4665d2cc99d52446520799760f315e227e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a6:d5:9c:7d:f7:2c:21:34:d8:0b:d8:56:32:
e0:26:d1:a1:14:ed:4c:21:8e:df:d8:23:07:06:42:
39:7f:c3:6d:ad:f8:64:5b:39:d2:77:00:d9:05:40:
aa:53:b1:0e:4c:ce:7d:db:85:62:28:60:b7:93:8a:
b1:e2:2b:e0:6b:4b:ab:d2:6d:37:b1:72:e9:c8:f3:
2f:cf:39:c2:4c:e8:74:f0:68:2d:d8:18:b7:aa:41:
ea:9c:cc:ff:49:56:31:9e:75:00:ac:f9:2d:bf:96:
f2:a6:f7:24:e9:d1:68:0d:f0:66:9d:8a:90:ef:40:
46:2e:aa:5c:ef:41:3c:a8:c5:bc:dd:43:a0:a7:42:
c0:e4:8c:7b:2f:59:8e:46:bf:8a:d9:c1:82:28:54:
f8:59:42:b8:bd:5c:da:e6:02:d1:2f:05:ea:8d:e0:
54:c7:fc:59:4d:7a:9b:b3:6a:96:3f:95:cf:4c:77:
7b:8e:0f:e8:46:f7:29:cd:85:30:28:b2:b4:50:76:
40:91:fc:ed:7f:f4:a5:df:fe:dd:3a:ba:da:ed:70:
b0:63:72:42:ea:95:da:66:53:c5:8b:8a:f7:c0:2a:
18:01:64:49:96:9e:b9:90:64:f6:ad:0c:49:0f:66:
70:e7:75:cd:8e:cd:40:2c:37:41:d0:f8:80:99:fc:
92:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:40:C4:66:5D:2C:C9:9D:52:44:65:20:79:97:60:F3:15:E2:27:E5
X509v3 Authority Key Identifier:
keyid:D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0c:d5:a4:91:d9:81:e6:81:7d:ea:1c:d1:24:96:79:be:21:
39:f9:e2:2b:e7:7a:14:c5:44:ae:28:13:cf:ec:80:61:46:95:
6d:78:2c:df:be:22:f5:a2:2b:15:87:4c:7b:89:7e:cf:e7:0b:
80:97:29:35:74:6f:36:2f:42:98:a8:46:dd:b7:7b:04:df:7e:
3a:f4:47:bb:82:5c:da:36:1c:93:fd:03:aa:55:08:1b:3b:69:
61:c5:25:3e:ae:5d:fa:1d:a5:38:0c:32:0a:3c:fd:ca:a1:1d:
0a:c5:f3:3c:eb:89:c9:24:8a:7f:0c:10:05:f0:78:0c:6b:1f:
1d:89:a2:89:7e:21:29:d4:43:66:dd:42:1e:6a:5b:ce:95:67:
c2:07:4f:c7:fc:1e:72:94:7c:af:e4:b0:6f:97:a1:e1:74:c8:
0f:e9:20:a5:6f:7d:15:ad:a9:32:47:c9:13:48:86:58:be:84:
53:a4:13:1c:5f:0e:cc:9d:ac:f6:0f:32:80:7f:34:b8:45:36:
67:8e:f5:05:cd:02:b2:0a:b0:9b:8a:8b:07:f4:38:de:5a:5d:
cc:b0:12:0e:c1:0d:20:0f:09:9b:f3:f4:97:9f:93:5a:32:44:
d6:af:e6:63:e0:33:09:a0:85:e7:5f:8c:0d:e9:47:54:2c:ae:
69:c9:7c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:25 2026 by rpki-client