Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: tMDsHzYin/Rx+4GjHvLs3JtR2VAfoCkfhESsgnWAROU=
Subject key identifier: CB:FC:5E:60:74:F5:C8:25:26:E9:84:D1:60:9C:88:1C:66:B1:6A:EA
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 01A00101A62B621639094634A915F6C3F92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 1994
Signing time: Fri 14 Aug 2026 16:01:20 +0000
Manifest this update: Fri 14 Aug 2026 16:01:20 +0000
Manifest next update: Sat 15 Aug 2026 16:01:20 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: uMOiClyGaZ9f3CRP8sax2QsaTMdZkv+PCwtIf799ITU=)
2: aEPMVp6ZG-lfJdg7BUkYshYQ4L4.roa (hash: RQFlhaq+IvmsXYe3H4USUsgGJ+1VpvdgyBNJxMdfSfg=)
3: iZokYiXVlyx5GvNo1Dzn4LTps70.roa (hash: qi0aecrIUgmskCKuXu+osfwffjV8gg8iqbSuDQ82uKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:a6:2b:62:16:39:09:46:34:a9:15:f6:c3:f9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Aug 14 16:01:20 2026 GMT
Not After : Aug 15 16:01:20 2026 GMT
Subject: CN=cbfc5e6074f5c82526e984d1609c881c66b16aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0d:c7:7d:b5:ac:bc:92:ed:7b:e5:9a:2e:56:
78:56:db:b2:9d:b8:b2:2b:49:3f:a0:b5:e6:a9:06:
a2:ff:29:03:79:38:b5:71:12:eb:7d:54:bb:39:12:
78:17:a4:0c:cb:0b:a2:24:65:69:15:3b:11:74:91:
21:9f:c2:ba:3b:b3:51:30:02:46:22:01:5d:dd:b0:
42:32:d4:e8:5c:df:07:4d:95:7c:5b:fe:49:2f:21:
af:08:d4:03:5b:59:6b:43:ab:26:3b:2d:a3:96:66:
dc:c3:16:52:25:f4:bd:f6:7a:06:be:49:6d:18:88:
70:60:57:c9:af:c7:0c:ea:d5:e0:e4:cc:97:a2:77:
96:59:ae:38:c4:89:11:02:07:5c:b4:9c:3d:cc:0a:
93:a3:e2:24:94:21:17:63:ad:04:d8:c1:91:34:f9:
e4:79:4e:d6:7e:e1:b7:57:ba:0d:59:d4:fe:fa:5d:
d0:65:d6:28:5e:44:ef:72:76:01:b5:72:87:c5:a0:
46:89:61:c3:8f:72:c5:f4:bb:ae:e9:2e:75:b7:2a:
16:5e:e4:3a:1d:5f:6f:f8:14:c0:5c:36:83:c1:0a:
9d:3c:c0:8f:82:61:6d:0b:68:8e:2f:78:e3:96:07:
05:95:59:89:6d:fe:bf:d4:f1:cb:40:90:87:94:2e:
18:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FC:5E:60:74:F5:C8:25:26:E9:84:D1:60:9C:88:1C:66:B1:6A:EA
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:74:a5:94:9f:2e:c3:78:27:d6:12:c6:1a:3b:26:85:05:9b:
d3:43:1f:69:1a:8b:66:e6:a5:43:d0:5d:34:3b:4a:c6:56:4e:
e0:29:8e:52:88:b6:9f:f7:9b:38:a0:af:2b:c5:09:7f:a2:07:
4d:76:48:49:d2:14:f5:bf:bd:e3:84:9c:37:81:eb:c5:e2:d5:
82:ba:ce:0e:c9:99:69:68:5c:ae:2b:24:c4:78:70:51:4f:4c:
ca:42:64:61:0e:ef:a5:dc:37:e2:8c:6b:0f:66:90:49:e8:39:
a6:5d:bb:7c:8c:82:2f:9d:89:83:4b:fc:2f:b9:2f:83:d7:d7:
20:ac:07:b9:b5:fc:00:9a:57:7a:e6:7c:cf:19:41:74:f4:ee:
38:57:dc:82:46:64:89:8d:70:d2:ec:d9:dc:47:fe:a7:bb:f2:
05:4d:19:54:64:8e:3e:61:51:4b:81:c2:e4:32:68:b5:90:6b:
04:31:c7:53:14:5f:37:e3:0b:fe:0c:1d:b8:0e:ba:01:cc:ff:
8c:69:9e:95:fb:1e:fa:5b:28:c3:fd:53:26:8e:e2:2e:e6:ce:
1d:b7:41:e0:a1:a5:2a:71:3c:73:9c:72:2d:b8:12:29:2f:01:
67:02:ed:0c:bb:10:63:b9:92:4c:74:e8:26:22:57:ed:6f:91:
6a:81:74:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:37 2026 by rpki-client