Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
File: 0JTrDpiYeirfj5WgPnhlmRogGFU.mft (raw, json)
Hash identifier: B+KJJojxiTY5cbhh7VXJudnJPQVR3bTV3TK9Z3GZAcI=
Subject key identifier: 24:7D:D0:BA:99:D8:C8:79:8B:F4:0E:16:E9:00:A0:96:6E:37:FD:00
Authority key identifier: D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
Certificate issuer: /CN=d094eb0e98987a2adf8f95a03e7865991a201855
Certificate serial: 019D375249A68DFF0B3AA7DFB76BFB906CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 02:00:32 +0000
Manifest this update: Sun 29 Mar 2026 02:00:32 +0000
Manifest next update: Mon 30 Mar 2026 02:00:32 +0000
Files and hashes: 1: 0JTrDpiYeirfj5WgPnhlmRogGFU.crl (hash: ym9LSa1frAyEJGs4XOeOJIddJ7vxsVJSO+R8uGqBStg=)
2: gYB58AsOtwXPnPMNlPV8Y_Ufqsg.roa (hash: WyEGcdxX1fE4gxlSc9tIw2aO8N6fipj9ySbKblEWZfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:49:a6:8d:ff:0b:3a:a7:df:b7:6b:fb:90:6c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d094eb0e98987a2adf8f95a03e7865991a201855
Validity
Not Before: Mar 29 02:00:32 2026 GMT
Not After : Mar 30 02:00:32 2026 GMT
Subject: CN=247dd0ba99d8c8798bf40e16e900a0966e37fd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:82:ec:f7:96:90:1d:62:26:c1:4c:06:d5:
45:b8:8e:20:af:fa:6c:e8:53:12:a2:b8:86:c3:6e:
3c:c9:82:77:fb:dd:21:7f:1d:b3:d8:b3:19:e0:77:
35:7f:29:de:cb:44:86:74:8b:1f:48:50:7d:b7:d9:
bf:59:71:74:22:33:af:85:ff:d5:8c:2b:b7:27:02:
25:5c:e2:f8:13:92:d5:18:cc:a0:0a:b8:87:d5:91:
4e:a5:a1:65:85:40:1d:4a:eb:26:df:44:aa:73:64:
31:9c:c5:af:6c:9c:98:4c:67:9e:38:5c:5f:90:2e:
72:76:d1:51:f8:09:81:63:0d:2e:e0:80:7a:70:1d:
44:71:aa:64:89:95:10:76:b5:a1:ee:61:32:84:63:
b3:4d:cb:c1:95:e4:46:17:d5:4b:e7:c5:10:5d:df:
cf:0c:53:48:83:a7:7c:b6:6a:0a:79:6c:ba:a9:1f:
01:82:fe:9e:a4:5d:db:75:fd:b1:b7:df:45:1d:05:
81:c8:95:62:72:cf:48:5e:50:a4:72:97:f0:cc:3b:
f5:5f:85:9a:40:e1:8a:27:6b:5e:8c:64:e3:e5:75:
3e:c0:fa:26:56:64:b6:ba:e7:2c:b4:6a:a9:ea:0c:
55:ff:88:73:72:35:4f:bb:d3:63:10:17:ea:c8:c0:
25:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7D:D0:BA:99:D8:C8:79:8B:F4:0E:16:E9:00:A0:96:6E:37:FD:00
X509v3 Authority Key Identifier:
keyid:D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f4:6f:42:2c:ee:a3:d1:51:ab:72:07:40:f4:c9:44:40:ac:
58:11:01:ef:e9:d4:cb:d1:b0:9e:82:26:9a:6f:28:25:65:12:
96:a8:f6:e2:54:80:76:bf:57:8a:59:0f:42:06:33:c8:c6:ce:
be:ac:1b:a1:ea:2f:b5:cd:9f:0a:e9:b7:9f:3a:40:4d:2b:6c:
a2:9f:1b:bd:58:78:d7:7d:82:e9:bb:04:b2:82:1e:e6:57:9f:
e9:02:5b:5f:f9:22:a3:da:fd:19:d6:88:77:e7:95:bf:d4:82:
58:cd:bb:c5:b1:b6:d8:a0:a9:78:44:86:32:d6:8a:e8:8f:87:
be:cd:27:3b:d8:e5:1c:6c:1e:76:36:64:28:6f:77:00:99:49:
ff:af:fb:66:a0:b4:33:ae:74:7b:55:52:bf:c2:54:7c:88:1f:
60:f8:dd:0c:b5:14:88:b0:7d:f9:9d:9b:99:c4:52:8a:c9:cf:
7d:c8:db:41:73:3d:12:5e:77:8b:26:c4:9d:9f:8e:d7:28:8f:
91:69:01:38:73:72:33:6c:1d:41:b8:d0:ed:5d:24:4f:e1:2d:
64:5c:9c:01:8d:89:2e:4e:e5:82:cf:53:9f:81:60:ca:1a:05:
95:19:15:27:0a:00:5a:4b:23:4c:13:a1:11:f1:21:ae:bb:c8:
8b:49:1b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:18:33 2026 by rpki-client