Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json)
Hash identifier: 7stgPn2HYRW0mSpltuQT1n8FQYBk1JYS6//wlS6DRBo=
Subject key identifier: 58:AD:72:9B:A0:03:46:4D:E4:A5:8C:6F:19:5F:24:CD:06:EA:79:A7
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 019D9886A2363A5A151BFC54039A43DA8141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
Manifest number: 1644
Signing time: Thu 16 Apr 2026 23:00:53 +0000
Manifest this update: Thu 16 Apr 2026 23:00:53 +0000
Manifest next update: Fri 17 Apr 2026 23:00:53 +0000
Files and hashes: 1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: sm/ofd3Tm+YIIgel/6fz29k/CTaPKz17TkV3OEi0FEU=)
2: yA5b7maJfHU0NcBkIvFx-c8-I54.roa (hash: XFcePeHchpjbLRec04pqboXS3/LtfvbSEVpXlPE0ESo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:a2:36:3a:5a:15:1b:fc:54:03:9a:43:da:81:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: Apr 16 23:00:53 2026 GMT
Not After : Apr 17 23:00:53 2026 GMT
Subject: CN=58ad729ba003464de4a58c6f195f24cd06ea79a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:d0:b1:c8:8a:2d:4d:1c:52:c6:19:0c:da:
fc:97:c7:4e:23:f8:a8:29:74:55:93:8a:c4:5a:61:
a8:70:5c:0e:a0:e2:db:9b:59:a9:b3:f6:03:f5:2e:
a6:c7:bf:dc:7f:69:85:2e:58:86:08:5e:fb:3e:2a:
70:15:a5:37:ea:40:c8:7d:1c:8f:85:74:c9:31:68:
bb:b8:38:c5:1b:a4:c4:f7:d1:d3:8f:e4:37:d9:92:
44:28:d5:ea:94:a3:1a:45:d1:f9:2d:c8:5a:66:ae:
0f:e1:63:36:3c:e2:b8:95:c5:ad:b1:42:5c:d5:22:
56:be:61:6f:b8:f4:29:8e:ba:02:0d:5d:ff:bd:15:
6f:70:1d:d8:84:b5:ac:87:cb:ff:8d:c6:ed:e8:ce:
1c:ab:16:6a:33:bd:44:07:a2:cd:37:a8:e6:74:1f:
14:c8:72:93:e0:33:a9:89:78:49:c2:6c:46:58:ed:
81:f4:38:83:fa:46:c1:38:cb:e1:4b:f8:cd:c6:1d:
ab:be:9f:7b:06:66:29:d0:ed:1e:49:b3:1a:e5:e8:
bb:9b:74:66:52:de:11:76:9e:a5:95:a1:aa:00:e3:
ef:69:1a:8f:12:7f:74:b9:74:ae:56:4b:ab:a8:d9:
70:6c:6c:a3:65:01:d8:cc:4f:44:b5:3d:ab:66:0c:
5b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AD:72:9B:A0:03:46:4D:E4:A5:8C:6F:19:5F:24:CD:06:EA:79:A7
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:78:75:e1:56:54:a3:b1:f2:ea:50:00:48:f7:7d:ec:ed:bb:
28:73:35:78:eb:b7:e6:63:dd:4e:f8:a5:25:7c:4e:3f:f7:3b:
45:c7:d3:fe:e9:ec:7c:6a:6b:50:1b:47:36:3f:79:68:95:fe:
b9:bc:2d:a0:f4:70:23:7b:27:fd:35:75:83:60:3a:e2:26:35:
86:13:4f:e8:fd:1e:f6:3c:55:c0:92:20:c6:71:cb:86:0c:c6:
89:15:9e:fc:8f:34:42:e6:bd:d4:d4:59:07:d2:33:9a:b8:8d:
1a:d2:56:af:f8:07:21:ad:ba:37:bb:85:ef:53:27:64:6f:df:
3a:7b:d5:4f:6b:ee:4f:4c:00:63:f5:13:19:1d:8f:49:37:3a:
f3:3d:21:fa:0d:a8:87:9a:b3:ea:7c:62:14:f7:8c:4d:4d:49:
7c:6e:53:90:ea:bd:a7:64:71:bf:14:6b:67:08:37:75:eb:8a:
89:38:4b:8a:97:7e:54:a8:93:1f:1f:84:ed:33:58:b5:46:c4:
2a:df:1f:6f:0a:53:d1:a5:29:f9:d5:d9:8a:05:76:8c:4c:32:
34:39:c9:2f:83:5c:e3:01:54:d9:e8:8c:2a:e0:fd:3a:63:1f:
fb:7a:d4:91:ef:f2:37:d1:3e:c1:38:bc:0b:21:ee:50:0c:8a:
03:3f:b1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:42 2026 by rpki-client