Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
File: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft (raw, json)
Hash identifier: eE4mR5Kz8Xg/Hfod1kArRtMwQ1Tgtj6aPL8Voa7ETOQ=
Subject key identifier: 45:2F:4B:3B:07:4D:FF:03:15:E6:EE:58:6E:D8:6C:B3:51:1E:00:55
Authority key identifier: D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
Certificate issuer: /CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Certificate serial: 01A100FF585DE52C3BA20792FC8A62BCB617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
Manifest number: 0D0E
Signing time: Sat 03 Oct 2026 09:01:36 +0000
Manifest this update: Sat 03 Oct 2026 09:01:36 +0000
Manifest next update: Sun 04 Oct 2026 09:01:36 +0000
Files and hashes: 1: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl (hash: rJ1gyuowyen56mwGcT4d8RWCOh1C01YuVJ8GVWepWl4=)
2: StMUvEenw_x5lHCzPw_YMF_URiY.roa (hash: ENHv8rZKdjNZdtVZ7QRD0qvto/6QSsxusDFFUShLO+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:ff:58:5d:e5:2c:3b:a2:07:92:fc:8a:62:bc:b6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Validity
Not Before: Oct 3 09:01:36 2026 GMT
Not After : Oct 4 09:01:36 2026 GMT
Subject: CN=452f4b3b074dff0315e6ee586ed86cb3511e0055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:44:11:a2:d9:fe:b6:12:93:87:70:b4:e8:88:
30:fd:11:99:fa:52:99:09:26:a5:5b:ec:a5:8b:01:
cb:33:35:2d:88:12:db:73:13:b9:3c:13:a7:64:9b:
b0:6b:06:5c:80:91:f5:c5:38:56:60:98:71:7a:ee:
48:b7:6f:94:49:49:ec:bd:b7:2a:c2:29:e2:31:78:
5f:32:ce:0a:58:db:2f:52:55:13:0d:78:0b:4a:02:
9a:09:41:c8:28:15:54:fc:d0:e5:70:3b:3c:86:aa:
f7:4a:ce:f8:c3:96:96:29:90:44:e2:5d:09:93:fd:
a2:df:aa:67:63:1e:d2:53:65:96:2d:c7:8f:53:fa:
5c:52:55:4e:c6:5d:4f:67:cf:5a:3f:cf:fc:ab:6d:
27:2e:71:25:f0:44:a9:fd:4c:d1:d7:83:96:81:ce:
b8:53:6e:6d:bb:ff:f5:cf:94:12:ef:00:43:5e:3f:
21:8c:8b:74:b1:d6:80:5d:f2:5a:4d:24:b1:6a:75:
e9:61:9d:9d:90:e9:fd:db:53:35:a9:24:7c:81:7b:
00:f3:05:1a:6b:3f:8f:17:7e:41:62:2d:ad:ca:8a:
ad:34:d9:82:43:eb:1e:d9:75:98:8d:bc:aa:20:f8:
10:99:d8:52:b7:12:a4:ec:b5:3d:6b:77:4c:13:82:
37:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2F:4B:3B:07:4D:FF:03:15:E6:EE:58:6E:D8:6C:B3:51:1E:00:55
X509v3 Authority Key Identifier:
keyid:D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1e:a4:48:a5:41:01:d4:db:f9:3a:a5:55:1c:91:e4:5c:90:
25:32:73:1e:7b:18:75:49:3d:f3:be:c0:b1:b1:19:6f:d0:bc:
2c:03:25:0f:f9:df:f3:e5:f6:ed:3d:3d:6b:6d:b3:59:cd:e1:
e6:d0:f7:3f:51:fe:14:85:07:0c:6a:90:f6:b6:ee:08:02:56:
34:a0:7b:02:7e:84:2c:6b:37:f5:28:c7:5f:c6:72:3f:4a:cd:
92:1a:b2:e5:e6:69:86:ad:7c:c9:1e:b4:29:85:63:17:84:6c:
81:18:08:e1:32:a3:d1:e6:57:7f:2f:5d:9c:5d:76:21:fc:83:
3a:4d:41:91:4a:94:66:1e:1b:6c:13:18:2f:65:ea:c3:8c:16:
2f:7f:50:48:4a:dc:33:2b:ef:78:0c:ff:e7:0b:dc:64:74:71:
7a:29:66:9d:d0:5d:27:34:ce:12:e3:dc:e7:bf:7e:aa:df:a0:
a7:cf:7e:15:8e:42:49:23:59:8e:34:f6:b0:3a:ac:dd:59:3e:
4c:19:26:9b:e3:78:1d:38:c1:68:ed:d9:ac:34:0e:8e:03:45:
a1:56:ec:60:1f:f7:f0:91:b8:00:8a:46:01:ba:02:a7:ab:0b:
52:51:c5:ce:96:47:57:16:1f:77:59:ae:ec:14:fd:dc:21:b5:
63:bb:14:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:03:09 2026 by rpki-client