
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json)
Hash identifier: aCD5+ntTlS9BXbHlWYM9lSOefv50um4jxB5yDjb3SL8=
Subject key identifier: 12:A6:8F:CD:13:79:89:C5:80:56:A9:33:94:14:6E:36:06:45:FE:12
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 01A13F705F0D5DC6E37D8ECBDD6DFA9CCA5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
Manifest number: 1830
Signing time: Thu 15 Oct 2026 12:01:31 +0000
Manifest this update: Thu 15 Oct 2026 12:01:31 +0000
Manifest next update: Fri 16 Oct 2026 12:01:31 +0000
Files and hashes: 1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: Pv9norqj+QHv2HT3PA/uhDt+Lj3pThng7W3EEZRuu34=)
2: hCJiTpNkQOc5nBabvxUw_PYHA5A.roa (hash: E9ZgbzE14hI7ZwRKXKRpHKWsp51tuudesAlPeBWMd1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:5f:0d:5d:c6:e3:7d:8e:cb:dd:6d:fa:9c:ca:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: Oct 15 12:01:31 2026 GMT
Not After : Oct 16 12:01:31 2026 GMT
Subject: CN=12a68fcd137989c58056a93394146e360645fe12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:03:66:46:cd:6a:91:d7:5d:cf:f1:90:01:a1:
5d:52:88:6c:77:7c:6c:90:fd:43:6c:e8:6f:29:66:
49:72:35:f4:c3:f6:24:69:62:38:5b:a1:f6:b6:58:
a6:80:0b:cf:ed:2c:7d:88:f2:32:18:fa:db:27:e8:
41:23:eb:93:b8:65:48:f9:3c:45:40:25:61:57:fd:
f5:a1:07:5f:c6:57:90:cf:e7:0a:0b:28:9e:84:63:
3e:f5:2a:10:27:6f:80:cb:56:b0:74:3b:fc:c0:9d:
dc:51:04:df:e4:43:d3:f8:d4:ee:e4:1d:27:e8:27:
0d:81:cd:04:e7:ae:41:d1:a4:b1:28:90:e3:aa:6c:
9b:15:e8:b4:54:14:67:91:7a:e1:a1:5b:7a:8b:2a:
83:d3:56:30:bd:bd:cf:ac:95:fb:6f:06:e5:98:25:
f7:fa:f0:de:21:5d:65:8a:2c:63:4e:80:22:33:64:
53:45:50:cc:05:1b:5e:37:70:d2:d6:92:24:9b:df:
9b:c1:53:78:3f:73:06:f7:2a:b1:5d:b7:63:99:3c:
86:3f:d5:f2:08:05:95:ee:20:55:cd:80:42:2a:3c:
fa:48:4b:5d:98:6a:c2:5a:8d:3e:ba:11:62:29:9f:
5c:23:43:ee:ef:b1:34:70:4a:1b:50:39:a2:f3:92:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A6:8F:CD:13:79:89:C5:80:56:A9:33:94:14:6E:36:06:45:FE:12
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:dc:b6:d7:fa:e3:df:64:26:80:4b:48:15:09:70:e2:e9:7c:
b0:6c:29:d2:f0:15:3e:66:6b:53:b5:e4:46:6c:22:3c:8a:69:
15:ec:1d:cc:46:ec:03:b6:1b:27:8f:fd:0c:0b:46:be:45:00:
b7:71:5d:3d:eb:ac:f0:0c:65:cc:5a:ac:70:34:ac:c0:2e:91:
1c:02:7b:bf:59:a1:fc:eb:fb:a3:9d:18:84:16:75:70:ff:1d:
f6:39:86:87:38:43:4d:53:fc:53:46:01:aa:79:40:c6:84:41:
18:37:bb:e1:32:f5:9d:96:2e:12:47:3f:1c:10:6e:25:0f:04:
bf:7b:d8:8a:dd:9e:71:a4:6b:9c:23:68:ac:b9:9a:c7:30:de:
ac:16:4c:ef:84:d8:f3:4c:f0:b7:e6:e9:14:19:9e:6c:1f:f5:
ee:cc:ac:a0:e8:e8:8a:50:b9:8c:a6:42:5a:df:45:dd:77:6d:
fb:18:c4:8b:77:91:64:74:22:0b:35:8f:3a:67:86:b2:10:83:
9c:13:b6:64:82:ac:fd:4b:69:8d:d0:1a:64:58:fc:ef:a0:ae:
a8:ed:19:1d:6f:e4:c5:24:7b:4e:3c:ca:8c:3e:71:c4:03:87:
30:2c:27:d6:97:00:39:64:f2:a7:c9:5f:a5:c3:6b:bd:30:7a:
94:81:1d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:51:15 2026 by rpki-client