
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
File: 0jh3jxNJtXVBjBnjg9BXGuvuot8.mft (raw, json)
Hash identifier: GgaBEKod4wlNmDizH/GZRfz+j1zKFnMemguB3fcJXlw=
Subject key identifier: 1E:3C:A6:FD:CA:0E:ED:C4:F1:79:7B:B7:03:FA:F5:AB:BF:88:50:CA
Authority key identifier: D2:38:77:8F:13:49:B5:75:41:8C:19:E3:83:D0:57:1A:EB:EE:A2:DF
Certificate issuer: /CN=d238778f1349b575418c19e383d0571aebeea2df
Certificate serial: 01A0C2C496196E32350F6FEC9A1EC39C7CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
Manifest number: 0178
Signing time: Mon 21 Sep 2026 07:00:58 +0000
Manifest this update: Mon 21 Sep 2026 07:00:58 +0000
Manifest next update: Tue 22 Sep 2026 07:00:58 +0000
Files and hashes: 1: 0jh3jxNJtXVBjBnjg9BXGuvuot8.crl (hash: rduQpG7PYSzcFHXezE50T5byp4ZyVT99dsBGg41PoQM=)
2: Ja7890_tG369n2EpikrlxKOH7eo.roa (hash: dUDn7iA585Me0xPD3yCTHJGFysgJ0UVLXEuuoAzLUoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:96:19:6e:32:35:0f:6f:ec:9a:1e:c3:9c:7c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d238778f1349b575418c19e383d0571aebeea2df
Validity
Not Before: Sep 21 07:00:58 2026 GMT
Not After : Sep 22 07:00:58 2026 GMT
Subject: CN=1e3ca6fdca0eedc4f1797bb703faf5abbf8850ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2d:61:5e:0f:da:bc:46:ef:d4:52:24:d8:af:
3e:e0:01:4a:94:a8:97:50:14:df:a8:a5:5a:ff:d9:
0d:09:18:35:21:1d:a2:29:6a:55:6e:12:9c:db:cc:
3f:60:b8:5a:bb:4a:83:4f:c2:9f:58:4e:0c:9b:7b:
55:27:8e:c4:e4:78:bf:c3:4c:f8:d7:1f:30:42:25:
0c:d9:87:ff:a5:d7:da:86:54:b7:33:43:70:fc:76:
c5:db:9c:9d:ca:59:fe:a1:76:75:9f:fa:70:d7:c8:
ce:bb:a9:23:3e:1a:3f:a1:af:54:c7:87:9e:87:e0:
a3:01:1f:a0:77:b5:db:04:c4:d0:4a:b3:8d:ee:9b:
c8:40:43:eb:5f:41:f6:0a:54:41:7b:24:33:fe:02:
0d:d3:f3:4d:e6:11:96:c1:2f:dc:df:40:ce:99:4c:
c3:63:7e:b7:87:75:99:f7:bc:64:e7:0a:f7:d2:d7:
32:c4:82:db:ce:2f:c6:23:74:a3:91:46:df:bc:8f:
4a:ad:08:ce:97:76:54:fd:21:1c:15:0b:82:18:11:
ad:1f:aa:51:57:e8:56:bc:b9:1c:b8:70:51:b4:22:
7c:92:d2:68:1e:be:34:3b:e1:a7:97:72:80:e7:87:
6c:0d:a7:15:97:2f:5c:16:72:74:fb:64:2e:3a:b8:
e6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3C:A6:FD:CA:0E:ED:C4:F1:79:7B:B7:03:FA:F5:AB:BF:88:50:CA
X509v3 Authority Key Identifier:
keyid:D2:38:77:8F:13:49:B5:75:41:8C:19:E3:83:D0:57:1A:EB:EE:A2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:68:3e:79:57:74:27:41:42:29:b3:3d:77:11:a4:79:86:85:
14:3a:57:6c:0f:27:75:1a:c8:6e:62:7e:c7:c2:28:aa:4d:d5:
f7:69:0d:47:f6:8f:2f:a5:68:08:cd:9e:7b:13:40:e3:87:df:
bf:7e:37:97:77:1d:91:b5:73:2a:e4:3f:96:94:85:9c:67:df:
4b:3c:e6:23:62:43:8a:45:d3:7c:da:5c:aa:0e:15:7b:69:aa:
3b:20:76:36:13:04:99:ee:64:0d:ef:cc:fe:a7:97:b1:d7:a0:
44:ed:ef:29:ea:38:da:80:bb:43:d7:cc:14:aa:7b:00:73:a0:
51:48:9c:59:71:38:19:bc:a3:c6:18:b0:f2:d9:e2:1c:c6:2f:
9e:82:39:0c:b0:aa:a5:f7:15:8d:d4:06:0b:7f:06:a8:6c:88:
20:20:68:66:6b:09:19:35:35:37:1c:e1:a9:b5:2d:36:40:a7:
45:a0:0b:0c:4e:ac:26:e7:0a:95:83:e4:9e:a0:56:57:fb:07:
a9:77:49:1e:32:ca:37:ef:c9:ad:47:dc:39:52:e4:91:4f:73:
c8:22:14:1c:db:4a:6b:88:87:97:27:09:8a:1a:e2:a3:73:b5:
63:b3:2e:07:47:04:f3:d1:e8:f7:9a:94:5f:bb:33:e8:9f:ea:
9d:ed:76:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:48:08 2026 by rpki-client