Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
File: 0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json)
Hash identifier: HC1PH4dWZcFRNxllzZXSKhVpBNaHlSihaESRe9GM9Fw=
Subject key identifier: 56:87:D0:F4:7B:F7:81:D2:88:30:0E:5D:46:16:3E:A3:E8:4D:B6:98
Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
Certificate issuer: /CN=d234798e0712f155292d3211f7c447223ccd49ac
Certificate serial: 01A12D32DC14C17A9505D767764DCAA3316B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
Manifest number: 17BC
Signing time: Sun 11 Oct 2026 23:01:10 +0000
Manifest this update: Sun 11 Oct 2026 23:01:10 +0000
Manifest next update: Mon 12 Oct 2026 23:01:10 +0000
Files and hashes: 1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: +PDWyyA8U+iEso19hmmi1e1w5DWDvT6dBXPUMzmJHV8=)
2: RjK8oLQkpJRzAeEdXg6vAbqYOYY.roa (hash: Mnx3rs/opPeBY8JJ1GG9XmHg+1e4VxaebybsYn1/rbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:32:dc:14:c1:7a:95:05:d7:67:76:4d:ca:a3:31:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac
Validity
Not Before: Oct 11 23:01:10 2026 GMT
Not After : Oct 12 23:01:10 2026 GMT
Subject: CN=5687d0f47bf781d288300e5d46163ea3e84db698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:bb:ae:8d:56:71:5e:7a:be:6d:ee:04:a9:
3e:17:25:f4:df:7f:ea:be:fe:ec:59:16:20:75:d8:
e7:8b:ec:72:f4:24:e2:93:82:60:79:d0:0c:a8:da:
6a:fd:87:a5:d8:62:08:9b:0c:29:08:6e:1a:61:d6:
41:b8:e6:0f:d2:8b:1f:e3:e1:63:56:e4:df:2f:dd:
fc:ec:ba:9b:07:ad:e7:c8:9f:9a:5e:37:10:4b:6e:
ac:4e:00:9b:e7:7a:4b:6a:8d:10:c3:a2:da:bc:6f:
0d:3f:6f:5f:39:d9:22:bb:98:96:f7:22:03:f9:7b:
c6:96:e7:9b:6b:ac:41:a6:6f:89:98:4f:38:ff:93:
53:65:9b:26:58:b3:99:69:c6:e0:5b:3c:08:a8:7a:
3e:02:df:05:a2:fd:f8:c0:1d:fc:c8:b1:33:6b:20:
32:3b:dd:fe:d4:07:cb:45:65:e6:82:6b:27:16:ec:
12:d8:da:8c:c1:9f:53:9e:c3:92:63:6d:83:27:7c:
e5:c7:7f:d7:40:eb:00:1a:99:ea:20:c4:3b:a2:1a:
76:fa:87:31:51:cd:39:53:a3:c0:87:bb:87:cc:f3:
18:d1:b6:76:91:e2:22:de:98:b0:0e:53:64:61:9b:
71:3b:9e:08:2d:1a:fe:08:20:27:87:83:ec:8a:48:
46:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:87:D0:F4:7B:F7:81:D2:88:30:0E:5D:46:16:3E:A3:E8:4D:B6:98
X509v3 Authority Key Identifier:
keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e3:b4:d6:8b:96:2d:6a:d0:0e:69:41:1b:43:3f:fc:c5:fd:
31:32:a7:70:1c:60:11:8c:a1:59:2c:c3:a3:93:7f:6b:f3:92:
09:30:9d:a2:4c:28:63:23:b5:be:0c:0c:22:89:d8:26:0c:61:
0d:08:74:b3:aa:f3:2b:aa:71:f1:9d:19:9e:87:b9:f2:5a:c1:
f3:5c:d3:cd:80:f4:d8:8b:db:6a:da:ba:1b:b4:b4:db:ec:98:
d3:81:0c:e0:df:32:19:74:47:52:04:55:84:14:49:73:df:b2:
05:85:bb:c3:30:f2:96:f8:b3:f3:83:ed:f6:2d:a1:67:8b:a7:
df:5e:be:9f:e0:55:20:9e:ca:a6:66:62:1a:dc:ed:b6:54:84:
e3:e2:d7:e0:e3:91:a3:a7:a4:a0:8c:b6:e1:d5:9c:c9:4d:49:
df:dc:3e:2a:8c:17:61:86:42:be:26:db:75:ba:b2:56:dd:50:
e5:ef:59:d8:31:38:bf:d6:35:62:31:c8:b2:13:cf:fa:42:6d:
3c:9a:c4:a0:d4:7d:eb:d5:e9:ab:c7:0f:a1:df:b8:89:fe:43:
e2:eb:ee:c2:d6:dd:e2:df:97:7e:f3:90:fa:e8:00:8a:c3:0e:
1d:af:93:d8:67:f3:29:01:7a:e1:d6:f3:81:1b:95:b6:35:41:
e4:80:21:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:59:14 2026 by rpki-client