Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
File: 0j94Nzy5ZlTQMGBkaS78SudxXxc.mft (raw, json)
Hash identifier: eARl8ML3z84f12k9dr3kKc+2NkufX7QlYx7b1mbtKv4=
Subject key identifier: AA:B1:DF:00:0C:00:38:59:94:E4:B9:D5:BA:0D:DA:86:DC:A4:28:D5
Authority key identifier: D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
Certificate issuer: /CN=d23f78373cb96654d0306064692efc4ae7715f17
Certificate serial: 01A10737EAE7BD9C74F650883A14A54FEBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
Manifest number: 0F18
Signing time: Sun 04 Oct 2026 14:01:07 +0000
Manifest this update: Sun 04 Oct 2026 14:01:07 +0000
Manifest next update: Mon 05 Oct 2026 14:01:07 +0000
Files and hashes: 1: 0j94Nzy5ZlTQMGBkaS78SudxXxc.crl (hash: TST7Mir/va8qFGW6AfLkmu7fHxRv+LxAvECfM2Snybg=)
2: 2k2efwLza4ZnO03YIidqVEqe8vI.roa (hash: B5AmAsDvRZimr7FECRkl2IW5OMCrTl16t1iaHWJsJvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:37:ea:e7:bd:9c:74:f6:50:88:3a:14:a5:4f:eb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f78373cb96654d0306064692efc4ae7715f17
Validity
Not Before: Oct 4 14:01:07 2026 GMT
Not After : Oct 5 14:01:07 2026 GMT
Subject: CN=aab1df000c00385994e4b9d5ba0dda86dca428d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:d8:88:e9:00:1c:00:46:78:29:d6:6c:f4:
77:6d:57:ac:f8:fe:87:7b:a6:45:5f:66:b5:1d:9a:
e8:48:1d:0e:56:4c:96:48:df:a3:70:fa:10:76:42:
25:24:20:b1:49:e4:fc:fe:89:0d:12:8f:51:8a:58:
de:79:3f:7d:ed:1c:b8:fd:28:83:ee:99:4a:15:8f:
f2:fc:18:a6:36:d6:b8:37:6d:32:67:c6:e9:14:53:
49:aa:fd:f9:88:fa:11:c2:64:f4:fc:3f:75:da:1e:
d6:b7:e3:68:b4:dc:f5:2a:75:ad:76:8e:d8:01:df:
cc:c5:19:83:c0:f4:37:ff:ac:6f:d5:85:83:cd:16:
1f:89:7f:df:f8:2f:9a:2d:63:81:76:80:82:28:a6:
ca:53:99:78:07:fd:87:0d:bb:b0:ed:5c:0d:ba:fd:
5f:8e:76:7e:08:6a:a7:4e:d5:2b:93:99:37:db:04:
0d:34:4e:dd:5c:c2:72:71:af:03:35:09:0e:ed:44:
85:fc:13:88:f8:80:24:95:b9:9f:1b:76:2a:e7:e8:
7d:e4:b5:2a:df:df:56:bd:7f:cd:b1:a4:45:cc:18:
b8:43:7a:ac:5b:c5:ab:52:86:fc:8b:bf:42:ec:6a:
66:7c:14:fd:20:f3:45:d8:9e:fd:b7:e3:94:f2:ab:
7d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B1:DF:00:0C:00:38:59:94:E4:B9:D5:BA:0D:DA:86:DC:A4:28:D5
X509v3 Authority Key Identifier:
keyid:D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e0:c9:c6:7f:fb:63:34:f0:d3:40:74:c3:77:ec:68:9a:4d:
f5:77:e4:c5:85:09:1b:26:d7:92:d5:a3:b2:3a:eb:92:0a:13:
dc:aa:e6:0f:0f:d6:db:4b:6b:ab:e8:ed:c0:23:6e:90:a1:6a:
86:cd:1d:e0:a4:c8:da:ca:d5:2c:ea:d0:f5:e5:31:af:7e:38:
a5:cb:d2:e4:39:e9:a8:09:f7:b0:51:39:09:40:32:d2:4d:3d:
8c:22:ca:64:6c:cd:bb:34:86:cb:b6:70:a0:db:46:7d:ab:95:
b1:ca:66:a7:7e:1c:5f:e2:2c:55:05:ed:d5:bf:a2:fb:55:78:
22:a0:28:e5:26:0a:ce:f4:93:ea:ad:95:80:df:72:7f:b3:c8:
2c:d9:d5:59:5f:5b:4d:cd:a7:a5:c6:7e:b3:97:24:15:ff:90:
c5:80:b7:36:47:ac:9e:8b:16:18:73:4c:b8:a3:de:d4:70:50:
13:95:53:db:ce:c1:58:aa:4e:1a:6d:c8:9f:fa:78:28:91:6a:
6e:20:95:36:17:00:20:36:bd:2c:86:5e:9f:26:cc:ad:d1:67:
e4:b8:34:df:06:13:72:56:12:b7:73:54:af:9e:a4:7b:e2:32:
43:59:aa:6a:ca:93:69:aa:0f:d1:8b:2f:aa:9e:9c:9a:c0:08:
e8:f1:2a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:20:54 2026 by rpki-client