Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json)
Hash identifier: TK5FMEGx8hfGv0ERWczmjxRXqsB/RVF36zxopx0Xwo0=
Subject key identifier: A1:CB:4E:E3:15:19:B1:B7:FA:F1:B5:EA:D6:CB:AB:7F:A8:A8:06:19
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 019E311759BBA30912A7FF4B6C4694033B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
Manifest number: 1693
Signing time: Sat 16 May 2026 14:01:14 +0000
Manifest this update: Sat 16 May 2026 14:01:14 +0000
Manifest next update: Sun 17 May 2026 14:01:14 +0000
Files and hashes: 1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: qQyPz1hPAx2VveaQPR2PBeb2qtAQxekpSK6UJDDL0ko=)
2: yA5b7maJfHU0NcBkIvFx-c8-I54.roa (hash: XFcePeHchpjbLRec04pqboXS3/LtfvbSEVpXlPE0ESo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:59:bb:a3:09:12:a7:ff:4b:6c:46:94:03:3b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: May 16 14:01:14 2026 GMT
Not After : May 17 14:01:14 2026 GMT
Subject: CN=a1cb4ee31519b1b7faf1b5ead6cbab7fa8a80619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9a:55:96:44:d8:97:e6:5c:a9:03:5d:50:84:
18:a7:8f:db:3a:1f:1a:e3:72:46:41:22:03:9e:77:
c2:2d:78:0a:de:55:22:90:7c:40:b7:13:a2:11:82:
0d:e2:8a:ca:fb:1d:34:8f:93:d7:1c:68:4c:50:2c:
05:cd:90:2e:a1:77:0a:56:c5:49:a2:b1:ae:d9:2c:
b3:e8:07:e4:19:77:04:d5:ea:8a:cb:3e:ff:a1:3b:
9e:c4:e0:f8:fb:98:4f:18:82:79:f3:db:f2:aa:89:
74:d6:2b:b5:09:c0:b2:c3:ed:8f:64:ba:c7:d7:39:
98:63:4f:a2:c5:b0:f6:8b:dc:31:2f:b0:07:71:ff:
73:bb:7b:51:68:5a:e3:ff:75:61:71:46:31:37:ca:
37:a6:a4:c1:c8:9a:96:1d:27:42:12:49:dd:ff:cb:
27:41:7c:e1:13:b1:43:50:1e:e5:b0:32:28:63:7e:
a2:37:ad:93:d5:52:40:9a:8d:9b:62:52:90:d1:9e:
5f:2a:6e:b0:6e:7b:c4:0c:53:35:48:53:c3:de:98:
4b:36:4e:8f:48:c5:56:5f:5d:0b:84:9b:5b:11:16:
cc:1f:c6:db:5f:b2:fa:7f:cb:6b:4f:ef:4c:f1:60:
bd:6a:81:a1:2e:54:97:c2:dd:76:50:53:92:b9:59:
0d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CB:4E:E3:15:19:B1:B7:FA:F1:B5:EA:D6:CB:AB:7F:A8:A8:06:19
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:44:46:8f:eb:d8:47:9c:11:94:d4:77:50:ce:b2:9b:68:59:
2a:49:79:bc:69:9d:5f:af:a3:ea:65:8a:d9:fd:b4:7d:dc:76:
c0:78:36:f0:96:e1:72:ea:00:a1:08:42:2e:d5:f7:f5:84:12:
17:31:86:07:f8:6c:a3:b5:32:4b:18:a2:3e:9a:0d:4d:ab:26:
d7:ef:66:a4:00:e1:32:6d:a5:20:9e:85:d6:66:42:76:f8:01:
f0:5b:2c:a7:82:c5:8e:5b:50:c9:22:b5:11:b8:1d:b8:45:81:
f9:2c:ee:9c:8a:25:a4:51:d8:3b:63:b5:df:5d:17:9f:dc:9f:
0a:05:bc:8a:73:04:ef:43:62:16:cd:33:b9:9f:9b:e9:37:99:
6c:29:ab:d5:c6:ea:13:84:e8:67:3e:2f:19:ec:10:87:b0:35:
f9:3b:2f:29:01:e2:f1:f5:8f:dd:9f:e0:cf:ef:12:20:ad:21:
24:81:e1:1b:63:36:32:ec:e5:01:56:12:bb:62:28:d0:a8:a4:
b7:4e:6b:6d:d5:15:35:6f:78:87:4a:49:76:74:85:70:bd:05:
da:f7:c7:40:24:a7:39:f8:02:79:86:6d:24:9c:95:b6:b6:70:
a1:14:1f:f0:14:70:de:c4:79:68:d9:9b:80:6f:bc:a3:c7:f4:
a6:8d:a8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:43 2026 by rpki-client