Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
File: 0j94Nzy5ZlTQMGBkaS78SudxXxc.mft (raw, json)
Hash identifier: sx7fQnc4hA0tJQ2K5R/IopWvXMvb6DgwCEQye6DQnpI=
Subject key identifier: C4:92:93:2A:5A:1C:74:54:13:07:97:DC:CD:FF:86:FE:25:57:31:CF
Authority key identifier: D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
Certificate issuer: /CN=d23f78373cb96654d0306064692efc4ae7715f17
Certificate serial: 019CACEBA76D8266ECBD2D259BC03CD43A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
Manifest number: 0CD7
Signing time: Mon 02 Mar 2026 05:00:50 +0000
Manifest this update: Mon 02 Mar 2026 05:00:50 +0000
Manifest next update: Tue 03 Mar 2026 05:00:50 +0000
Files and hashes: 1: 0j94Nzy5ZlTQMGBkaS78SudxXxc.crl (hash: lGsWSJwRivlKBYwdOp0tbbI+U9WCCHtLUgvEJIc6F4M=)
2: 2k2efwLza4ZnO03YIidqVEqe8vI.roa (hash: B5AmAsDvRZimr7FECRkl2IW5OMCrTl16t1iaHWJsJvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:a7:6d:82:66:ec:bd:2d:25:9b:c0:3c:d4:3a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f78373cb96654d0306064692efc4ae7715f17
Validity
Not Before: Mar 2 05:00:50 2026 GMT
Not After : Mar 3 05:00:50 2026 GMT
Subject: CN=c492932a5a1c7454130797dccdff86fe255731cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d6:d5:8f:7d:ad:01:6f:f8:39:87:e1:5c:52:
f5:bd:9b:64:71:a3:cd:3c:2f:d9:6f:58:fc:e2:e9:
b2:0f:eb:25:e6:46:0b:db:39:7d:ac:9a:56:26:d2:
4f:4a:dd:aa:2a:80:3c:bd:ac:07:e9:1d:57:e1:a5:
ee:61:8c:92:66:c0:50:bd:fc:8d:2c:d6:29:99:4b:
f3:3c:de:77:5a:fe:d6:dd:e4:90:e5:d5:ec:f7:9b:
a6:b4:a8:d7:76:c9:ea:c3:f6:d0:97:e0:a3:21:b3:
83:37:28:34:4b:5e:41:f6:c0:14:ef:82:12:c5:47:
8c:51:c7:ef:07:7a:1b:4d:74:34:f4:0d:50:01:89:
12:b0:2a:3c:3e:0c:11:03:fb:70:3d:7d:67:2d:19:
e2:39:17:0d:34:05:71:46:82:af:58:95:47:c6:6d:
ba:37:b9:db:14:2e:f7:cb:d5:fb:66:02:6f:d9:37:
bd:f2:87:fb:4d:c0:ec:53:53:a3:5b:72:34:1d:af:
43:31:48:a7:1f:06:88:3a:08:85:fa:78:26:38:e7:
e0:c3:2f:45:11:8c:89:6a:3d:70:bf:37:54:b3:49:
61:08:0c:80:09:d0:f5:0c:e9:2b:1c:49:7e:57:e5:
1b:d2:f9:5a:22:03:c2:66:a4:28:dc:0b:55:82:7f:
26:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:92:93:2A:5A:1C:74:54:13:07:97:DC:CD:FF:86:FE:25:57:31:CF
X509v3 Authority Key Identifier:
keyid:D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fe:d6:a5:96:54:05:28:ca:02:f9:49:66:90:78:38:47:91:
82:8a:a5:c5:63:af:6a:d1:85:96:29:fe:d9:93:48:38:80:64:
98:f0:62:e4:f7:32:ff:e1:27:e0:90:f6:ce:69:c8:ad:95:26:
28:20:ae:96:45:ae:fc:7b:b6:27:7f:98:91:dd:75:e9:1f:51:
de:91:eb:e5:6f:51:e4:b0:d2:27:b1:92:50:7c:86:81:63:11:
c4:e1:bd:1e:aa:e5:92:14:25:05:b0:75:5a:4a:e9:a3:22:70:
a2:9d:d6:6b:ff:a3:5b:be:31:dc:c4:b5:47:cf:33:fb:59:fa:
b3:28:e9:fa:93:11:d6:38:cd:91:89:cc:a4:d1:3b:11:96:d1:
aa:1d:c8:fc:9d:d6:80:10:b2:a5:84:00:20:15:ba:8b:7f:7b:
c5:b4:ae:1c:50:5f:d1:1a:23:a8:02:c5:f5:11:8b:58:ee:19:
66:6d:48:ca:a5:25:f9:19:a6:65:e4:04:82:e1:e8:23:6f:1b:
58:5d:6f:05:e0:f7:e8:00:7f:0f:17:16:3b:ee:53:1f:3b:35:
cd:80:e0:48:cf:b5:43:be:16:a3:7e:02:d7:65:2e:20:f0:c1:
ab:3b:61:eb:45:00:0d:90:da:27:10:39:d5:44:b5:e4:21:cc:
88:91:fa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:49 2026 by rpki-client