Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json)
Hash identifier: PfL49UQC5r8JJejoexqVtXpGxGttkPvBN8tb3+fAx9E=
Subject key identifier: 3A:9E:EA:06:10:D0:77:6E:2D:AB:6C:E4:4D:1D:78:CA:B5:E4:4A:AF
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 019EBE10BBEC0E554B3F50779EF5AF937F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
Manifest number: 16DC
Signing time: Fri 12 Jun 2026 23:00:28 +0000
Manifest this update: Fri 12 Jun 2026 23:00:28 +0000
Manifest next update: Sat 13 Jun 2026 23:00:28 +0000
Files and hashes: 1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: IshjNTfbSBtu/n0CB7owH6fwC9Eg+5AXZcRJEmFng2U=)
2: yA5b7maJfHU0NcBkIvFx-c8-I54.roa (hash: XFcePeHchpjbLRec04pqboXS3/LtfvbSEVpXlPE0ESo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:bb:ec:0e:55:4b:3f:50:77:9e:f5:af:93:7f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: Jun 12 23:00:28 2026 GMT
Not After : Jun 13 23:00:28 2026 GMT
Subject: CN=3a9eea0610d0776e2dab6ce44d1d78cab5e44aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7a:11:09:00:b3:e4:bb:e5:4f:fc:b2:01:87:
35:f8:42:05:dd:7b:7a:1e:1c:48:45:91:54:40:b9:
ae:9e:c3:7c:bd:e8:7e:44:7b:65:7d:0b:32:d4:89:
1d:93:f3:2a:b6:a3:b9:9f:84:08:91:04:3d:41:45:
13:42:6d:eb:b7:00:7a:07:09:88:39:84:52:ff:63:
23:70:1b:db:18:f6:67:fa:0c:58:fc:4b:af:68:b8:
50:f0:aa:d3:dc:2b:e6:18:e9:33:74:49:87:6d:04:
d8:28:d4:90:18:79:e9:cb:28:08:ef:7d:f5:58:67:
b9:55:49:ac:cb:bb:db:f2:ca:8f:34:36:b4:25:68:
91:7f:b5:0d:5f:4f:b0:67:b0:3d:0b:3c:3f:85:96:
d5:2c:b4:12:68:75:e6:57:b0:c4:c6:a6:d3:3f:31:
11:15:e5:72:b2:6b:a4:aa:a4:e6:cd:27:c3:25:b9:
8c:de:bd:97:34:b0:ee:b0:88:4a:58:ad:13:80:92:
ba:83:cb:e3:df:75:a0:86:86:61:ae:8e:e1:7f:9a:
bb:ce:ce:04:98:20:6f:34:45:3a:b1:5c:4a:d2:52:
a6:ee:f9:ec:41:d4:2b:17:0a:1f:33:79:bb:25:4e:
44:02:36:c2:85:ce:00:c4:88:9a:4f:cf:34:04:f4:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9E:EA:06:10:D0:77:6E:2D:AB:6C:E4:4D:1D:78:CA:B5:E4:4A:AF
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9e:e0:34:f9:c6:00:b1:e9:3d:37:a5:de:1e:4d:11:a8:34:
58:0f:2e:b6:67:98:89:9f:ec:0b:6e:4b:09:40:a4:e9:32:55:
01:90:95:65:a6:1b:b9:00:4c:d8:af:a8:0b:92:df:74:3a:93:
de:4d:8b:5c:09:ec:27:7a:f6:02:f4:ae:e0:27:7b:96:b9:58:
81:87:89:3e:8b:b6:20:ec:96:8e:7e:ff:65:f7:e8:0a:70:29:
7f:52:2b:54:2e:94:9d:c8:47:0f:3d:a4:83:96:33:e2:ff:df:
e5:13:c0:bf:f2:df:a4:6e:8a:90:83:3d:ef:d3:ff:2b:ea:2f:
99:f4:02:9b:9d:62:ef:39:8d:9a:01:ad:e0:99:85:dd:83:e1:
6a:42:e6:c8:6f:cf:8c:9b:3f:cf:e9:81:e2:cb:98:fb:b6:cb:
22:12:b9:cd:ae:1f:3f:ca:17:12:55:b6:0d:f0:99:03:d5:f8:
8c:a9:15:c8:f8:b4:8a:e3:51:6c:80:d7:70:65:cd:94:e9:3a:
16:19:9a:1b:d3:72:8c:71:81:c3:26:e2:a4:41:a3:fb:3f:19:
a1:7a:43:02:71:73:68:20:7e:7b:6e:96:bf:97:71:75:0a:1f:
76:78:ff:01:a3:18:dd:4a:7d:b8:c0:42:74:12:67:a5:7f:a5:
22:de:c5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:08:28 2026 by rpki-client