Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
File: 0jbg4txaKEOOMOv9HWpqlNs9HEA.mft (raw, json)
Hash identifier: HHP/pXDsfZs3w8bbxpa04Ld2yunQqJ2++yc0NVbPQQw=
Subject key identifier: 24:C2:19:14:C1:76:07:93:D6:52:52:2E:D0:44:02:F1:24:85:D1:9C
Authority key identifier: D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40
Certificate issuer: /CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40
Certificate serial: 019E3184E5163EA223E3EFAE42BD4B1143CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
Manifest number: 138A
Signing time: Sat 16 May 2026 16:00:53 +0000
Manifest this update: Sat 16 May 2026 16:00:53 +0000
Manifest next update: Sun 17 May 2026 16:00:53 +0000
Files and hashes: 1: 0jbg4txaKEOOMOv9HWpqlNs9HEA.crl (hash: V3XdpTtqTG+gy/Rwy50igTMTVM5GgxOJvZUynU021xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:84:e5:16:3e:a2:23:e3:ef:ae:42:bd:4b:11:43:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40
Validity
Not Before: May 16 16:00:53 2026 GMT
Not After : May 17 16:00:53 2026 GMT
Subject: CN=24c21914c1760793d652522ed04402f12485d19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:db:68:a1:60:44:33:3c:ae:11:33:c6:fd:
54:55:20:bc:3f:d3:f3:d2:b3:c3:1e:42:32:ef:c5:
3a:e3:7f:1c:2a:a6:58:a0:24:b3:6d:59:66:41:1b:
3f:5d:6b:bc:46:46:f4:da:9e:35:6c:06:3d:b2:9f:
a5:46:bc:9d:f6:f2:f1:ab:4d:c9:32:f3:19:73:29:
25:f9:44:c0:1c:a8:a4:10:32:a9:54:ad:a8:ac:cd:
20:b3:c3:b3:0e:2b:bc:cd:89:11:5b:93:de:45:f6:
d0:44:5a:ab:38:f7:59:75:bb:a7:13:cf:a7:14:bb:
44:a2:e0:53:4a:5c:8c:9d:c4:bc:be:4e:5e:e7:1a:
49:2f:e2:21:d1:d4:76:76:c5:c1:28:3b:00:9b:65:
19:8e:d3:ec:b1:7b:79:d2:34:dd:23:96:2a:26:36:
62:f3:7b:f1:ec:c0:a5:4d:6d:35:5a:0a:ad:8f:ef:
69:00:c3:11:57:b8:b3:e4:9b:ac:29:37:ee:63:ca:
46:be:4b:39:36:17:44:16:0f:47:55:55:de:16:03:
12:e2:0d:9f:ab:70:ce:b3:e6:6a:c4:46:e8:8b:78:
18:15:4a:52:69:74:01:bb:9a:1c:0b:8a:3b:bf:c7:
94:36:bd:7e:1f:42:eb:28:6d:d5:a4:b5:c1:12:ad:
a2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C2:19:14:C1:76:07:93:D6:52:52:2E:D0:44:02:F1:24:85:D1:9C
X509v3 Authority Key Identifier:
keyid:D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:49:61:10:36:f4:7f:2a:23:6c:b0:9b:44:16:4d:71:5c:27:
f2:a6:5b:71:25:e1:5a:ea:74:a1:51:ed:24:b9:0d:a2:38:45:
72:fb:bd:a5:93:a4:4b:ac:74:5f:56:4e:39:ce:b9:87:2e:b7:
3d:de:95:07:90:fa:9f:79:e5:8a:36:aa:4e:8e:6e:a8:9d:ea:
ed:9c:0f:fc:1f:90:ee:c6:de:56:08:de:9d:4f:c1:43:3e:7e:
9c:42:b5:d1:57:63:e0:15:cf:3f:a9:2f:b9:f6:c3:a2:7c:1c:
a0:68:4a:7a:fc:e2:22:18:7d:28:04:f1:29:61:a3:f2:62:f3:
83:1b:f9:21:7e:d9:1b:10:7a:2b:4e:e4:e8:21:d8:52:8c:01:
0a:3e:0a:0b:6c:4c:62:d3:33:4e:41:c3:8a:47:3c:c8:bc:00:
30:eb:d2:84:19:f9:31:6b:6d:18:82:b8:30:91:22:0c:ed:98:
37:f5:a4:2d:70:e6:71:2d:1d:04:29:9f:0a:83:a4:96:84:4f:
93:ed:c3:23:a4:13:1b:2f:85:c8:0c:f0:02:1a:db:8e:72:5f:
eb:6a:bf:2b:4d:1c:ca:64:51:9e:b5:0d:38:58:48:3d:5f:6b:
17:39:94:2c:37:b2:65:73:f9:d3:ca:0e:49:0f:cb:15:df:18:
44:c1:01:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:41:34 2026 by rpki-client