Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
File: 0j94Nzy5ZlTQMGBkaS78SudxXxc.mft (raw, json)
Hash identifier: MMFxwU9x845eWZInIXo/kC8ghxUx5pJkNHGVL2cviqY=
Subject key identifier: 47:1C:C5:82:38:4B:46:69:3C:5B:86:89:23:50:CD:85:9C:15:9F:41
Authority key identifier: D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
Certificate issuer: /CN=d23f78373cb96654d0306064692efc4ae7715f17
Certificate serial: 019CF27140627A8F1C3EC0D3397D0FFFD72C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
Manifest number: 0CFB
Signing time: Sun 15 Mar 2026 17:00:34 +0000
Manifest this update: Sun 15 Mar 2026 17:00:34 +0000
Manifest next update: Mon 16 Mar 2026 17:00:34 +0000
Files and hashes: 1: 0j94Nzy5ZlTQMGBkaS78SudxXxc.crl (hash: ySdi1lNnEIvA+/jKLCFmkJkqXJDIqSTXpCcDavJxVmg=)
2: 2k2efwLza4ZnO03YIidqVEqe8vI.roa (hash: B5AmAsDvRZimr7FECRkl2IW5OMCrTl16t1iaHWJsJvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f2:71:40:62:7a:8f:1c:3e:c0:d3:39:7d:0f:ff:d7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f78373cb96654d0306064692efc4ae7715f17
Validity
Not Before: Mar 15 17:00:34 2026 GMT
Not After : Mar 16 17:00:34 2026 GMT
Subject: CN=471cc582384b46693c5b86892350cd859c159f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:70:b7:d2:6d:7b:07:08:b1:4f:1e:70:15:f4:
bc:bc:26:db:42:31:26:4d:0d:31:c6:ad:7b:c6:6f:
f0:b6:16:ad:24:b3:88:3e:fb:69:85:e7:74:50:60:
58:54:90:6f:94:5c:99:e9:48:59:9c:e8:c4:4d:bc:
59:49:c5:12:2e:38:54:6c:c2:da:47:c7:a2:12:52:
e5:4c:fe:cf:d5:c0:e5:e4:85:ae:ab:1d:9c:f7:96:
1c:38:88:8f:0f:03:30:04:28:d2:46:28:22:42:e3:
9b:af:dc:55:ff:47:cc:91:78:52:3c:aa:2f:0c:2d:
77:48:59:ae:ff:23:22:4c:be:fe:c1:44:70:f6:bc:
a2:f4:f1:ef:a8:5c:13:1e:b8:c0:a7:34:e5:9d:f2:
8d:d4:0a:8d:33:ef:9a:99:db:4e:d7:31:c7:c8:22:
84:16:08:76:1d:a2:20:a0:bc:87:85:6d:b3:26:61:
d9:50:f3:a7:16:34:f4:f8:d2:ca:f9:89:dd:ab:4f:
2f:be:73:cf:a3:c7:a5:33:fd:15:f0:dd:ec:10:d4:
0a:38:37:37:a5:88:f3:d4:43:07:58:2c:b4:0a:b9:
fd:70:2e:0b:a9:da:5b:92:4d:ff:79:22:27:61:92:
a5:61:2a:29:91:a1:70:c1:ab:8f:18:a7:7d:c2:99:
b6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1C:C5:82:38:4B:46:69:3C:5B:86:89:23:50:CD:85:9C:15:9F:41
X509v3 Authority Key Identifier:
keyid:D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:40:66:8c:13:bf:8e:61:d2:04:d6:82:8f:44:84:75:86:74:
e4:05:2a:46:90:ed:63:8f:00:7b:94:b4:51:75:c3:3f:73:ab:
dd:27:47:57:80:c9:e0:86:67:d6:45:22:20:48:c5:69:56:e9:
c5:46:79:9d:03:40:ab:d0:e6:cb:13:c4:b0:1a:54:55:31:88:
30:07:a4:78:93:dc:fe:89:e3:1b:21:e7:aa:88:93:fa:18:82:
0c:bc:bd:a0:f9:fc:fe:89:2e:6b:56:6d:e8:06:a8:68:85:2c:
7d:25:c0:b8:e2:46:48:ce:13:d2:9f:cd:15:ff:82:79:11:83:
a3:90:8c:9d:bc:41:da:c0:b7:80:fd:a9:cc:5e:b5:11:cd:0d:
a9:5c:5b:e5:fc:cf:72:87:e9:de:f4:69:93:04:f8:9f:c7:bd:
36:aa:75:d4:b9:d9:0c:bb:88:21:66:62:f3:f9:f4:56:15:a8:
48:d8:45:2d:68:46:24:56:4b:58:37:98:13:8d:2d:4b:ec:b9:
11:7b:23:e4:8a:3c:b4:5b:a9:c8:14:b7:47:73:51:03:37:cd:
7d:64:23:c3:54:ca:9f:13:97:81:f1:f1:59:44:28:9e:cc:61:
d6:86:2d:3c:33:37:b3:1f:09:92:bd:95:f3:7c:5a:f2:a4:8b:
cf:94:d2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:10:25 2026 by rpki-client