Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
File: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft (raw, json)
Hash identifier: 9A9m2GrpbctbFDGzAJ81CzyAtYxTfaHn5hwVMqzdebo=
Subject key identifier: A6:80:16:32:02:AE:23:EA:5C:6F:CB:07:83:48:9F:84:AE:4C:F9:44
Authority key identifier: D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
Certificate issuer: /CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Certificate serial: 019D9A0741092BB67CD0798B338D0099CD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
Manifest number: 0B4B
Signing time: Fri 17 Apr 2026 06:00:59 +0000
Manifest this update: Fri 17 Apr 2026 06:00:59 +0000
Manifest next update: Sat 18 Apr 2026 06:00:59 +0000
Files and hashes: 1: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl (hash: laKs0NZVf7/dSjNiFndH0eBJHXuHEvav2/FP9Zzwd44=)
2: StMUvEenw_x5lHCzPw_YMF_URiY.roa (hash: ENHv8rZKdjNZdtVZ7QRD0qvto/6QSsxusDFFUShLO+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:41:09:2b:b6:7c:d0:79:8b:33:8d:00:99:cd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Validity
Not Before: Apr 17 06:00:59 2026 GMT
Not After : Apr 18 06:00:59 2026 GMT
Subject: CN=a680163202ae23ea5c6fcb0783489f84ae4cf944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:7e:d4:cf:66:af:15:b4:05:6d:91:cb:ab:
32:9f:ec:e7:31:5a:ef:a2:46:01:b3:b1:11:c1:19:
30:b8:83:34:90:7a:a8:5f:48:a3:22:99:cb:35:99:
1c:8d:0d:b3:c5:7c:d0:91:51:13:8e:9c:4e:5d:9f:
26:b2:98:30:e4:7b:71:3e:3b:13:58:8e:5c:af:3d:
e2:12:f1:8d:5d:bf:d4:29:95:c4:35:da:c9:ed:01:
ca:22:9e:30:80:78:3d:b1:7c:06:a0:1e:82:7d:15:
0e:cf:bc:90:6e:95:d8:35:db:3f:a7:22:2a:be:5b:
cc:b3:be:47:22:c8:b7:3d:d2:35:f2:0b:4e:fa:4e:
8c:09:06:3e:45:e6:86:11:94:45:c2:57:7a:08:10:
fb:4b:02:89:63:04:21:e2:db:1c:5c:d7:ea:5c:59:
bf:79:1e:e4:dd:02:4e:96:a9:2a:35:74:2e:80:fe:
66:9b:23:b8:56:ab:cf:88:dc:09:9d:fe:23:19:45:
98:91:a6:be:65:5b:d8:23:07:88:bf:04:56:bc:97:
5f:38:d0:da:ef:0e:cd:29:fd:7c:dc:19:77:63:c9:
05:0c:24:13:c9:9b:cb:c5:3d:61:6b:ea:54:12:7d:
a7:fc:6d:77:e9:f7:c6:02:e5:0f:4c:48:cb:b8:da:
8a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:80:16:32:02:AE:23:EA:5C:6F:CB:07:83:48:9F:84:AE:4C:F9:44
X509v3 Authority Key Identifier:
keyid:D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:f4:fc:47:1c:47:13:bb:de:36:e0:2a:f7:b0:53:20:f6:8b:
7a:a5:3b:4c:8e:73:2f:8a:b4:ab:87:29:d2:fa:8d:97:b2:d8:
cc:1d:5f:fc:c0:db:b3:68:52:79:e5:62:fe:36:22:a2:9d:44:
55:11:14:c9:46:46:6b:59:ed:be:80:52:da:19:97:aa:47:cb:
b3:1a:77:ed:cf:fb:e2:67:34:a4:78:0f:e9:13:f4:4a:5d:cb:
48:66:d6:a4:ad:8f:ac:d0:30:4e:53:00:e7:09:67:3e:63:80:
1b:89:34:3d:82:c1:28:a3:83:d4:2d:6a:84:ac:f8:90:bb:0d:
5a:9f:af:a7:aa:7e:12:06:35:06:09:82:a1:11:3d:73:be:36:
e4:dc:2c:6e:b6:ea:95:df:a5:3c:d8:50:48:26:19:ed:fa:ab:
37:2e:6b:8c:97:32:3b:0a:59:e4:6f:71:31:e0:45:b7:0d:e7:
88:fe:d3:9e:3f:84:75:29:3d:1b:ed:17:73:37:2a:ab:79:06:
c0:b7:9e:b0:53:36:1e:09:b5:6d:d1:85:3a:ab:18:0f:6c:51:
0e:a2:7f:6d:f8:7f:dc:3b:75:6d:e6:4f:70:0b:ee:ff:f6:46:
3e:f3:ea:51:e7:14:17:86:d8:0f:ca:6d:a2:aa:38:75:55:0f:
f2:30:be:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aB0EJK7Z80HmLM40Amc0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTM3ZWI2YTg5OTg0ZThjMDBiNTNiMTY4MWRlMDkwMDVh
ZGM5OWQwHhcNMjYwNDE3MDYwMDU5WhcNMjYwNDE4MDYwMDU5WjAzMTEwLwYDVQQD
EyhhNjgwMTYzMjAyYWUyM2VhNWM2ZmNiMDc4MzQ4OWY4NGFlNGNmOTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu1+1M9mrxW0BW2Ry6syn+znMVrv
okYBs7ERwRkwuIM0kHqoX0ijIpnLNZkcjQ2zxXzQkVETjpxOXZ8mspgw5HtxPjsT
WI5crz3iEvGNXb/UKZXENdrJ7QHKIp4wgHg9sXwGoB6CfRUOz7yQbpXYNds/pyIq
vlvMs75HIsi3PdI18gtO+k6MCQY+ReaGEZRFwld6CBD7SwKJYwQh4tscXNfqXFm/
eR7k3QJOlqkqNXQugP5mmyO4VqvPiNwJnf4jGUWYkaa+ZVvYIweIvwRWvJdfONDa
7w7NKf183Bl3Y8kFDCQTyZvLxT1ha+pUEn2n/G136ffGAuUPTEjLuNqKnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaAFjICriPqXG/LB4NIn4SuTPlEMB8GA1UdIwQY
MBaAFNCTfraomYTowAtTsWgd4JAFrcmdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yY2MwOTQtMjA4MS00ZmY2LWE5ZGUt
ZDYyMWE4OTFmYjgwLzEvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yY2MwOTQtMjA4MS00ZmY2LWE5ZGUtZDYyMWE4OTFmYjgw
LzEvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuvT8RxxH
E7veNuAq97BTIPaLeqU7TI5zL4q0q4cp0vqNl7LYzB1f/MDbs2hSeeVi/jYiop1E
VREUyUZGa1ntvoBS2hmXqkfLsxp37c/74mc0pHgP6RP0Sl3LSGbWpK2PrNAwTlMA
5wlnPmOAG4k0PYLBKKOD1C1qhKz4kLsNWp+vp6p+EgY1BgmCoRE9c7425Nwsbrbq
ld+lPNhQSCYZ7fqrNy5rjJcyOwpZ5G9xMeBFtw3niP7Tnj+EdSk9G+0Xczcqq3kG
wLeesFM2Hgm1bdGFOqsYD2xRDqJ/bfh/3Dt1beZPcAvu//ZGPvPqUecUF4bYD8pt
oqo4dVUP8jC+3g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:39:54 2026 by rpki-client