Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
File: 0jtkd-HIT1KQfNYMY-qD715Kx4I.mft (raw, json)
Hash identifier: veSdvv0Z/szPKrCrl1iDNddoyjjUMKsKHSYjoyo4YIE=
Subject key identifier: 40:EE:89:B1:AD:AD:DD:0F:1D:00:86:BB:BD:90:02:3C:24:B1:6F:4E
Authority key identifier: D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
Certificate issuer: /CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Certificate serial: 01A13CA551F0D40F031C4C386776C45D1C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
Manifest number: 0DF0
Signing time: Wed 14 Oct 2026 23:00:29 +0000
Manifest this update: Wed 14 Oct 2026 23:00:29 +0000
Manifest next update: Thu 15 Oct 2026 23:00:29 +0000
Files and hashes: 1: 0jtkd-HIT1KQfNYMY-qD715Kx4I.crl (hash: 1+M3FGsTYA5fXzuOBcx8hrcbfhcVjl9X0SDzLPzpwds=)
2: u74Y2DtNYCrFLzeUZsDA2ek1RJQ.roa (hash: v4D4CGF7IK7jFQI/k7wDX6FIFSnqg7cuKSN4Jo5u5mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:51:f0:d4:0f:03:1c:4c:38:67:76:c4:5d:1c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Validity
Not Before: Oct 14 23:00:29 2026 GMT
Not After : Oct 15 23:00:29 2026 GMT
Subject: CN=40ee89b1adaddd0f1d0086bbbd90023c24b16f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7c:d1:46:4d:3e:34:ad:b0:59:4d:1d:0c:ae:
d0:4e:63:03:1e:99:28:7f:b1:f0:a9:82:a3:ab:d6:
6a:62:12:80:de:c8:0e:cf:ec:9f:a4:10:e2:4e:68:
30:d4:7e:aa:1e:0f:e8:fd:d0:97:a2:ff:c1:ef:f4:
0c:5a:88:70:54:51:30:5b:13:78:3f:61:c0:ab:47:
b5:90:4f:f0:83:26:56:db:5c:b5:92:93:00:94:3b:
8f:6e:11:2b:19:af:98:a8:92:7a:28:01:6b:1c:f3:
6d:73:a9:ea:2f:e4:d0:77:5e:8a:81:d9:18:ae:5a:
fd:b5:05:31:60:0c:ba:b8:8e:42:1e:23:fd:8f:bd:
f7:5b:66:01:5c:23:3a:c6:92:4f:b2:c9:f8:c7:a3:
23:51:c2:c9:9b:64:e2:50:fd:e9:ab:e9:be:33:74:
5e:2b:ab:05:7d:20:01:14:c6:cc:f9:a4:04:88:a3:
0b:e7:29:72:7d:c5:01:6a:65:19:4b:82:53:09:0c:
65:c8:db:4a:af:a6:da:dc:1f:dd:46:34:be:8d:9c:
2f:2e:b0:cb:f2:b4:d9:ca:5c:a4:c0:78:ff:0f:05:
22:25:5c:4d:62:75:92:f1:b4:1e:a5:0e:84:80:3c:
5e:b2:0b:ef:d5:40:e0:c9:bc:52:ac:91:84:76:b5:
de:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EE:89:B1:AD:AD:DD:0F:1D:00:86:BB:BD:90:02:3C:24:B1:6F:4E
X509v3 Authority Key Identifier:
keyid:D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1f:39:b2:8d:cb:98:d8:e2:e5:2f:c1:66:85:f3:2a:2d:4e:
90:a7:bc:f0:c9:28:c4:5f:21:3c:8a:32:62:2b:93:aa:2d:61:
4b:65:95:bb:53:40:a6:74:32:52:87:a9:53:86:e1:4c:89:0d:
ab:f6:e0:f0:2c:2c:15:c6:6c:d1:f5:f2:75:12:31:46:9f:be:
00:68:a1:35:c0:23:cb:54:15:eb:9a:51:40:fa:84:22:8b:db:
e0:b4:2e:26:96:99:1e:d8:a8:a0:45:29:45:bb:e7:3a:f9:71:
9e:fe:94:4f:7c:81:25:2e:6c:db:19:14:94:3e:f4:02:4e:2d:
74:2f:06:3c:c1:1f:2a:d0:02:0e:31:54:ac:1a:ca:bd:c3:61:
58:aa:2e:7e:9f:82:dc:37:37:7f:03:a1:fe:b4:07:91:75:d1:
42:63:5e:29:ca:af:9e:e9:ed:fe:ff:01:19:f4:0d:61:f9:96:
7a:b7:af:95:04:dc:2e:7a:fc:00:e5:f8:74:b3:aa:ff:ee:09:
16:c1:3b:fd:b7:0d:10:44:af:c3:48:e6:29:0f:af:00:48:76:
be:57:fc:69:6f:d4:74:c7:d8:0f:31:cd:23:a7:a6:8c:22:37:
79:80:66:30:c5:13:d1:d1:50:b1:a0:01:02:25:13:fb:12:a5:
e8:36:0c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:14:44 2026 by rpki-client