Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json)
Hash identifier: k+cVPn12GYt/eh+TvmI4wwSBSlLAjqypEUgSYOMmk9Q=
Subject key identifier: 50:97:72:62:3E:5E:B1:A7:5A:A2:C9:27:7F:DD:00:FF:8A:BC:FE:62
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 019FA898D8FF39EE17990EC71E8D7E0E31BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
Manifest number: 1759
Signing time: Tue 28 Jul 2026 12:00:17 +0000
Manifest this update: Tue 28 Jul 2026 12:00:17 +0000
Manifest next update: Wed 29 Jul 2026 12:00:17 +0000
Files and hashes: 1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: fqieSE8QHQz+jcPItXYHoLzB0RAOAduVPUrvmR0EffE=)
2: NUx7vvEWNtlf30buwcgLWtHz7GQ.roa (hash: 7mzTG7+2/G0MOcxAuxj9Gm4KPG0QM6fGkQwQnv78LHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:d8:ff:39:ee:17:99:0e:c7:1e:8d:7e:0e:31:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: Jul 28 12:00:17 2026 GMT
Not After : Jul 29 12:00:17 2026 GMT
Subject: CN=509772623e5eb1a75aa2c9277fdd00ff8abcfe62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:3e:7a:07:8b:d5:0b:75:80:bc:34:eb:6b:
e0:37:83:4a:65:6b:74:ea:6f:c6:f2:7b:d8:93:21:
24:e6:ba:31:41:3b:3f:dc:49:e0:59:22:cc:b1:c5:
20:38:49:8e:c6:95:7f:65:8c:c2:53:9f:53:9f:7a:
30:25:fc:10:d3:ab:ef:7c:bc:52:3d:2b:4b:c1:82:
ae:f1:27:d2:8b:cf:66:b3:80:22:aa:52:fd:80:5c:
32:99:7d:b8:04:2f:05:93:cb:32:4b:64:c5:d2:cc:
49:b3:ed:2f:cf:67:34:48:dc:d6:a1:ff:f9:bc:80:
f3:02:d7:1e:dd:61:96:bf:59:27:3f:53:1d:5f:fc:
17:d0:79:85:99:38:8b:1e:22:6e:85:87:b7:e1:e2:
6b:12:f5:1b:93:1e:19:7a:13:92:5e:6b:9c:90:01:
4f:9a:fe:b3:1b:9e:ac:df:9e:60:97:1f:eb:9a:49:
db:4b:72:b5:1d:fc:cf:fd:a6:91:f1:1f:ae:54:24:
75:5a:d0:e6:42:5e:9e:50:f6:b3:72:3a:48:fa:c1:
97:d0:03:cf:e6:61:3f:27:e8:b1:18:d2:d8:c8:b7:
74:88:83:21:4d:b9:2d:67:97:0c:14:27:5d:39:4e:
5c:d8:35:53:bb:62:4d:2d:b3:3e:4c:be:45:35:3d:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:97:72:62:3E:5E:B1:A7:5A:A2:C9:27:7F:DD:00:FF:8A:BC:FE:62
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:46:7f:3e:19:63:92:23:52:b8:8b:1d:eb:a6:02:6e:b9:8f:
69:73:03:7f:64:ae:5d:1c:54:3e:59:4e:ba:2c:13:7a:e3:57:
4f:32:38:5c:c1:93:56:b6:62:91:83:19:2e:53:4f:16:f4:10:
1e:69:46:28:d9:9a:af:2e:2d:91:93:f3:da:bc:f5:6a:75:b7:
24:8d:19:6e:69:6b:6c:8c:e5:0d:02:f8:d4:bb:1c:0f:1c:7d:
cd:97:25:5d:85:f9:e9:7f:8a:cf:f3:df:b3:61:de:44:f6:45:
e1:a8:f1:7f:b0:51:90:b1:7e:0b:30:8d:f2:5d:42:e3:d7:c1:
2d:1d:12:85:da:f3:46:37:96:0a:d5:a4:f2:dd:42:7b:5a:f6:
09:2c:d4:5a:bd:fb:86:0e:95:1e:88:77:85:fa:49:c5:b3:cb:
f5:43:1f:5c:c5:56:94:dd:45:f5:26:d7:c4:9b:7c:7b:e2:4d:
12:ef:e6:54:3b:c1:97:30:10:f4:b1:42:84:58:b6:0a:58:e5:
b6:b9:1c:e7:19:69:e5:b8:7a:fb:1e:28:d2:b6:36:57:26:fd:
54:c7:df:45:e9:f7:b2:83:ba:b9:4e:e1:80:7d:e7:50:2c:1d:
32:56:af:be:87:20:50:a6:03:83:8c:93:02:b8:52:de:14:61:
a3:d1:08:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:16:39 2026 by rpki-client