Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
File: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft (raw, json)
Hash identifier: nrG9no4PEloFtEgXnuDZ68irJofbFV0Mgj/WG0NGNNM=
Subject key identifier: B0:80:0D:E3:A5:CC:42:33:41:4D:5A:85:49:17:80:C4:65:F7:BF:17
Authority key identifier: D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
Certificate issuer: /CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Certificate serial: 019E1FB5C616857F912EEEDFA2B954C1467F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
Manifest number: 1012
Signing time: Wed 13 May 2026 05:01:06 +0000
Manifest this update: Wed 13 May 2026 05:01:06 +0000
Manifest next update: Thu 14 May 2026 05:01:06 +0000
Files and hashes: 1: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl (hash: kuwssq0n1z1WElPLRbqf4sgLxpssI+J311c+TCCnKec=)
2: VM-fKezFR4SnE_FueP0yvublPPU.roa (hash: NLdH6ARZYMD17vttDtKMAsBhjz+U3ES+mnznmPgNe9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:c6:16:85:7f:91:2e:ee:df:a2:b9:54:c1:46:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Validity
Not Before: May 13 05:01:06 2026 GMT
Not After : May 14 05:01:06 2026 GMT
Subject: CN=b0800de3a5cc4233414d5a85491780c465f7bf17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c3:06:2a:2e:5e:bf:bc:c4:9b:71:1c:d1:6c:
2a:6a:ad:ac:cb:ff:b8:21:e7:88:d7:66:73:11:0b:
f8:77:3f:18:1d:f3:25:45:7e:08:66:75:6e:4b:59:
e4:7b:2e:84:c9:7f:b3:db:0e:a3:19:9d:6f:d6:c7:
89:e5:98:d5:8b:67:ce:73:1a:98:72:cf:12:21:5f:
6f:13:82:15:e1:11:ad:1c:d9:16:92:0a:ff:27:57:
5a:94:eb:4e:47:9e:36:eb:eb:cb:f7:1e:3e:30:c8:
64:e4:9f:4b:3f:1a:13:a2:10:16:4b:7e:56:df:e5:
5c:e5:5d:10:a8:45:42:20:b3:bf:66:32:70:a2:3c:
84:8d:79:a9:48:3f:45:3b:68:2d:98:89:00:cf:77:
b1:1a:4f:66:44:c3:25:0b:46:c6:3a:49:40:96:ef:
56:1e:a8:0d:ab:64:a0:fd:f7:60:a2:d1:13:e2:79:
7b:3b:33:c9:9c:c6:10:d7:93:5b:ec:2a:31:a0:18:
17:0c:25:6b:13:cd:f4:a9:18:31:78:1a:ed:95:e7:
93:c3:e1:22:7e:18:88:f3:88:94:09:fd:13:56:78:
af:cc:6e:c5:97:3d:20:e2:42:6f:d9:69:fb:d9:01:
80:96:73:63:16:48:f4:9c:9e:3b:c1:e6:c5:82:c4:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:80:0D:E3:A5:CC:42:33:41:4D:5A:85:49:17:80:C4:65:F7:BF:17
X509v3 Authority Key Identifier:
keyid:D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:2d:c3:8c:a7:d8:78:77:d9:db:6b:84:7d:fc:8b:f3:d7:6d:
28:cd:76:bd:95:74:5d:36:68:a5:f1:f6:55:4d:e4:a2:ea:b4:
5c:4d:01:03:43:7c:8f:f8:eb:e2:08:99:2d:4a:6a:4c:63:fe:
82:f2:84:68:d6:ae:d2:c5:2c:5c:4c:93:a7:00:76:b6:76:7e:
43:ed:5d:3e:8c:12:2b:37:5c:9d:b6:03:2b:46:16:7a:8b:96:
25:20:fa:7a:f0:2c:8a:e0:b9:33:38:5b:e9:81:f2:67:27:76:
da:3b:d4:32:fe:bc:d7:71:73:d8:29:c8:b5:e6:a1:a0:b1:8e:
7f:2d:65:ef:3b:c4:87:25:70:4d:29:0c:95:fa:52:5b:0e:e2:
9a:47:b9:97:47:65:8d:26:f6:9b:94:c2:b6:58:cc:6c:2e:e2:
bd:4f:7e:da:09:34:5a:08:d5:f8:c5:f3:5d:73:38:3c:45:6c:
c0:d6:27:cb:a6:d7:08:dd:59:50:51:31:fc:08:e6:06:ee:f6:
51:e3:bd:ae:b5:c1:ad:62:61:21:74:ab:ce:ec:4a:36:01:ae:
12:97:5b:6c:87:e9:2b:4f:3d:18:7f:8a:6c:62:1c:b0:46:30:
c7:47:b3:91:7a:d4:4b:a6:c8:54:0c:98:6d:84:7e:8e:a3:66:
61:7b:4f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:45:57 2026 by rpki-client