Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: EHBsyS9Cbuyx7MvtmldXnWTF/AsVlSucBzTT0mzABr0=
Subject key identifier: 3D:F6:22:4D:3A:E1:B1:AE:20:2F:D0:6B:EF:7C:DE:79:E8:80:A7:60
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 019F1943D98E1F652962789367BE1276B091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 191C
Signing time: Tue 30 Jun 2026 16:01:44 +0000
Manifest this update: Tue 30 Jun 2026 16:01:44 +0000
Manifest next update: Wed 01 Jul 2026 16:01:44 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: 8zzHpCORiSeEAVxXoXuMuNTOfG4rW54MPOaxVSO3wSU=)
2: aEPMVp6ZG-lfJdg7BUkYshYQ4L4.roa (hash: RQFlhaq+IvmsXYe3H4USUsgGJ+1VpvdgyBNJxMdfSfg=)
3: iZokYiXVlyx5GvNo1Dzn4LTps70.roa (hash: qi0aecrIUgmskCKuXu+osfwffjV8gg8iqbSuDQ82uKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:d9:8e:1f:65:29:62:78:93:67:be:12:76:b0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Jun 30 16:01:44 2026 GMT
Not After : Jul 1 16:01:44 2026 GMT
Subject: CN=3df6224d3ae1b1ae202fd06bef7cde79e880a760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:8b:f7:ea:0c:c4:7e:6a:93:89:05:32:29:
99:94:8d:b9:04:c8:2c:d0:94:ff:47:1f:c9:46:de:
15:f6:37:7e:18:61:1a:10:d5:2f:29:9e:e7:3b:5e:
59:7e:ff:88:e2:e4:39:57:66:ba:8b:24:88:6a:21:
8b:4a:ec:fe:95:9e:37:ae:fa:6b:76:5b:c4:82:76:
43:b9:1d:eb:e1:53:4d:a2:93:51:11:3d:b1:cd:f9:
f1:84:ae:a5:e3:19:73:07:9b:00:34:2f:3e:69:86:
d3:c2:9e:71:a5:d1:c2:30:95:89:09:29:b4:09:4d:
b6:5a:df:1c:ea:b1:6b:87:82:4f:9b:c4:89:93:c0:
28:6a:05:46:8b:ba:9b:06:cd:b7:2c:e1:0f:99:0b:
2a:0d:bc:ec:6a:ee:ff:0f:ea:e9:ea:3b:1e:2f:02:
76:a8:ff:3c:ea:e7:70:cf:ae:d0:00:f8:75:9d:70:
ac:6d:bf:f3:e0:63:22:38:4e:63:44:1c:94:18:42:
80:9e:44:70:ab:40:a5:23:c5:73:46:69:b0:b9:c3:
6d:25:c7:23:c5:b9:c6:1e:ac:18:a5:0b:b7:8c:b5:
d3:22:07:b7:00:45:d7:78:9a:36:91:91:84:8d:af:
f5:9b:4c:4d:09:8c:07:b4:85:92:20:c0:1c:f9:6f:
1d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F6:22:4D:3A:E1:B1:AE:20:2F:D0:6B:EF:7C:DE:79:E8:80:A7:60
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:68:60:e5:8b:e3:16:e3:d8:4c:94:e2:7e:4c:a5:40:6b:62:
9d:66:8f:ff:39:47:24:4c:00:18:c3:78:32:b7:e2:62:aa:33:
05:a5:c4:61:be:a1:d0:1d:1c:12:5b:f8:cf:7d:94:cb:76:67:
3d:30:55:c8:a5:35:c5:6e:82:83:d7:90:db:39:4b:56:26:bd:
7e:de:ca:74:a2:1b:70:ea:5a:b2:a6:66:9b:05:bd:ac:e1:35:
14:6c:25:c6:b4:d8:2e:94:f4:da:ce:60:70:76:98:c4:bc:c6:
f0:a4:e4:00:52:c5:1d:13:71:e1:42:c6:b7:a6:fb:74:ec:e4:
8d:d8:10:b3:8c:54:05:a4:41:ea:fe:92:e8:38:b7:46:aa:09:
ed:e8:37:5e:7f:03:7e:d8:f7:ce:3c:fe:79:73:8b:58:76:fe:
24:4f:d9:1c:b2:6a:9d:68:0a:a4:bc:9e:3b:e6:54:60:3f:9e:
e0:aa:cd:15:c3:5d:95:eb:e2:ab:70:79:79:5b:d1:21:19:23:
b3:71:92:55:6d:72:94:ea:c4:dd:f9:98:f3:2b:f8:ac:4f:89:
4a:dc:9e:13:67:4e:b4:f5:41:35:6f:91:57:b0:28:2b:5d:0e:
cc:b4:58:7a:81:2d:7f:64:7c:e5:e5:a1:fc:cb:eb:02:a6:b9:
25:50:6c:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQ9mOH2UpYniTZ74SdrCRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzcwODA5OWY3YTIwNTU2NGI1ZjhlMDVkMjE3YmQyZmFl
NGRlODgwHhcNMjYwNjMwMTYwMTQ0WhcNMjYwNzAxMTYwMTQ0WjAzMTEwLwYDVQQD
EygzZGY2MjI0ZDNhZTFiMWFlMjAyZmQwNmJlZjdjZGU3OWU4ODBhNzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp6L9+oMxH5qk4kFMimZlI25BMgs
0JT/Rx/JRt4V9jd+GGEaENUvKZ7nO15Zfv+I4uQ5V2a6iySIaiGLSuz+lZ43rvpr
dlvEgnZDuR3r4VNNopNRET2xzfnxhK6l4xlzB5sANC8+aYbTwp5xpdHCMJWJCSm0
CU22Wt8c6rFrh4JPm8SJk8AoagVGi7qbBs23LOEPmQsqDbzsau7/D+rp6jseLwJ2
qP886udwz67QAPh1nXCsbb/z4GMiOE5jRByUGEKAnkRwq0ClI8VzRmmwucNtJccj
xbnGHqwYpQu3jLXTIge3AEXXeJo2kZGEja/1m0xNCYwHtIWSIMAc+W8dqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD32Ik064bGuIC/Qa+983nnogKdgMB8GA1UdIwQY
MBaAFNI3CAmfeiBVZLX44F0he9L65N6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMWI1YWYtYjc3Ny00YjU5LWE1YjIt
NWU5N2Y0YTUxMmU1LzEvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8wMWI1YWYtYjc3Ny00YjU5LWE1YjItNWU5N2Y0YTUxMmU1
LzEvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGhg5Yvj
FuPYTJTifkylQGtinWaP/zlHJEwAGMN4MrfiYqozBaXEYb6h0B0cElv4z32Uy3Zn
PTBVyKU1xW6Cg9eQ2zlLVia9ft7KdKIbcOpasqZmmwW9rOE1FGwlxrTYLpT02s5g
cHaYxLzG8KTkAFLFHRNx4ULGt6b7dOzkjdgQs4xUBaRB6v6S6Di3RqoJ7eg3Xn8D
ftj3zjz+eXOLWHb+JE/ZHLJqnWgKpLyeO+ZUYD+e4KrNFcNdleviq3B5eVvRIRkj
s3GSVW1ylOrE3fmY8yv4rE+JStyeE2dOtPVBNW+RV7AoK10OzLRYeoEtf2R85eWh
/MvrAqa5JVBsvA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:31 2026 by rpki-client