Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json)
Hash identifier: HxOFVRMP67p7BXfsSH1w4U78wvxAyDwBBGV4gQpDHzA=
Subject key identifier: 0D:29:3D:76:E4:D8:AA:E1:14:5D:EC:A0:7C:9C:3B:E9:C6:FC:E4:37
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 019CACEBE7A99406F10E96A7317608EA4EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
Manifest number: 15CA
Signing time: Mon 02 Mar 2026 05:01:07 +0000
Manifest this update: Mon 02 Mar 2026 05:01:07 +0000
Manifest next update: Tue 03 Mar 2026 05:01:07 +0000
Files and hashes: 1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: UafoUnTrX8XzescY7XYis0WrQ7PhqdkmWKotYw3Yztg=)
2: yA5b7maJfHU0NcBkIvFx-c8-I54.roa (hash: XFcePeHchpjbLRec04pqboXS3/LtfvbSEVpXlPE0ESo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:e7:a9:94:06:f1:0e:96:a7:31:76:08:ea:4e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: Mar 2 05:01:07 2026 GMT
Not After : Mar 3 05:01:07 2026 GMT
Subject: CN=0d293d76e4d8aae1145deca07c9c3be9c6fce437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e6:53:d0:12:0a:9b:37:3f:c6:88:9f:7f:43:
9c:da:29:5a:11:fd:ee:07:73:6f:b9:26:f4:f6:52:
83:48:32:2f:f7:3f:ef:99:5f:ce:c3:a4:66:e2:85:
6f:ce:4e:da:f7:28:f7:c9:5c:08:80:8d:e7:03:e0:
87:e2:86:64:59:f0:95:d8:1f:89:e2:96:33:d8:d3:
5d:a2:b2:a4:6d:02:ec:b9:3a:c8:93:d2:6f:cf:4a:
d1:5f:23:dd:cf:45:7c:a1:fd:e8:da:ec:f1:15:a2:
9c:51:9f:52:c7:0f:db:fe:ab:b2:be:44:bc:f3:f1:
96:60:65:e1:03:3d:be:11:d4:c7:bd:71:0e:fe:c3:
0f:9a:cb:78:81:b1:09:31:22:65:af:4a:cd:23:87:
f4:ac:62:16:04:df:33:8b:3d:56:e9:9f:1d:77:bf:
8b:fa:cd:34:cc:96:6f:01:d5:f6:da:a8:ef:62:e9:
b2:95:8a:5f:1d:56:cb:f6:27:aa:72:29:2f:03:b5:
9a:cd:e2:26:a6:61:25:47:2f:ee:8a:0e:f4:d6:16:
f1:09:53:0a:f8:74:37:45:37:c4:de:04:aa:fd:be:
9e:e6:ff:4a:75:1e:6c:f0:e5:4d:47:2c:53:de:68:
80:d0:58:6b:c2:55:cf:63:00:6b:0e:df:0f:f7:3d:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:29:3D:76:E4:D8:AA:E1:14:5D:EC:A0:7C:9C:3B:E9:C6:FC:E4:37
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:71:6f:e4:be:a5:3a:d1:74:8b:99:99:98:2d:0b:57:52:c9:
c6:ec:68:19:17:3c:cf:8b:7e:c0:ca:84:68:7f:9e:95:92:cf:
cf:40:77:47:30:30:20:48:ce:d6:28:0f:c6:c4:70:31:a2:89:
d7:7e:ec:d2:3b:0d:5e:31:ad:3a:3c:ce:01:b2:f3:97:f9:80:
1a:82:dc:bb:cf:14:e6:c2:b3:27:a0:de:af:3f:6f:39:93:b1:
b3:a6:19:27:91:cf:66:7f:0c:88:34:94:97:54:b9:c0:d4:dc:
9c:0d:11:a0:32:55:73:7b:c7:e8:70:f4:b1:24:67:b0:58:c9:
44:f7:88:ec:3c:ad:c7:df:85:4d:17:c2:cd:b5:67:25:7b:2b:
90:68:ad:29:d6:78:8d:14:43:73:58:39:60:3d:e1:36:a0:f6:
7f:0a:0d:6f:b9:87:d3:95:98:7b:ee:db:57:6a:6f:02:5d:b9:
f8:85:d8:39:a1:c4:22:6e:53:b0:22:28:2e:e4:98:2c:34:8d:
9f:45:03:28:0c:f6:fa:c9:3e:8e:18:82:19:76:73:6a:4d:ca:
c5:aa:fd:db:b7:87:a8:b2:56:97:94:36:e5:99:a6:16:01:07:
05:31:95:b5:8b:4a:df:56:f6:55:b3:5b:13:5d:f9:7a:1b:80:
3f:e1:ad:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:32 2026 by rpki-client