Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
File: 0Jp_f91UoXzl4SpBgutlJHn511g.mft (raw, json)
Hash identifier: cXaSSMyRviNPyLdbiUlSZXRBc4eLWM+7s8WGgNXgUQU=
Subject key identifier: 43:DB:7D:6A:E1:C5:4A:F2:BA:8C:E9:C8:17:B3:7C:63:54:CD:56:45
Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
Certificate issuer: /CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Certificate serial: 019F3339E99781B09D0E208869FB1C09A239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
Manifest number: 1817
Signing time: Sun 05 Jul 2026 17:01:01 +0000
Manifest this update: Sun 05 Jul 2026 17:01:01 +0000
Manifest next update: Mon 06 Jul 2026 17:01:01 +0000
Files and hashes: 1: 0Jp_f91UoXzl4SpBgutlJHn511g.crl (hash: wWJw5cOsAUY1pE/9IiyNtVOWD3W1sEhU0Yf/ARnEgqw=)
2: 7eWcGeApexXCyJ5zpUATMUfIfjE.roa (hash: 25j7Y9KcJOf9q796TODAMGOZw8uhZj4cuQLUqDrqWiw=)
3: eh5f2bSFFBPtD-itI_yMFOKVNl8.roa (hash: 1eTnOvtuGR3xM5v0Vi+oWqoLUpmMh/7COfXsHBvYGt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 15:46:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:33:39:e9:97:81:b0:9d:0e:20:88:69:fb:1c:09:a2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Validity
Not Before: Jul 5 17:01:01 2026 GMT
Not After : Jul 6 17:01:01 2026 GMT
Subject: CN=43db7d6ae1c54af2ba8ce9c817b37c6354cd5645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:38:c8:78:1c:ce:6c:13:57:14:f9:40:d3:d4:
ac:fe:2f:b1:fd:3b:64:13:f4:32:9d:fa:82:d5:cd:
3d:28:9e:ee:7c:26:79:5f:03:eb:06:c0:c5:58:ee:
1d:d2:7d:2b:00:57:b7:83:26:f8:57:d5:6e:be:15:
6d:64:89:58:af:e1:47:7a:d5:80:2a:46:a3:14:92:
52:fe:3d:50:8f:5b:1e:36:3e:78:9c:d3:b0:33:2f:
e9:db:bd:9a:70:c4:e0:59:3e:94:d5:32:44:5e:d7:
06:22:5f:4f:b0:54:6b:1b:a2:69:36:af:ef:e9:b2:
a9:f1:21:58:c4:2c:af:75:8c:35:02:37:22:c3:13:
99:db:7b:33:d7:96:2e:04:52:cb:db:54:60:33:6b:
3c:bf:cc:fc:15:30:bd:8c:a4:b5:d2:91:1e:e1:9e:
ad:3e:ea:f9:ef:0f:b6:8b:57:94:77:90:dc:ff:e4:
ac:78:9a:e8:d2:f4:69:21:63:40:5c:7f:85:c4:c5:
f1:17:c7:a3:ab:e4:d6:03:39:59:90:e6:85:ba:0c:
f4:2a:01:28:1c:77:6f:9c:bc:6e:84:94:2f:57:e2:
5d:11:09:1e:63:19:7f:14:67:09:a7:12:bd:e3:b9:
f4:90:71:9f:e7:c7:36:0d:0f:00:ff:9c:92:92:49:
79:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DB:7D:6A:E1:C5:4A:F2:BA:8C:E9:C8:17:B3:7C:63:54:CD:56:45
X509v3 Authority Key Identifier:
keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:22:a1:b8:51:6a:67:7d:01:3f:e0:db:fe:ec:d6:ad:e6:cc:
8b:40:bf:64:00:8d:2f:fe:9a:fe:86:57:fb:b6:ed:9a:ca:c7:
5a:85:98:55:cc:da:da:2b:d3:76:ce:ee:fe:af:bd:56:42:68:
76:b6:8c:53:82:5c:19:30:b2:0b:20:3d:ea:ba:93:17:e6:80:
1b:9d:c2:3d:43:39:c0:1b:22:4d:55:ec:ab:04:98:45:09:82:
9c:19:68:a9:11:26:96:07:f0:3d:5a:9a:2f:17:57:29:0e:d1:
96:20:e3:14:c9:2c:cc:23:5c:2b:93:3d:59:57:e9:48:1a:0d:
d9:f5:61:73:fe:a0:b2:77:bb:2c:b6:75:c8:04:35:1b:b6:77:
14:91:0a:2a:b6:78:e1:33:b9:81:45:14:3e:97:68:3b:aa:d9:
6c:10:24:a0:24:8b:85:cf:bf:11:c0:9a:c5:11:ee:4e:f6:27:
5a:85:eb:8a:84:b5:54:6e:2d:05:10:5e:89:bc:62:e2:22:27:
73:dc:c1:a0:70:e0:4a:0f:2f:42:19:90:1f:da:fd:ff:b9:d2:
8b:d6:9e:fe:1d:72:b6:0e:7a:a8:36:c5:e9:e8:42:8f:97:e2:
d3:9a:60:d7:69:b3:27:00:a4:68:90:87:ee:f5:0e:75:b9:10:
c9:96:b3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 20:00:10 2026 by rpki-client