Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
File: 0JTrDpiYeirfj5WgPnhlmRogGFU.mft (raw, json)
Hash identifier: OofCQHpOdBu95J0SYMzBu8j7/8biunetqhsfq7rCqDY=
Subject key identifier: C9:99:B8:E2:92:11:DA:54:58:11:DF:83:6A:92:C9:3C:60:C3:8D:80
Authority key identifier: D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
Certificate issuer: /CN=d094eb0e98987a2adf8f95a03e7865991a201855
Certificate serial: 01A1C1E63419523A68CC8DA73F1868B2008D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
Manifest number: 1AEA
Signing time: Mon 09 Nov 2026 20:00:51 +0000
Manifest this update: Mon 09 Nov 2026 20:00:51 +0000
Manifest next update: Tue 10 Nov 2026 20:00:51 +0000
Files and hashes: 1: 0JTrDpiYeirfj5WgPnhlmRogGFU.crl (hash: 0lH0z3G5j5rN+qKpbLgLXIR8JCvr+Eg2QzcYEthTu1s=)
2: gYB58AsOtwXPnPMNlPV8Y_Ufqsg.roa (hash: WyEGcdxX1fE4gxlSc9tIw2aO8N6fipj9ySbKblEWZfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:e6:34:19:52:3a:68:cc:8d:a7:3f:18:68:b2:00:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d094eb0e98987a2adf8f95a03e7865991a201855
Validity
Not Before: Nov 9 20:00:51 2026 GMT
Not After : Nov 10 20:00:51 2026 GMT
Subject: CN=c999b8e29211da545811df836a92c93c60c38d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:88:95:f1:24:72:a0:c7:49:cf:45:35:74:
a1:28:ca:18:d8:d1:98:e6:16:b3:2c:3f:a3:bb:2f:
76:73:19:86:8b:23:6a:cc:ee:04:a6:d0:b8:a7:ab:
a3:24:26:af:f4:71:69:cd:09:dc:bc:76:b1:46:8c:
5f:7a:34:6b:15:ab:2b:d0:be:3c:e0:a7:76:e9:a2:
52:fd:18:80:de:b5:f0:4e:46:93:72:b4:e8:db:12:
2c:13:fb:a6:38:24:5b:27:23:4c:7e:cd:b1:50:07:
43:e8:e5:88:87:f7:4f:02:d3:ef:cc:ff:a0:22:a8:
7e:9c:3f:bd:a0:7d:2b:0f:0b:62:e6:5e:a4:92:1e:
df:91:c4:4d:82:37:5b:66:f0:a9:3d:7f:dd:92:99:
1d:c8:92:43:39:b9:84:b9:b5:d5:35:45:e2:f3:08:
ab:3a:d1:1c:7a:c1:67:bc:e9:65:bf:90:ce:a6:ed:
fe:22:17:39:ff:60:29:bc:4a:70:0a:53:bf:3b:fa:
d3:09:6b:ec:ea:32:00:5d:1d:b6:1d:35:8c:91:7b:
74:e9:0d:ab:53:73:99:c8:6b:94:5b:54:3e:9b:f0:
b3:7d:f3:f9:cb:83:ff:62:f9:ae:c2:77:fd:a4:da:
bd:77:d9:e6:07:e2:d3:e1:c1:06:ea:80:dc:50:10:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:99:B8:E2:92:11:DA:54:58:11:DF:83:6A:92:C9:3C:60:C3:8D:80
X509v3 Authority Key Identifier:
keyid:D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:48:6d:47:32:b1:45:e6:15:4c:62:9d:da:49:b2:98:4f:4b:
1d:5f:4b:26:f2:80:f3:96:ff:9d:f9:9d:7a:4b:e2:b4:94:04:
d6:40:12:1d:27:8e:55:53:44:c3:eb:0d:8e:e2:21:94:f9:69:
d3:d7:ba:a4:25:a4:82:98:5f:a9:22:e2:81:62:8f:40:cd:a6:
3f:dd:55:76:f2:5b:1c:5f:6c:33:46:e2:3d:cb:cc:9d:66:c2:
d8:46:a0:48:d7:32:6f:dd:ec:a1:09:7e:eb:76:4f:36:bc:2b:
1f:14:ad:2c:25:83:23:1c:5a:77:e3:49:c9:88:88:7e:39:2f:
0a:e3:b2:0a:0e:de:7a:79:a1:c1:1b:b3:74:2d:94:0b:ad:31:
f1:a3:97:b1:5d:86:0d:3e:b9:bb:88:df:4c:e0:a3:17:aa:b0:
2b:9a:dc:37:bc:59:7f:7d:1f:d8:31:63:87:78:79:c5:b6:b9:
83:f2:eb:2b:38:39:f8:9a:18:b1:b9:df:8f:7f:b2:e1:a4:b9:
6e:66:d1:d9:17:60:04:7d:ad:36:cd:7e:4c:a3:39:1a:0c:1a:
c8:92:cd:96:02:c6:3a:fa:93:d9:8e:ed:c8:fb:2c:98:b9:29:
07:c1:02:26:32:da:05:60:34:04:77:d0:62:06:64:50:47:c4:
14:17:e6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 01:46:21 2026 by rpki-client