Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
File: 0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json)
Hash identifier: 8vWSbxiqj45IDIg4ZH6SAr7245h0ToaMoHlGtJIlVks=
Subject key identifier: 9A:87:89:A0:D2:7F:BB:38:31:5C:78:5A:82:1F:33:A0:4A:36:5E:8A
Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
Certificate issuer: /CN=d234798e0712f155292d3211f7c447223ccd49ac
Certificate serial: 019FA90771EB8B1935771D30DF50CBDC6AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
Manifest number: 16F3
Signing time: Tue 28 Jul 2026 14:01:04 +0000
Manifest this update: Tue 28 Jul 2026 14:01:04 +0000
Manifest next update: Wed 29 Jul 2026 14:01:04 +0000
Files and hashes: 1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: eaus/fyfsPMCJIYu1afNQRb9cu1KuokrEqoVQMgn/nc=)
2: RjK8oLQkpJRzAeEdXg6vAbqYOYY.roa (hash: Mnx3rs/opPeBY8JJ1GG9XmHg+1e4VxaebybsYn1/rbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:71:eb:8b:19:35:77:1d:30:df:50:cb:dc:6a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac
Validity
Not Before: Jul 28 14:01:04 2026 GMT
Not After : Jul 29 14:01:04 2026 GMT
Subject: CN=9a8789a0d27fbb38315c785a821f33a04a365e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:2b:30:4a:4a:42:bc:92:59:b7:95:9d:5c:
65:b6:38:36:c0:00:f8:6e:32:15:09:a0:88:b0:ff:
25:f9:85:8e:cb:5f:f5:0a:e2:8c:bd:b3:26:38:da:
8b:30:67:2f:a4:5f:8d:1b:16:c7:b4:59:64:9c:60:
1a:b0:a9:da:88:40:1d:17:cc:23:33:6d:be:cf:28:
6f:51:4f:68:8b:f0:1f:47:df:bb:bf:84:b9:84:cc:
1d:b5:3b:43:dc:c0:73:0f:58:6e:81:58:ad:57:f9:
e8:57:44:0a:73:11:e7:2c:24:00:65:70:07:18:8b:
5b:f2:0c:db:7b:c2:3b:58:22:45:ed:8c:6c:78:23:
76:eb:98:c4:66:4d:a4:ec:68:dc:5c:5f:c8:d7:ee:
ee:f0:50:c7:12:1d:03:b5:30:7e:e6:78:0c:bd:39:
e3:35:30:cf:ee:a3:c9:c0:2e:13:3d:9f:f9:cd:9d:
76:5a:7d:d0:f6:56:20:32:db:28:d0:95:8c:51:69:
da:e1:d8:6d:eb:48:7d:57:2e:dd:5e:3e:b9:aa:9c:
ea:4c:92:5c:41:6c:9a:90:a6:fc:fd:df:e7:1f:48:
39:de:a6:4e:73:f0:12:21:1c:c0:9f:8e:7e:97:32:
7f:61:5c:44:12:8e:0b:cf:84:2c:fd:72:ae:05:90:
1a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:87:89:A0:D2:7F:BB:38:31:5C:78:5A:82:1F:33:A0:4A:36:5E:8A
X509v3 Authority Key Identifier:
keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e1:69:69:81:98:bb:ae:62:e4:aa:fc:c3:23:26:06:b1:bb:
f8:aa:42:e3:76:c7:3d:d7:c0:68:f1:53:2f:6f:f2:cc:ef:26:
83:c9:b2:8f:77:5e:e6:64:86:f8:bc:ea:5a:87:c8:27:d7:b6:
0b:fc:fd:5e:62:88:8c:5f:ce:1b:33:99:bb:e3:6a:2c:a1:ca:
1e:21:18:c1:b6:1e:1e:29:72:c1:ff:4d:71:98:31:c8:93:10:
7f:c4:81:72:8e:d0:57:42:6b:7a:c1:af:89:79:fc:63:a9:5e:
ea:99:9a:98:a5:95:07:6b:b5:f3:8a:1e:7c:6a:40:20:1b:db:
50:55:90:d4:92:13:cd:1e:61:ec:fd:37:4c:ad:9a:eb:d8:16:
22:fd:df:26:e8:eb:cf:50:4e:8a:47:3b:5a:d8:7d:b0:84:47:
bf:e4:1e:15:52:f1:04:c1:7b:2e:95:19:08:3f:06:95:79:9b:
7f:5a:43:26:20:63:af:0b:6d:55:25:e2:27:c5:12:09:43:f0:
41:6b:1a:e9:a5:0d:e4:04:6b:f0:87:ad:77:5f:00:71:a9:48:
36:16:29:2f:ba:f8:cf:4b:5f:56:97:60:26:4a:fa:b7:7b:07:
7f:eb:7b:40:ab:13:30:08:da:57:e8:35:0d:f1:5e:fc:64:26:
2c:d2:10:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:42:03 2026 by rpki-client