Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
File: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft (raw, json)
Hash identifier: +n7wX8GQtE+tXxcZgI8Eh7VAsBUxBsiw9Fhski5frxM=
Subject key identifier: 06:BE:51:01:55:08:66:BA:93:3B:53:8D:F1:09:11:57:8B:3B:D3:7B
Authority key identifier: D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05
Certificate issuer: /CN=d098e907c63457e6ca6281dfe297d972bffda805
Certificate serial: 019CAC7DB62468623BF15BBB7FB75432689D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
Manifest number: 1373
Signing time: Mon 02 Mar 2026 03:00:45 +0000
Manifest this update: Mon 02 Mar 2026 03:00:45 +0000
Manifest next update: Tue 03 Mar 2026 03:00:45 +0000
Files and hashes: 1: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl (hash: vGWJqkGCdEIb1x0Sm4z7/TeRwJQjVui4tmYhqtiD0WI=)
2: _vTGMoMd2OUixFc93cU4_AKUok0.roa (hash: 8AD33t0BoeAy789bxPf6MIdbPtyMKTJZlywsC+bTttg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:b6:24:68:62:3b:f1:5b:bb:7f:b7:54:32:68:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d098e907c63457e6ca6281dfe297d972bffda805
Validity
Not Before: Mar 2 03:00:45 2026 GMT
Not After : Mar 3 03:00:45 2026 GMT
Subject: CN=06be5101550866ba933b538df10911578b3bd37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:8c:8e:74:1f:12:52:95:16:f2:f4:1c:62:
5e:47:29:2e:6c:7a:05:e5:a0:0d:bf:fd:bc:a5:da:
d8:cb:3a:32:c7:22:53:f3:51:10:e2:34:a1:ea:0a:
62:98:76:e6:1d:d3:a9:02:43:7f:c5:33:55:f2:4e:
2e:a4:95:f7:91:a4:7d:6b:f8:ec:2e:ca:08:81:40:
63:32:a5:fa:aa:dd:c8:e6:d0:95:dd:3f:05:ff:aa:
4d:37:75:2a:d8:f0:91:79:e1:07:40:20:3c:d1:7b:
a6:55:de:6f:8c:ca:45:3c:f3:12:0c:1d:fb:44:64:
80:9c:3c:c7:c2:e9:34:4d:e8:76:70:80:85:3e:71:
e5:e5:be:33:7a:d9:eb:50:3a:f1:c8:01:43:5b:72:
ea:72:da:fd:bd:e2:18:47:f2:2b:6f:a4:79:35:d1:
d7:20:81:b6:0d:c8:68:51:26:6f:60:57:b4:00:07:
d3:fb:8d:15:af:e9:91:7f:37:78:15:22:3d:6d:57:
6d:62:60:fe:f5:7a:cf:19:e7:fb:59:0d:1b:e6:79:
ca:57:c4:b7:b9:b3:19:e3:db:56:ee:10:de:83:e3:
68:c1:67:c2:3c:8b:8d:8b:a3:13:5e:a8:99:b4:2c:
f8:5e:4a:e5:37:fa:00:0b:0b:40:31:99:27:28:b9:
54:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BE:51:01:55:08:66:BA:93:3B:53:8D:F1:09:11:57:8B:3B:D3:7B
X509v3 Authority Key Identifier:
keyid:D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e6:fe:e0:26:4e:5e:46:93:53:36:d6:91:cf:81:de:ac:07:
bf:6c:35:d6:10:c7:37:30:0a:b7:ae:a7:8d:80:6a:44:80:66:
47:92:04:96:86:96:86:ab:45:b0:94:99:3f:5e:9f:35:7b:84:
55:bb:d6:27:dd:17:d2:3b:f6:d4:e8:be:f1:eb:d4:42:48:e8:
93:b5:78:9e:dd:51:ca:7f:88:3f:4d:49:3f:90:50:76:96:40:
7c:53:f0:1e:fd:95:18:83:01:45:93:75:ab:4f:6d:d1:53:8a:
26:cd:f5:b0:6e:e2:4c:12:c9:4f:9d:ee:b5:bf:db:c0:91:26:
92:6a:3b:26:77:17:a6:19:eb:4d:93:7f:1c:17:c4:b2:5b:36:
c1:f8:8a:29:fd:e2:91:c0:32:c9:9f:d5:b2:3e:a1:88:70:05:
69:28:34:d5:08:e0:b6:54:a1:27:c3:ae:b4:e7:75:04:e9:85:
7b:cd:d4:72:ec:b7:84:1d:d1:73:0f:c0:1b:4f:5c:36:ac:71:
01:6b:cc:81:66:e8:42:e5:1e:20:08:a9:08:63:78:c2:0f:29:
03:42:9a:e1:6f:3d:35:2f:85:59:79:99:5b:c3:16:b1:ca:06:
bf:19:f8:ae:25:ab:6d:45:7e:66:70:a4:f3:69:44:1b:0f:9e:
0a:0b:84:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfbYkaGI78Vu7f7dUMmidMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOThlOTA3YzYzNDU3ZTZjYTYyODFkZmUyOTdkOTcyYmZm
ZGE4MDUwHhcNMjYwMzAyMDMwMDQ1WhcNMjYwMzAzMDMwMDQ1WjAzMTEwLwYDVQQD
EygwNmJlNTEwMTU1MDg2NmJhOTMzYjUzOGRmMTA5MTE1NzhiM2JkMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsCMjnQfElKVFvL0HGJeRykubHoF
5aANv/28pdrYyzoyxyJT81EQ4jSh6gpimHbmHdOpAkN/xTNV8k4upJX3kaR9a/js
LsoIgUBjMqX6qt3I5tCV3T8F/6pNN3Uq2PCReeEHQCA80XumVd5vjMpFPPMSDB37
RGSAnDzHwuk0Teh2cICFPnHl5b4zetnrUDrxyAFDW3Lqctr9veIYR/Irb6R5NdHX
IIG2DchoUSZvYFe0AAfT+40Vr+mRfzd4FSI9bVdtYmD+9XrPGef7WQ0b5nnKV8S3
ubMZ49tW7hDeg+NowWfCPIuNi6MTXqiZtCz4XkrlN/oACwtAMZknKLlUMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAa+UQFVCGa6kztTjfEJEVeLO9N7MB8GA1UdIwQY
MBaAFNCY6QfGNFfmymKB3+KX2XK//agFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjNiNmMtNmFhZC00YTc0LTgwN2Mt
MTBlMTNkNDNmMGRkLzEvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jNjNiNmMtNmFhZC00YTc0LTgwN2MtMTBlMTNkNDNmMGRk
LzEvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKub+4CZO
XkaTUzbWkc+B3qwHv2w11hDHNzAKt66njYBqRIBmR5IEloaWhqtFsJSZP16fNXuE
VbvWJ90X0jv21Oi+8evUQkjok7V4nt1Ryn+IP01JP5BQdpZAfFPwHv2VGIMBRZN1
q09t0VOKJs31sG7iTBLJT53utb/bwJEmkmo7JncXphnrTZN/HBfEsls2wfiKKf3i
kcAyyZ/Vsj6hiHAFaSg01QjgtlShJ8OutOd1BOmFe83Ucuy3hB3Rcw/AG09cNqxx
AWvMgWboQuUeIAipCGN4wg8pA0Ka4W89NS+FWXmZW8MWscoGvxn4riWrbUV+ZnCk
82lEGw+eCguECw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:38 2026 by rpki-client