Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: EkSAoGZ+oAhUL9TKDsjnTltRYwvOTWlt+TI4BtAi/MI=
Subject key identifier: AE:0D:B1:84:AE:40:98:26:97:E9:78:A6:32:71:85:27:7F:2C:B1:A1
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 01A0C21F3CC8E25A16AC2032756564E24E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 19F8
Signing time: Mon 21 Sep 2026 04:00:21 +0000
Manifest this update: Mon 21 Sep 2026 04:00:21 +0000
Manifest next update: Tue 22 Sep 2026 04:00:21 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: 4H0lbyMPPFnvphPS54R3rkzzDmxy2IPRah0ompHYXzQ=)
2: aEPMVp6ZG-lfJdg7BUkYshYQ4L4.roa (hash: RQFlhaq+IvmsXYe3H4USUsgGJ+1VpvdgyBNJxMdfSfg=)
3: iZokYiXVlyx5GvNo1Dzn4LTps70.roa (hash: qi0aecrIUgmskCKuXu+osfwffjV8gg8iqbSuDQ82uKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:3c:c8:e2:5a:16:ac:20:32:75:65:64:e2:4e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Sep 21 04:00:21 2026 GMT
Not After : Sep 22 04:00:21 2026 GMT
Subject: CN=ae0db184ae40982697e978a6327185277f2cb1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:4c:5c:b1:c8:4d:47:7c:31:97:7f:a3:a7:
c7:18:bb:a4:00:1d:75:c0:79:8e:b7:22:db:79:47:
85:5e:83:b8:ba:df:e5:81:71:21:ab:45:e5:6c:62:
45:62:e2:69:ed:3c:5a:92:0b:50:87:cd:2a:73:27:
49:90:1f:a6:73:33:2e:e8:e3:4f:12:3b:97:d4:5d:
a5:8b:88:f9:8e:ea:56:d9:4a:f2:63:5d:21:24:9d:
12:fc:8f:6c:0a:81:b9:e0:13:b8:45:48:6b:7e:76:
da:90:87:c7:36:21:26:ce:b1:00:9a:e5:ec:52:c8:
56:1d:62:9b:cd:7a:82:01:40:a4:d1:05:eb:e3:b0:
08:fc:f2:97:3e:d2:bf:db:e8:f6:e0:4e:5e:bc:32:
85:42:cb:13:0d:58:d7:5e:8d:3d:f5:d4:64:be:71:
c3:ba:db:56:de:c4:e9:4b:35:b0:d4:7d:8e:bc:93:
94:70:15:e8:a3:e1:b0:4f:f6:3e:b3:75:3d:37:ea:
90:37:b9:39:39:86:58:1d:32:dc:07:6e:21:1c:41:
7f:0f:bb:e7:ed:4e:18:d7:c7:95:4f:ec:e8:27:56:
b5:c9:79:ee:70:ac:6b:fa:0b:00:76:b0:1e:47:84:
64:27:26:ab:62:37:4c:a1:5e:4e:df:48:e3:6e:a8:
a9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0D:B1:84:AE:40:98:26:97:E9:78:A6:32:71:85:27:7F:2C:B1:A1
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:40:8f:f7:c9:4c:95:e0:fb:c8:88:82:3e:07:8b:5f:d2:3e:
c0:4f:e6:49:0b:8e:6e:99:1b:23:dd:70:9b:93:c8:b3:a3:34:
e5:06:b8:94:57:48:9d:ca:5c:18:b9:df:27:b2:7f:63:32:11:
b0:e1:e6:6d:af:23:01:14:4c:61:10:23:82:19:50:07:5e:51:
69:a6:ac:87:ac:7f:c7:4d:22:ed:d6:21:b2:36:93:79:d1:97:
9b:89:a7:d6:d2:32:c2:58:c0:6e:8c:79:28:5d:8d:39:b7:09:
82:4b:13:f4:3b:37:02:7c:59:21:ed:b4:c5:16:8f:de:8c:69:
d4:63:23:86:10:8e:1a:3c:e0:a5:8f:70:6f:c4:9f:44:d1:88:
96:2e:9f:a8:94:90:1c:f9:f0:26:a3:29:c7:7b:c4:ee:12:1b:
f5:ee:25:96:42:60:ca:4b:6f:5f:99:11:1d:40:ef:1d:87:5d:
b7:af:bb:b5:9e:a0:15:70:64:54:4b:76:a2:a6:2e:00:f3:68:
6f:db:21:e0:0f:45:4e:37:80:ab:98:16:c8:ca:ec:e9:fd:76:
c3:1a:0b:45:28:ef:0d:88:e3:83:c0:85:a1:bb:fe:b2:52:a1:
f3:50:fe:47:86:29:c4:1b:0f:25:76:aa:13:ec:16:5f:99:09:
e2:ed:72:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:32:03 2026 by rpki-client