Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json)
Hash identifier: DX9Ij6v5voA1hw47RVHH3ruaiN6HV9jlyrhCEx/T9aU=
Subject key identifier: DD:24:06:95:B4:77:8C:AD:BF:8D:3E:85:0A:BB:44:B4:ED:98:0E:C9
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 019F17C22AD5F47D51B4F607BB2F3ED80FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
Manifest number: 170E
Signing time: Tue 30 Jun 2026 09:00:28 +0000
Manifest this update: Tue 30 Jun 2026 09:00:28 +0000
Manifest next update: Wed 01 Jul 2026 09:00:28 +0000
Files and hashes: 1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: mV38nw6sLAE6jniQz+McAZdqeg05Z7ItvBvLvXVgFAU=)
2: NUx7vvEWNtlf30buwcgLWtHz7GQ.roa (hash: 7mzTG7+2/G0MOcxAuxj9Gm4KPG0QM6fGkQwQnv78LHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:2a:d5:f4:7d:51:b4:f6:07:bb:2f:3e:d8:0f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: Jun 30 09:00:28 2026 GMT
Not After : Jul 1 09:00:28 2026 GMT
Subject: CN=dd240695b4778cadbf8d3e850abb44b4ed980ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:aa:1d:58:c1:0f:d1:fa:16:87:3d:37:ff:27:
b6:97:99:b3:3f:23:d0:c2:b7:86:91:ee:87:db:a3:
21:74:d3:33:5b:4f:46:5d:04:57:73:20:5b:cb:ce:
9a:e1:9f:49:0e:5c:9a:50:32:24:3d:3b:fe:45:96:
d5:6d:16:36:a7:60:cf:c8:0f:00:fa:7c:e8:48:46:
93:c1:b0:15:4c:11:84:a2:9a:ef:ee:e3:09:87:88:
d9:ad:be:bb:d0:b0:18:d7:4c:c5:6a:30:eb:90:34:
03:cd:a4:95:2c:56:1f:cc:80:d0:db:ae:99:b5:76:
a7:9a:b6:e7:7c:a6:67:dc:0c:9d:58:a5:33:41:db:
22:7d:ce:1b:c3:9e:11:94:70:e2:23:7e:b0:2f:d1:
60:97:12:eb:33:e0:13:c1:ec:77:29:5e:92:86:42:
76:f7:14:dd:05:87:67:3e:32:d8:dd:55:ad:ac:76:
ec:8f:2c:2d:cb:be:5d:03:39:c3:f5:61:43:e8:74:
60:7a:f3:16:6b:d5:69:28:df:5e:69:92:a5:d4:8f:
2f:9b:50:e5:e1:88:c2:02:24:bf:2c:a1:e2:6f:71:
ea:c0:ed:dd:84:30:85:77:2a:96:51:a8:1e:41:fe:
18:dd:ce:c4:60:22:b3:87:3e:a6:d4:af:75:55:67:
7f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:24:06:95:B4:77:8C:AD:BF:8D:3E:85:0A:BB:44:B4:ED:98:0E:C9
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1b:c7:6d:45:e2:e0:bb:ef:14:fe:ed:d3:8d:a4:4c:a3:f1:
52:e7:ff:fb:06:13:7e:b0:d8:c1:7c:3c:18:60:34:bc:ea:17:
e8:42:ab:da:7b:f5:39:7e:bd:7e:a2:2f:d6:0b:4f:a9:99:d3:
fa:99:05:0b:af:9a:04:ad:b2:9e:68:c3:91:a4:c9:26:1a:c9:
d6:44:c5:7a:49:c0:fc:a0:d2:fc:5e:ce:e7:31:9d:8a:46:8a:
d6:57:84:ee:ff:9a:6a:6e:be:fd:6a:72:bc:41:66:7f:75:61:
de:29:44:93:da:33:33:68:a6:72:3f:54:da:30:a2:03:31:e7:
f0:f0:e6:1b:7b:4e:46:30:bf:1f:52:c5:ba:55:2c:8f:99:a7:
69:d2:ce:54:b8:75:41:4e:17:07:d5:4e:9d:40:c4:29:38:d3:
95:4f:3c:6f:c8:a0:a4:04:dc:88:8e:21:9b:4a:67:c9:1c:87:
23:67:0f:4a:5d:92:b7:3a:47:e5:98:c5:ea:ed:da:7c:3d:b4:
de:4b:bf:ec:92:26:8a:71:40:3f:34:ab:17:49:81:62:6c:58:
66:00:6b:57:1a:2f:9f:39:70:53:55:ba:5f:4f:be:3f:a2:21:
b5:2e:cc:d9:f1:2b:d8:22:e2:7b:5a:3e:1b:c0:34:fe:b5:b1:
00:7e:8d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:13:31 2026 by rpki-client