Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: mcSzfYgiagLys8MQ4HHEoroKpJ9tKKALn7k3uEtfFfY=
Subject key identifier: D6:07:CC:B8:E4:7F:26:2D:11:B8:40:24:CE:92:45:8F:82:D6:04:2A
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 01A12A68FF70C15CEB43E5D9693D9F563C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 1A2E
Signing time: Sun 11 Oct 2026 10:01:26 +0000
Manifest this update: Sun 11 Oct 2026 10:01:26 +0000
Manifest next update: Mon 12 Oct 2026 10:01:26 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: 5Aw551DOYq/tQUi1am+1aLc63W0Netj0ZmpPn1bQvfU=)
2: aEPMVp6ZG-lfJdg7BUkYshYQ4L4.roa (hash: RQFlhaq+IvmsXYe3H4USUsgGJ+1VpvdgyBNJxMdfSfg=)
3: iZokYiXVlyx5GvNo1Dzn4LTps70.roa (hash: qi0aecrIUgmskCKuXu+osfwffjV8gg8iqbSuDQ82uKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:68:ff:70:c1:5c:eb:43:e5:d9:69:3d:9f:56:3c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Oct 11 10:01:26 2026 GMT
Not After : Oct 12 10:01:26 2026 GMT
Subject: CN=d607ccb8e47f262d11b84024ce92458f82d6042a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:28:23:67:da:2e:0c:5d:7b:10:2c:02:e1:7e:
c5:d0:8f:9d:d7:a8:de:b9:c7:a9:ff:95:f9:0c:33:
5e:e3:84:d5:be:cf:fc:a1:93:11:00:51:58:5a:cc:
59:db:dd:83:78:8b:85:23:50:a3:4f:53:a6:02:43:
ec:74:8d:c1:7b:3e:27:f4:a4:61:30:bf:17:1d:e5:
97:0f:0c:69:3b:a5:98:45:ee:8c:95:37:dd:0c:fc:
2f:f0:e1:80:e0:f4:ba:71:09:56:6e:54:a9:5d:a0:
19:cb:db:af:6a:7a:22:32:3f:c8:2d:20:98:28:8c:
5e:a1:6e:79:a7:b9:c6:c6:ec:e8:92:a1:45:da:b2:
f9:fb:1c:8b:9f:01:2a:75:29:ee:17:e2:84:79:d3:
1d:b3:c3:21:b8:3e:e7:d0:ab:ed:83:fb:11:91:a5:
07:10:12:50:e1:5e:9e:fe:4c:34:49:aa:d5:ed:4d:
a0:ca:1e:8f:b4:9c:db:43:c5:95:9f:19:ce:88:4f:
6f:23:8d:96:ab:85:de:e2:ea:6e:42:f5:d7:5b:88:
32:46:bf:3e:a2:a4:d5:06:4a:a2:4a:3d:f7:e0:c8:
07:28:da:d0:7c:8f:0b:ea:d5:bf:38:24:51:d5:79:
6b:e9:f9:31:31:50:a6:ab:b1:52:4b:38:31:de:57:
b0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:07:CC:B8:E4:7F:26:2D:11:B8:40:24:CE:92:45:8F:82:D6:04:2A
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d8:1d:d8:fd:76:8e:a8:2f:04:9b:b5:a0:19:b3:4e:bb:b1:
b3:53:2f:db:11:eb:67:bf:30:0a:1a:2f:c1:7f:33:8a:9c:d0:
e7:11:52:09:b5:f7:09:35:c1:ae:d6:a8:eb:ad:0e:e6:aa:39:
8c:ec:cc:44:54:a5:1f:39:fc:7e:fc:0d:2c:e5:2d:92:d5:24:
09:73:98:5b:76:c3:3f:d5:e6:34:a5:d6:69:0f:c4:d6:37:be:
b3:92:db:9a:28:07:33:2e:74:50:af:5a:20:fc:53:58:60:3f:
dd:80:36:cd:ba:c2:c7:3a:13:b3:d3:a1:b0:99:d7:f3:fc:70:
c0:b8:7b:a7:5d:f3:90:40:03:11:a1:90:41:5d:a0:ac:42:22:
8f:74:e2:e0:c3:2a:f1:a0:de:1d:50:c0:e9:cd:2d:0a:0b:db:
66:cb:5d:58:1c:6a:5b:42:c4:a4:aa:86:f8:7d:ee:7d:f3:c8:
57:54:14:59:d5:c9:e0:3e:2d:91:44:73:f8:f8:c6:a1:5b:37:
12:d3:39:9d:67:03:a2:d6:8f:cb:28:24:f7:c4:4c:91:48:39:
1d:77:dc:5d:ef:9e:f8:97:1b:7d:02:59:02:82:ed:91:a3:c6:
99:3e:4f:99:5d:65:9e:a2:a5:50:50:1c:3a:33:6f:0d:5c:f6:
62:b7:35:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:10:09 2026 by rpki-client