Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
File: 0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json)
Hash identifier: 5TnGvJBMjQKt8u2XcUqak8wP4vzTMQXd8/Nf2SZpWAM=
Subject key identifier: D1:80:73:E4:D7:74:07:87:30:80:17:60:C9:F6:EF:C2:64:C6:FF:AC
Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
Certificate issuer: /CN=d234798e0712f155292d3211f7c447223ccd49ac
Certificate serial: 019CB0234EE80404ED8B34E088749139523F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
Manifest number: 1569
Signing time: Mon 02 Mar 2026 20:00:29 +0000
Manifest this update: Mon 02 Mar 2026 20:00:29 +0000
Manifest next update: Tue 03 Mar 2026 20:00:29 +0000
Files and hashes: 1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: TCrvI7Sf7srl7v6QivGv+uqZIza6MOi3FI5zJXF1frI=)
2: RjK8oLQkpJRzAeEdXg6vAbqYOYY.roa (hash: Mnx3rs/opPeBY8JJ1GG9XmHg+1e4VxaebybsYn1/rbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:23:4e:e8:04:04:ed:8b:34:e0:88:74:91:39:52:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac
Validity
Not Before: Mar 2 20:00:29 2026 GMT
Not After : Mar 3 20:00:29 2026 GMT
Subject: CN=d18073e4d774078730801760c9f6efc264c6ffac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:e4:6c:c8:3e:b0:e7:66:c9:a4:40:b5:f8:
4b:68:90:69:ca:0c:fb:f3:c4:57:77:20:f3:95:c4:
c0:b8:a2:5d:d6:16:0b:4f:41:fe:bb:cb:14:aa:22:
c4:b5:82:2f:9c:97:ae:e6:bb:dd:b4:fa:aa:0f:6e:
0d:e2:47:17:57:d7:d5:68:08:de:63:e4:23:32:8e:
66:8b:fc:94:fc:27:81:43:bc:c1:4b:99:0d:2d:3b:
ad:d7:34:b2:6a:da:d1:08:53:65:50:41:78:65:08:
c3:2c:8e:e4:87:d2:f6:7e:e7:2d:24:f1:eb:34:18:
07:49:73:78:92:bf:ed:0f:7a:b2:e9:ec:86:2f:26:
a9:bc:52:21:c2:c3:b6:00:0c:cc:68:c8:22:1c:15:
4b:f3:1f:8b:49:8e:20:03:78:35:4f:eb:30:15:0b:
58:e0:7b:9f:98:11:d5:27:2f:aa:a3:22:6f:a4:1e:
45:44:64:f1:89:90:9a:31:9e:1a:cf:60:ad:4f:4a:
64:f1:c3:8c:e4:dc:f2:83:e7:3f:5d:e6:82:b7:72:
79:01:f2:29:ae:9a:c7:b5:31:91:94:5f:36:b6:e8:
39:64:84:2a:ef:39:94:f6:84:6b:34:3d:1e:74:3d:
43:80:9c:93:3d:55:78:fb:72:54:16:14:0d:99:dc:
52:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:80:73:E4:D7:74:07:87:30:80:17:60:C9:F6:EF:C2:64:C6:FF:AC
X509v3 Authority Key Identifier:
keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:13:a3:1b:e2:08:33:4c:27:aa:a2:bc:cf:a0:0e:39:a6:71:
f0:06:61:4a:41:b5:73:74:4f:ce:bd:37:f9:a9:8c:25:c0:a5:
88:24:92:8a:48:3a:16:34:aa:06:5d:c5:f7:cf:0c:0e:e7:76:
92:e0:61:9f:1f:01:bb:16:bb:e7:1f:b1:d4:2f:09:f0:85:d7:
61:f8:55:e5:5b:11:94:ba:88:eb:8e:6b:23:7b:28:67:72:14:
ac:9c:89:d5:c0:67:d4:81:bb:3b:b0:08:c3:55:ed:74:aa:d4:
ad:2b:e0:49:e1:0c:cf:5b:19:0a:26:86:c0:22:ac:d7:5d:16:
5c:fe:4c:5c:16:d9:80:c1:a8:92:55:80:08:21:3d:fc:ff:5c:
21:3e:95:af:9f:99:9c:4a:49:d8:ce:4d:14:ac:7c:70:05:92:
1c:25:40:a0:1e:ae:e4:ac:c1:4b:1a:b4:75:e8:af:1d:27:eb:
d5:a8:81:d2:fa:ea:fc:74:84:35:e0:1e:03:91:55:0d:2a:4b:
42:1d:c9:98:d9:c5:43:b1:51:c6:88:79:a9:05:c5:5d:45:d3:
f7:69:4f:12:01:19:ad:7d:a2:06:16:c2:88:56:44:d6:e2:e8:
76:d5:ba:c3:78:ca:02:58:6b:63:35:81:38:40:c2:e7:6b:24:
da:4d:d5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 06:56:36 2026 by rpki-client