Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json)
Hash identifier: w5RWushNNLZm8+8DrPZTGTqaR+LB6eSEQuOSeDcg49o=
Subject key identifier: 13:46:4E:67:83:F9:E6:D2:2C:21:24:47:25:D1:C1:6A:05:5C:92:7A
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 019D39E60D2456C6BEFC16BA3FE06683B580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
Manifest number: 1613
Signing time: Sun 29 Mar 2026 14:01:11 +0000
Manifest this update: Sun 29 Mar 2026 14:01:11 +0000
Manifest next update: Mon 30 Mar 2026 14:01:11 +0000
Files and hashes: 1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: LY9qVNYZgvssVxvl2hNLeIt9LGEONr/soWiG27xHA/E=)
2: yA5b7maJfHU0NcBkIvFx-c8-I54.roa (hash: XFcePeHchpjbLRec04pqboXS3/LtfvbSEVpXlPE0ESo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e6:0d:24:56:c6:be:fc:16:ba:3f:e0:66:83:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: Mar 29 14:01:11 2026 GMT
Not After : Mar 30 14:01:11 2026 GMT
Subject: CN=13464e6783f9e6d22c21244725d1c16a055c927a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8d:48:1f:1e:ea:2a:2d:15:a8:70:1c:ae:75:
e4:28:2d:d1:62:bc:66:4a:a4:f2:bf:fe:aa:47:22:
d3:b0:88:17:3b:72:9f:25:31:cb:aa:9c:a2:e5:e8:
e6:0e:92:21:94:45:49:88:eb:b8:c2:b4:93:86:fb:
28:3c:c2:73:4e:c7:b8:37:25:c4:40:3e:8e:80:50:
d9:2c:0f:87:f8:fb:b7:b9:d0:ea:4a:cf:d6:f5:80:
26:38:29:a7:11:64:52:03:fd:01:6a:f3:0a:3b:a8:
0e:54:1e:82:22:c5:24:b7:be:8c:54:69:cb:51:0f:
fa:84:56:9c:60:a2:72:51:88:7a:96:4c:38:ab:04:
79:14:96:f5:cc:8f:fc:c6:a0:ee:fc:c7:e6:c2:a9:
b3:a6:45:cb:07:5c:8a:48:fe:5f:de:d1:e1:9e:a0:
d7:d6:09:c3:99:70:c2:c3:c6:ae:22:d2:fc:4c:de:
df:5c:72:d8:b6:57:ad:41:ff:be:52:72:ab:21:8b:
f5:e7:c1:9c:c9:cc:c1:ab:07:9c:de:fc:ba:22:e1:
bb:b8:e5:06:12:28:52:9f:63:24:91:32:69:e3:8f:
6f:15:c7:5e:d9:1c:92:0f:d9:d7:7d:d7:f0:ad:40:
4d:4d:4b:04:27:a3:2e:64:56:eb:0e:26:d1:a1:22:
15:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:46:4E:67:83:F9:E6:D2:2C:21:24:47:25:D1:C1:6A:05:5C:92:7A
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6e:f0:b3:e2:82:81:e4:63:4f:71:73:e9:f8:81:06:7f:c5:
ef:35:89:d6:ac:27:e5:06:68:b1:98:5d:5c:31:57:92:5d:68:
af:63:96:5d:3a:2a:3c:44:53:d2:a6:25:be:19:ee:5d:62:65:
81:ce:12:67:90:07:aa:49:36:ec:dc:93:04:08:30:de:d7:05:
84:df:0b:cc:57:75:90:6f:a0:04:c0:b1:52:b1:a5:76:13:24:
86:d3:0b:af:db:0b:a7:28:d0:4c:61:06:d9:18:b1:9a:b1:9b:
f0:84:87:c8:de:39:c0:c3:f2:0e:84:a9:22:2e:72:3d:4d:f3:
fd:99:f3:77:90:93:ed:50:60:d4:b0:2d:47:6e:ae:a0:f7:5c:
5b:ee:92:10:fe:0f:22:bc:fc:0c:63:79:e7:9e:12:aa:37:df:
6c:b0:46:c9:46:5e:4e:29:aa:86:ab:77:e2:27:81:ea:d1:f2:
c4:38:e6:0a:31:cf:a2:c1:9b:24:4a:cd:22:0f:4d:ca:12:6b:
b3:35:32:d9:51:3f:dd:5e:a2:59:eb:7b:91:7b:c0:64:92:4e:
5b:cf:2b:a1:95:0b:eb:04:98:9f:9e:7f:36:fc:51:18:05:53:
95:66:25:3b:6f:f2:7f:d4:79:e7:e3:7d:c8:02:44:64:5d:37:
a4:32:ba:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:37 2026 by rpki-client