Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: OceizG0OH6O0bJzrtF0tX5A/X7Zq9v7BUjeS5RA9txw=
Subject key identifier: 8A:AF:96:BB:48:C6:55:D8:0C:60:16:75:12:E3:6A:C6:15:A4:B0:05
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 019E2F976E0B6165C4EB785934D6C5CF50C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 18A3
Signing time: Sat 16 May 2026 07:01:53 +0000
Manifest this update: Sat 16 May 2026 07:01:53 +0000
Manifest next update: Sun 17 May 2026 07:01:53 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: OjP2RgfoZyy/9y6ra9JOISfe+jJs20gXiDn5McG7E0k=)
2: aEPMVp6ZG-lfJdg7BUkYshYQ4L4.roa (hash: RQFlhaq+IvmsXYe3H4USUsgGJ+1VpvdgyBNJxMdfSfg=)
3: iZokYiXVlyx5GvNo1Dzn4LTps70.roa (hash: qi0aecrIUgmskCKuXu+osfwffjV8gg8iqbSuDQ82uKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:6e:0b:61:65:c4:eb:78:59:34:d6:c5:cf:50:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: May 16 07:01:53 2026 GMT
Not After : May 17 07:01:53 2026 GMT
Subject: CN=8aaf96bb48c655d80c60167512e36ac615a4b005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:dd:78:5a:2f:de:b0:7f:c1:ef:79:e5:a7:86:
62:0d:c3:5c:b5:cc:f5:a2:f4:2b:3d:10:97:5a:30:
4d:c5:97:94:8d:6e:e3:93:b2:31:cd:6e:68:18:e8:
fe:6c:86:45:39:6c:4f:91:0c:ee:03:5f:2b:8c:8e:
21:84:a0:ee:10:18:59:13:ec:8a:cd:53:d6:30:4d:
00:4b:5e:8c:c8:00:6c:07:9b:c2:44:e4:85:38:3d:
c1:15:b3:90:b4:20:a0:6c:8d:c4:96:09:15:01:be:
42:02:19:3d:bf:32:74:27:1c:80:6a:b8:0f:e8:8a:
06:2c:3d:55:86:15:cd:69:39:d8:93:d1:c1:87:60:
87:51:80:c3:f6:ce:7c:39:5d:28:b1:64:48:c0:1a:
61:33:bc:cd:9d:dd:cf:71:c7:ca:dc:38:c5:6a:8f:
53:24:ae:72:d0:e0:6f:a0:f9:95:4a:aa:74:9d:dc:
fe:ea:02:d0:23:be:ac:5e:1e:30:31:a4:56:ec:b3:
56:f1:35:34:8c:4b:d8:aa:58:c6:6d:5c:e8:92:6b:
53:8f:f2:41:50:a8:ad:04:05:78:b3:58:2a:30:02:
df:2c:e4:03:1e:36:6a:87:07:ea:78:d0:cb:0d:59:
6d:2f:9b:75:03:6a:03:1c:ca:58:c1:ff:f2:1a:f1:
cd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AF:96:BB:48:C6:55:D8:0C:60:16:75:12:E3:6A:C6:15:A4:B0:05
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:87:bb:89:74:54:4d:6a:e3:56:29:86:5f:36:06:a5:e7:ad:
5c:60:bd:8b:16:ee:7d:c0:eb:84:c1:ef:ec:d3:54:84:0b:73:
07:c2:cc:40:19:b9:ae:21:51:c0:24:b3:a4:ba:50:db:ad:b4:
79:90:3b:74:8b:76:ff:70:9c:15:a0:d5:0f:e3:67:d9:ba:a6:
47:ba:13:bd:ae:1b:9f:8a:2b:20:4d:5f:bc:a3:47:22:fd:b3:
b4:ba:85:6d:69:58:cc:20:14:0d:c7:cc:06:4f:c3:4c:e6:fc:
9f:99:a6:08:ff:51:6b:83:eb:14:b5:28:0c:a7:9e:85:e1:50:
40:17:92:05:91:8a:ee:22:3b:f4:9a:22:c5:1c:3d:26:ce:61:
ad:eb:87:75:92:2d:e1:11:dd:0a:28:4c:34:c9:79:00:ee:f7:
2c:6d:49:6b:d3:db:23:85:46:32:de:c7:b0:8b:06:bb:84:1e:
0b:95:fb:c3:a7:5c:fa:e9:05:c8:70:85:4a:bc:79:e5:f2:f8:
92:f6:50:68:8f:f0:c6:0d:76:64:be:cb:1c:e4:36:bb:79:18:
6e:f8:17:5d:3e:ce:0d:f9:c9:51:97:e0:34:a9:a0:4c:00:33:
47:45:90:46:74:b0:1b:84:e7:4c:69:bc:76:55:93:03:bc:1a:
de:24:98:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vl24LYWXE63hZNNbFz1DHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzcwODA5OWY3YTIwNTU2NGI1ZjhlMDVkMjE3YmQyZmFl
NGRlODgwHhcNMjYwNTE2MDcwMTUzWhcNMjYwNTE3MDcwMTUzWjAzMTEwLwYDVQQD
Eyg4YWFmOTZiYjQ4YzY1NWQ4MGM2MDE2NzUxMmUzNmFjNjE1YTRiMDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5d14Wi/esH/B73nlp4ZiDcNctcz1
ovQrPRCXWjBNxZeUjW7jk7IxzW5oGOj+bIZFOWxPkQzuA18rjI4hhKDuEBhZE+yK
zVPWME0AS16MyABsB5vCROSFOD3BFbOQtCCgbI3ElgkVAb5CAhk9vzJ0JxyAargP
6IoGLD1VhhXNaTnYk9HBh2CHUYDD9s58OV0osWRIwBphM7zNnd3PccfK3DjFao9T
JK5y0OBvoPmVSqp0ndz+6gLQI76sXh4wMaRW7LNW8TU0jEvYqljGbVzokmtTj/JB
UKitBAV4s1gqMALfLOQDHjZqhwfqeNDLDVltL5t1A2oDHMpYwf/yGvHNHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqvlrtIxlXYDGAWdRLjasYVpLAFMB8GA1UdIwQY
MBaAFNI3CAmfeiBVZLX44F0he9L65N6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMWI1YWYtYjc3Ny00YjU5LWE1YjIt
NWU5N2Y0YTUxMmU1LzEvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8wMWI1YWYtYjc3Ny00YjU5LWE1YjItNWU5N2Y0YTUxMmU1
LzEvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6Ye7iXRU
TWrjVimGXzYGpeetXGC9ixbufcDrhMHv7NNUhAtzB8LMQBm5riFRwCSzpLpQ2620
eZA7dIt2/3CcFaDVD+Nn2bqmR7oTva4bn4orIE1fvKNHIv2ztLqFbWlYzCAUDcfM
Bk/DTOb8n5mmCP9Ra4PrFLUoDKeeheFQQBeSBZGK7iI79JoixRw9Js5hreuHdZIt
4RHdCihMNMl5AO73LG1Ja9PbI4VGMt7HsIsGu4QeC5X7w6dc+ukFyHCFSrx55fL4
kvZQaI/wxg12ZL7LHOQ2u3kYbvgXXT7ODfnJUZfgNKmgTAAzR0WQRnSwG4TnTGm8
dlWTA7wa3iSYVA==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:41 2026 by rpki-client