Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
File: 0Jp_f91UoXzl4SpBgutlJHn511g.mft (raw, json)
Hash identifier: deCdFW8++W5Mh5DZ5zgUWY6ju3CKbeUertOf9j0VXew=
Subject key identifier: 66:92:66:BB:92:6D:1C:55:C8:73:0D:F2:35:A3:8A:22:00:4B:83:E2
Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
Certificate issuer: /CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Certificate serial: 019D3940B95C0FEADBE3437D3C5F44883042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
Manifest number: 1711
Signing time: Sun 29 Mar 2026 11:00:36 +0000
Manifest this update: Sun 29 Mar 2026 11:00:36 +0000
Manifest next update: Mon 30 Mar 2026 11:00:36 +0000
Files and hashes: 1: 0Jp_f91UoXzl4SpBgutlJHn511g.crl (hash: 3uqGuXve+SnB15dSRLaWrxOA0yHNDlKDL1P7zeBm4dc=)
2: 7eWcGeApexXCyJ5zpUATMUfIfjE.roa (hash: 25j7Y9KcJOf9q796TODAMGOZw8uhZj4cuQLUqDrqWiw=)
3: eh5f2bSFFBPtD-itI_yMFOKVNl8.roa (hash: 1eTnOvtuGR3xM5v0Vi+oWqoLUpmMh/7COfXsHBvYGt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b9:5c:0f:ea:db:e3:43:7d:3c:5f:44:88:30:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Validity
Not Before: Mar 29 11:00:36 2026 GMT
Not After : Mar 30 11:00:36 2026 GMT
Subject: CN=669266bb926d1c55c8730df235a38a22004b83e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a5:da:82:19:cc:1a:67:8c:00:99:06:e9:2d:
b3:f0:4a:a6:e3:50:20:2e:bc:95:68:b1:c7:d0:81:
c0:ba:51:ee:7e:cf:53:43:5a:dc:42:af:99:b3:26:
d9:7c:d3:45:f3:04:74:a8:70:b2:20:46:e6:37:6d:
89:bd:f9:67:1c:0f:be:79:94:1f:bb:7c:e2:35:3a:
38:6a:e6:40:f5:3d:a5:f1:68:38:7b:11:6a:9a:51:
1a:85:3d:3b:a7:7e:52:31:e4:d3:98:0c:70:5d:0a:
fa:5f:2d:c7:81:b3:f9:2a:b6:6d:34:f0:2d:e2:3d:
b5:ab:2a:e9:ad:ba:18:95:6d:88:1c:6f:97:00:c7:
4e:20:49:23:57:04:5c:b5:82:4f:d9:08:0b:0d:d5:
09:61:61:57:c4:ce:8d:b8:42:16:82:07:5d:c1:de:
7c:71:1b:fc:b0:50:c3:8c:06:e1:d1:2a:85:2e:1a:
d3:7b:6b:d2:aa:70:b6:43:86:c0:fc:fd:31:d3:56:
cc:61:6a:fb:9a:1b:84:46:0d:60:b3:32:59:a4:c0:
c1:53:53:80:09:52:91:b1:da:6a:89:d3:7c:75:9c:
08:10:3a:0a:34:0c:23:54:ed:b9:02:ce:99:f6:03:
d2:64:36:20:87:d6:48:11:42:53:39:37:8a:b0:1d:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:92:66:BB:92:6D:1C:55:C8:73:0D:F2:35:A3:8A:22:00:4B:83:E2
X509v3 Authority Key Identifier:
keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0a:c5:72:08:c5:e1:84:20:a5:fe:ba:11:79:26:0e:3d:4f:
0d:b1:0f:31:4a:9d:33:98:57:81:cc:74:df:31:a6:fb:eb:e4:
f4:2a:56:44:16:36:7d:f1:f2:fe:3b:4a:6e:27:2f:7b:9d:90:
55:12:55:f0:01:f2:0a:f9:b9:25:42:48:ab:15:49:23:f7:8b:
15:0a:48:7a:d2:92:97:3c:29:ab:3d:82:ef:26:ce:f2:14:1f:
8a:b3:f1:9c:e6:8a:69:2a:76:e1:b5:08:52:04:31:ac:c3:9c:
f5:cc:7b:8a:8e:05:f5:12:d0:c1:ee:ca:96:72:6f:7e:82:a1:
54:22:b0:3a:41:4e:9f:1b:d3:1f:85:58:be:b9:fe:e4:c4:f3:
04:c9:8c:f6:dc:1a:3c:82:9a:34:bc:1a:5a:2d:c5:af:b8:1b:
3f:bb:0e:4c:ad:7e:6d:93:9e:95:c9:a6:90:d7:17:84:48:e5:
59:19:bb:17:be:b8:ac:ba:5a:c9:21:0a:4f:55:cf:38:a4:ab:
09:e2:dc:e4:67:5b:11:a4:4f:4b:29:8f:e7:0d:3a:29:fd:4d:
bb:02:f8:23:54:58:a1:41:b8:7d:30:73:e0:08:ff:b1:e2:1c:
bc:50:a5:3a:25:c3:90:8a:44:70:31:f5:47:34:94:90:0b:76:
ae:d4:39:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:32 2026 by rpki-client