Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
File: 0jtkd-HIT1KQfNYMY-qD715Kx4I.mft (raw, json)
Hash identifier: 6So67+RWBgCetIzpU2FcGY3rOS4d6V3XYWXunZlPZx8=
Subject key identifier: 3B:8D:30:2C:FF:B7:72:8F:7F:9D:53:9D:3B:EB:84:A1:01:E1:4A:67
Authority key identifier: D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
Certificate issuer: /CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Certificate serial: 01A0CE91042E6E8C4E00AD0E246B985899D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
Manifest number: 0DB7
Signing time: Wed 23 Sep 2026 14:00:05 +0000
Manifest this update: Wed 23 Sep 2026 14:00:05 +0000
Manifest next update: Thu 24 Sep 2026 14:00:05 +0000
Files and hashes: 1: 0jtkd-HIT1KQfNYMY-qD715Kx4I.crl (hash: T4l6wsIH+ON1vKofsiYfGfZIXlyIxk5FVxL7AVMwCk0=)
2: u74Y2DtNYCrFLzeUZsDA2ek1RJQ.roa (hash: v4D4CGF7IK7jFQI/k7wDX6FIFSnqg7cuKSN4Jo5u5mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:04:2e:6e:8c:4e:00:ad:0e:24:6b:98:58:99:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Validity
Not Before: Sep 23 14:00:05 2026 GMT
Not After : Sep 24 14:00:05 2026 GMT
Subject: CN=3b8d302cffb7728f7f9d539d3beb84a101e14a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:6a:d0:04:1f:96:00:b4:c7:04:fb:90:0c:
b5:ea:3c:a3:9d:61:bf:d8:65:01:dd:6a:4a:11:f1:
18:13:79:52:64:06:99:d0:4e:34:02:43:de:dd:5d:
28:fa:2f:e0:f6:81:dd:c8:ce:01:3e:4c:ae:47:62:
1c:b1:ef:5f:35:c1:be:ec:d5:33:26:fd:dc:88:d8:
ac:39:8c:08:d4:ee:23:d5:e5:2d:cd:09:96:2b:7d:
16:b8:a2:14:3e:21:98:5e:c8:64:14:c1:7c:89:f3:
18:a0:57:ad:5e:8b:e1:a0:16:37:53:0d:a1:62:e9:
5b:54:77:b2:ea:c8:17:cd:f9:a8:1b:91:f2:21:52:
20:fe:b4:54:25:f2:7b:66:dd:23:0d:1f:6f:18:98:
83:7c:5c:33:9b:da:2b:51:34:c8:a0:aa:79:13:ae:
b3:32:b3:a2:17:81:d2:1c:93:18:d7:b3:ad:03:dd:
ba:b0:d2:f0:ce:24:a2:10:2b:af:c1:eb:d9:86:1a:
b2:a1:d5:48:81:1b:a6:c5:e6:7c:18:88:93:59:5b:
e8:b1:43:a9:7c:03:f4:9c:b9:48:77:3b:df:98:56:
6d:68:f2:ab:3f:5e:7d:14:71:c8:e2:b9:de:5d:b6:
45:b3:4b:04:25:62:68:21:9b:4a:9e:d7:69:f9:c6:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8D:30:2C:FF:B7:72:8F:7F:9D:53:9D:3B:EB:84:A1:01:E1:4A:67
X509v3 Authority Key Identifier:
keyid:D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f5:db:eb:da:63:f1:11:a5:09:27:be:0d:61:fe:f8:59:9e:
2d:29:ec:53:94:ff:3f:1d:fc:8d:88:f4:f3:4b:b5:66:10:cb:
dc:52:54:75:23:89:79:67:b0:8c:d7:61:74:56:36:cb:2c:95:
4c:a3:7b:da:a6:6a:9f:15:df:42:dd:41:5d:e2:26:e3:cc:2c:
43:6d:db:a6:a1:40:17:19:27:af:08:d9:50:e9:e5:82:b0:d3:
a0:ea:71:e8:64:fa:f4:c7:20:bb:a4:04:8a:3b:b8:95:85:50:
91:db:86:a4:a6:62:60:45:14:07:f8:2e:c5:5b:4f:20:b2:ae:
81:fc:17:95:9b:82:19:2e:35:dc:55:e7:75:6d:4f:1b:17:11:
4f:11:cc:2d:a7:5c:84:52:83:1e:90:26:de:84:27:91:d8:70:
ea:18:48:1a:b5:08:b6:a2:30:ca:2e:66:e1:49:9e:fd:d9:aa:
5b:55:25:94:5b:09:81:ac:24:5f:c0:d1:f4:69:d8:33:27:9e:
56:9a:27:b9:48:4e:e9:15:2d:d9:a8:ed:28:9f:f8:de:55:57:
70:5f:44:62:73:04:d1:17:0c:3a:61:ae:6c:8e:44:09:05:74:
07:b5:7a:23:6f:13:14:da:87:c5:f9:bc:48:0b:49:63:7a:eb:
ad:d4:b8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:42:20 2026 by rpki-client