Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: GXMnEAsgjs+Xc1tnx9TphOTN0YTtAQznUeVw2Dz72aQ=
Subject key identifier: A3:F8:6E:7B:B1:D1:FC:22:16:BF:0A:A8:1B:F1:F3:8E:AF:4A:4F:48
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 019FAA1A2CE6166B08EB4696C7EC14762C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 1967
Signing time: Tue 28 Jul 2026 19:01:09 +0000
Manifest this update: Tue 28 Jul 2026 19:01:09 +0000
Manifest next update: Wed 29 Jul 2026 19:01:09 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: KLiqkSW2TL0Tg13Q+FJler0Nm/nt/b1bG1ijnSgOeN0=)
2: aEPMVp6ZG-lfJdg7BUkYshYQ4L4.roa (hash: RQFlhaq+IvmsXYe3H4USUsgGJ+1VpvdgyBNJxMdfSfg=)
3: iZokYiXVlyx5GvNo1Dzn4LTps70.roa (hash: qi0aecrIUgmskCKuXu+osfwffjV8gg8iqbSuDQ82uKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:2c:e6:16:6b:08:eb:46:96:c7:ec:14:76:2c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Jul 28 19:01:09 2026 GMT
Not After : Jul 29 19:01:09 2026 GMT
Subject: CN=a3f86e7bb1d1fc2216bf0aa81bf1f38eaf4a4f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:e5:42:12:b8:3e:a5:87:f0:b8:83:07:2e:
c3:5f:cb:f2:5b:bf:a1:98:3f:c2:63:7c:2b:eb:08:
2a:17:ed:75:2b:b0:42:df:5c:f2:6d:f1:60:22:e8:
5a:1e:df:a1:06:38:96:72:00:ec:be:43:5f:f3:da:
fd:e9:a9:72:3b:8c:9d:cf:f7:20:c2:8c:e8:31:96:
29:c4:e2:22:7b:e6:94:5b:be:68:76:5c:2c:d2:bb:
a1:38:e0:2b:07:52:e2:20:dc:b7:a7:74:5e:b0:13:
be:08:fc:ea:94:43:60:d4:3e:81:0a:57:0e:96:26:
12:f7:83:fc:01:75:96:e4:97:9d:9f:1d:90:1a:f8:
92:de:c1:a1:97:9f:da:d8:c8:e1:12:32:b3:d7:b6:
f9:c3:ee:f5:84:67:37:f7:28:5a:e9:ef:3e:ea:7b:
9c:2f:d2:c0:a4:e7:45:1e:b6:dd:f7:f7:30:c7:9b:
b3:4b:06:a9:17:56:4c:4d:c5:8a:01:34:de:86:fa:
44:f9:7d:67:3a:31:17:b7:23:15:00:ec:3c:00:0f:
c7:90:9e:3b:41:e4:20:1e:27:17:56:c6:cf:5c:0c:
48:97:8f:3c:0d:02:cc:32:d3:a1:61:fe:11:a7:2f:
23:d0:c4:79:cc:07:9e:06:23:21:e4:11:48:4f:1a:
6e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F8:6E:7B:B1:D1:FC:22:16:BF:0A:A8:1B:F1:F3:8E:AF:4A:4F:48
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d5:ef:2e:7f:20:e5:3e:ed:d3:db:a4:44:a3:29:46:fe:08:
74:7f:a5:fa:27:5f:38:0a:08:37:37:40:73:1d:39:74:0c:c8:
f9:9e:1b:b6:04:64:25:2a:f0:65:4b:2d:95:8a:8a:28:85:ff:
85:38:a9:aa:d6:0a:29:e4:d3:8a:fb:f7:ba:9f:7e:07:3d:7d:
2f:80:48:84:fc:c5:80:e3:03:6d:10:6d:06:fb:52:7d:46:e0:
dc:59:b3:05:02:ee:27:4b:e1:13:cd:a5:4b:ea:fc:e6:6d:cc:
3b:a8:99:17:c9:a2:c6:29:0d:50:d8:1e:65:1f:c3:e0:8e:90:
9e:3e:6c:5a:79:a5:07:21:0c:ef:36:3e:b9:05:65:27:ff:bd:
a6:1c:c3:b1:69:ba:dc:67:fb:23:a7:56:a5:5f:56:ef:b6:e1:
08:3e:b6:66:7c:df:4b:a5:0f:81:be:80:c5:0b:e3:33:03:65:
77:c3:3b:d9:ad:4d:db:48:ad:4a:c5:bc:ed:cc:fc:12:82:49:
3c:88:0b:df:8f:e4:ba:61:fc:f0:5c:30:6c:06:b5:9d:59:6c:
43:fd:c8:2b:ec:64:28:29:ef:75:e0:63:ad:db:2e:3a:29:4e:
62:f5:66:fb:76:9e:42:d7:4d:d1:41:cc:4a:e5:41:25:bb:cc:
77:e2:d3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:20:57 2026 by rpki-client