Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
File: 0j94Nzy5ZlTQMGBkaS78SudxXxc.mft (raw, json)
Hash identifier: Nwmdagy7HqW6k//kN+EtCjTcENJa3/VeD4NITK82kAY=
Subject key identifier: 5A:6A:74:AD:CD:98:8C:2C:B5:6F:6B:C1:75:A6:C4:5D:5A:E6:21:F3
Authority key identifier: D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
Certificate issuer: /CN=d23f78373cb96654d0306064692efc4ae7715f17
Certificate serial: 019D9A74EDBDD008B3406E2CF4780B3794CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
Manifest number: 0D52
Signing time: Fri 17 Apr 2026 08:00:47 +0000
Manifest this update: Fri 17 Apr 2026 08:00:47 +0000
Manifest next update: Sat 18 Apr 2026 08:00:47 +0000
Files and hashes: 1: 0j94Nzy5ZlTQMGBkaS78SudxXxc.crl (hash: hneCg7UlVWJtgTYdqNasLyzbguaQoJpAbaA42Hz3p9A=)
2: 2k2efwLza4ZnO03YIidqVEqe8vI.roa (hash: B5AmAsDvRZimr7FECRkl2IW5OMCrTl16t1iaHWJsJvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:ed:bd:d0:08:b3:40:6e:2c:f4:78:0b:37:94:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f78373cb96654d0306064692efc4ae7715f17
Validity
Not Before: Apr 17 08:00:47 2026 GMT
Not After : Apr 18 08:00:47 2026 GMT
Subject: CN=5a6a74adcd988c2cb56f6bc175a6c45d5ae621f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:11:80:69:e6:97:21:04:ae:90:29:18:4a:ef:
e7:00:bf:3e:dd:49:e3:4a:f8:01:e8:0b:97:76:8b:
36:8e:a9:eb:d1:e1:0d:7c:0f:9a:12:32:ad:4e:5c:
24:05:78:0c:c7:03:8e:69:40:5e:cf:86:64:15:65:
7b:df:8e:99:b9:ad:5b:14:6e:5b:e5:a9:b2:7d:0f:
a7:26:14:b9:4e:1a:b0:53:bb:e4:15:96:5b:bd:43:
82:66:4c:bb:a2:f0:03:f0:eb:19:50:4a:17:d1:e9:
8c:98:88:66:9c:f1:31:10:83:c0:85:3c:fe:32:c5:
7e:fc:09:f5:6c:63:ae:bf:a0:8e:64:ed:a9:f0:18:
a6:fb:54:6b:5a:98:db:e9:1d:f0:8f:d5:3a:17:a7:
f2:c4:1e:1d:3b:ff:9b:f8:ba:5b:f0:ea:c3:cd:83:
7b:48:b1:b7:c2:fd:e6:e9:3f:0f:41:af:ca:f3:9e:
76:c2:f4:58:f1:1c:9a:3b:4e:8d:94:48:9e:2e:c2:
45:74:a1:48:7c:80:ff:54:c2:ef:98:2c:94:36:7a:
84:1a:1d:d4:a1:6c:89:a2:d8:0f:7a:35:44:56:8a:
94:10:ec:12:be:60:a4:a5:9c:4e:21:a0:2d:3e:82:
4e:2a:e1:3a:ba:92:25:ca:29:16:0b:47:08:3c:8e:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6A:74:AD:CD:98:8C:2C:B5:6F:6B:C1:75:A6:C4:5D:5A:E6:21:F3
X509v3 Authority Key Identifier:
keyid:D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b2:cb:5b:1d:f5:7b:06:e5:d6:e4:f5:48:96:6b:f0:db:a6:
27:f8:3e:c0:16:7a:e1:83:33:e9:20:85:ed:ce:99:fc:6f:23:
31:59:3b:62:bd:04:b1:d9:4e:1e:3d:d3:11:f9:5a:70:ac:c1:
78:9a:cd:dc:6e:dd:70:27:a0:2f:1d:bb:e5:1a:40:2b:03:ea:
5c:8c:2e:f8:9d:af:74:96:c7:18:14:3f:e7:34:c4:65:38:80:
a7:81:c7:3d:5d:ae:73:84:34:40:14:e4:66:c3:a7:2f:32:09:
1a:a2:78:02:29:5c:d9:a6:02:cb:a0:36:31:16:ef:82:23:ae:
fb:b9:aa:8e:84:a3:ba:3f:4f:f3:8d:ed:de:2d:08:2e:ef:7f:
76:a4:d7:25:79:62:ad:43:86:47:19:27:3c:00:5b:38:69:47:
56:c7:da:e8:91:f6:e3:88:67:bc:71:3a:d6:4e:e4:29:b0:f2:
97:61:aa:59:32:89:84:ae:d5:f1:eb:34:69:43:2a:42:19:37:
2c:04:3f:ea:47:da:6d:80:ee:16:a9:13:03:02:e9:b7:81:59:
f6:c2:d8:fb:6e:6e:a5:33:e6:35:00:26:3c:e0:c7:f1:af:d3:
17:91:66:97:80:33:c6:6f:d0:37:f8:32:61:e9:6d:8c:e9:07:
64:ed:ac:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:08 2026 by rpki-client