Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: 4w09y9LWOEgg0SWNUUn+sCce9EXfXhkIYxOCM4j+YNw=
Subject key identifier: A6:13:45:50:C6:09:F8:F1:87:7D:24:5F:9F:E7:0F:EF:4F:B6:AC:CC
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 019DA48A9E455E8591B10CF69F795394F48E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 185B
Signing time: Sun 19 Apr 2026 07:00:41 +0000
Manifest this update: Sun 19 Apr 2026 07:00:41 +0000
Manifest next update: Mon 20 Apr 2026 07:00:41 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: iaCH76pEgd6T7Xj9hlW6cPWJRXU3hS3VFtZHFF5/JNM=)
2: aEPMVp6ZG-lfJdg7BUkYshYQ4L4.roa (hash: RQFlhaq+IvmsXYe3H4USUsgGJ+1VpvdgyBNJxMdfSfg=)
3: iZokYiXVlyx5GvNo1Dzn4LTps70.roa (hash: qi0aecrIUgmskCKuXu+osfwffjV8gg8iqbSuDQ82uKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:9e:45:5e:85:91:b1:0c:f6:9f:79:53:94:f4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Apr 19 07:00:41 2026 GMT
Not After : Apr 20 07:00:41 2026 GMT
Subject: CN=a6134550c609f8f1877d245f9fe70fef4fb6accc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:09:69:f5:bd:80:01:a4:ae:e9:90:56:58:
85:08:a5:26:20:b1:e9:60:74:d8:21:9a:0e:66:d7:
ad:6c:3e:eb:77:fc:14:98:ed:c9:cd:fc:28:95:00:
eb:ca:d6:0d:d1:e8:96:5a:c6:51:7d:08:06:41:fc:
4d:2c:ea:6c:c8:a7:5e:34:1e:33:a0:42:24:a6:14:
c1:67:fa:76:67:af:f9:a2:aa:bb:dd:86:8d:09:ae:
a1:0d:d5:08:d3:3e:4f:2b:03:24:cc:2a:7f:99:3e:
eb:b2:f7:8d:e0:b0:29:84:63:59:70:70:8b:c6:20:
0d:a4:9c:65:ef:de:18:5b:57:1a:4e:53:9f:22:6b:
e4:0a:a9:58:cf:16:6f:ea:de:3e:67:4d:e4:e0:5d:
89:c0:b3:91:93:a3:f8:ab:f5:50:cd:7c:13:48:01:
d0:f1:de:f5:29:18:91:bc:22:a9:81:41:3f:8a:b1:
c3:68:61:29:1d:b7:9f:86:92:09:e7:db:ed:80:56:
6c:62:b6:6f:f7:7f:95:1c:c7:a4:f0:57:01:7a:98:
1a:7b:1b:79:66:d1:1d:7a:72:d7:01:94:bd:1b:c8:
5b:22:98:5f:f9:81:f8:a5:2a:f6:8f:a4:d8:52:a2:
32:2f:db:ca:db:57:d3:06:c6:80:f7:d0:17:a3:f9:
67:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:13:45:50:C6:09:F8:F1:87:7D:24:5F:9F:E7:0F:EF:4F:B6:AC:CC
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f6:a9:f3:0e:f9:e5:7a:4f:a9:af:25:ca:1c:10:95:19:b8:
bf:6b:c7:a2:50:d0:86:61:2b:92:fa:c6:d2:0f:df:35:f7:f8:
60:b1:01:86:ce:82:27:d4:7d:96:26:01:e1:36:07:a2:ac:05:
0a:c5:20:06:92:6a:e8:f7:77:f2:19:b6:55:3c:a9:c0:2c:ee:
39:cf:51:11:2c:80:95:00:97:d2:18:52:8a:01:7b:27:df:6a:
0e:97:01:c7:1a:03:cd:a5:dc:06:a8:04:09:b0:73:1a:81:40:
23:b8:70:2e:a4:9c:7f:df:9a:3d:26:ce:9e:e9:84:0c:3d:ce:
e1:ef:1b:5e:e4:6a:22:1a:5e:2b:fc:94:f4:27:1c:12:91:ad:
a6:c8:67:e5:e3:9a:45:d3:f7:18:00:9c:9d:2e:fb:05:ae:ef:
90:3b:f1:1d:c3:37:65:35:44:20:ea:bd:11:99:1a:b9:13:e6:
f2:6d:f0:16:68:12:72:cc:94:0e:56:da:4d:00:00:33:59:79:
77:31:db:6c:84:ce:88:b6:24:a9:02:b5:de:d3:8e:c7:d9:b2:
42:46:9d:f5:9f:26:09:94:21:b8:41:9f:d2:23:ec:e3:f4:90:
bf:49:70:78:72:17:e9:10:d2:1d:16:aa:7a:31:36:05:9c:f5:
46:cb:36:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:17 2026 by rpki-client