
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: kEhr7T0oK+asqRPoC9RFKO/pHAYO2qajlQIZ7h7Py0s=
Subject key identifier: ED:3A:9E:77:22:8A:99:9F:3F:39:5E:DC:C3:D7:26:A5:03:73:94:AA
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 019EBE7F732332618A42BF08F4FC373BD491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 18ED
Signing time: Sat 13 Jun 2026 01:01:24 +0000
Manifest this update: Sat 13 Jun 2026 01:01:24 +0000
Manifest next update: Sun 14 Jun 2026 01:01:24 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: MSiKtZX3PDaAP7dHthW4eFvjqDg3RUY1SCuMpWFu+Kg=)
2: aEPMVp6ZG-lfJdg7BUkYshYQ4L4.roa (hash: RQFlhaq+IvmsXYe3H4USUsgGJ+1VpvdgyBNJxMdfSfg=)
3: iZokYiXVlyx5GvNo1Dzn4LTps70.roa (hash: qi0aecrIUgmskCKuXu+osfwffjV8gg8iqbSuDQ82uKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:73:23:32:61:8a:42:bf:08:f4:fc:37:3b:d4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Jun 13 01:01:24 2026 GMT
Not After : Jun 14 01:01:24 2026 GMT
Subject: CN=ed3a9e77228a999f3f395edcc3d726a5037394aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:91:ca:e8:5a:27:f1:d7:d4:f4:77:54:99:83:
fd:8b:cb:08:8b:f8:4f:2c:20:f9:6f:01:72:44:48:
41:f0:be:6b:a7:5c:5a:60:fa:b7:9b:30:e7:19:c0:
ef:ef:05:ed:1a:91:6c:30:22:3a:a1:82:e9:fc:91:
46:30:38:96:4e:68:06:03:19:0f:db:c0:dd:32:f1:
88:12:6b:c8:7a:89:8c:3d:75:f7:02:93:ee:94:46:
55:f7:14:b4:4a:29:a8:b8:ae:e7:12:bb:3a:d8:49:
f5:f6:0f:35:87:15:9a:13:49:ab:36:21:42:bc:19:
bc:40:7c:38:7e:6d:e1:ad:8f:5e:1b:7c:42:74:e5:
25:47:b5:39:83:e4:e8:fc:7a:06:cf:ac:6d:2c:93:
81:cc:33:8e:11:85:e5:7f:ce:2f:12:db:f4:9a:10:
a3:6a:6f:69:28:f6:9f:43:fc:16:f8:80:73:39:05:
ac:75:9f:71:5d:a4:6f:3d:7a:73:85:f4:70:d7:b0:
b2:6c:5b:f1:48:54:88:5a:01:f3:6c:1f:57:79:d0:
f2:2b:76:c3:0b:79:d0:ec:da:28:53:64:e3:6d:ac:
5d:d1:ee:26:33:1a:4e:50:0c:fc:11:81:ec:39:62:
b0:69:24:d8:d9:f3:ca:02:e8:8e:53:d8:73:4a:3d:
c7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3A:9E:77:22:8A:99:9F:3F:39:5E:DC:C3:D7:26:A5:03:73:94:AA
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:86:f2:91:0d:3f:68:69:69:82:9a:6a:26:12:89:c8:00:f1:
24:61:20:c1:72:9f:44:7e:a3:ff:8e:32:df:05:f5:24:ef:49:
5d:34:4d:c4:59:06:43:c1:1d:7d:92:9c:75:f3:2b:9b:f5:35:
0e:ae:b0:bf:b7:6f:97:04:72:ea:e4:af:d6:0d:4d:c5:07:47:
53:27:7f:3e:a9:e6:18:72:03:b4:97:69:3e:74:5f:ca:bd:f1:
78:0c:dc:b0:88:73:11:2a:e0:45:55:c9:e5:4c:8b:0d:d1:94:
84:70:d7:85:f4:78:42:42:77:0f:73:41:36:8f:71:30:fd:c4:
9a:1a:5c:92:0b:46:ad:54:e6:fa:d9:c5:80:b2:cd:00:91:23:
21:ee:dd:36:28:e3:d4:0d:ea:44:fb:89:fe:b0:a5:75:be:36:
69:df:18:3b:a4:4f:0f:e6:aa:76:8b:54:87:60:2d:9b:81:9d:
e7:f5:76:72:e0:39:f6:dc:56:ef:81:7e:d5:cf:ff:6e:a7:5d:
2d:df:2e:dd:d0:4b:0b:33:53:1c:01:e2:85:17:a6:10:4b:90:
28:a7:28:04:ed:c1:ff:16:27:5d:65:b9:0f:5a:c3:a3:9b:0b:
f3:5e:9a:55:58:9f:58:fd:74:fa:08:85:74:fd:a5:c1:25:89:
6d:ce:6c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:20:56 2026 by rpki-client