Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
File: 0j8EewbItyce4Qya9dFEPwE5wSc.mft (raw, json)
Hash identifier: 3akziVKjX1d8pSJZ5ohxk/9UUuFNwC0fRPWL1Fa2GCY=
Subject key identifier: 86:74:6F:A3:52:BD:12:52:7E:B2:3B:D5:BA:63:F4:18:93:58:5D:E4
Authority key identifier: D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
Certificate issuer: /CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Certificate serial: 019F916CB1FF42DBE95E0DEF76798250B498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 00:00:47 +0000
Manifest this update: Fri 24 Jul 2026 00:00:47 +0000
Manifest next update: Sat 25 Jul 2026 00:00:47 +0000
Files and hashes: 1: 0j8EewbItyce4Qya9dFEPwE5wSc.crl (hash: TiztJpFPOHbEBI8CUaUxLfJpaHg29R8oSQ3tQprM0K8=)
2: CAV5F_RxEFXurDzHuM5vHnzsOwE.roa (hash: qQ54X/73hEKC7jEpzKqRYCSiWpjiVoPDcppGmKRov9U=)
3: W0loJf4D68Ef7i-HjeMsi9v8Nk4.roa (hash: iMHrQIDdFD1cWCvyB+6q0E771JtwuMCy7hQtEXJMTUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:b1:ff:42:db:e9:5e:0d:ef:76:79:82:50:b4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Validity
Not Before: Jul 24 00:00:47 2026 GMT
Not After : Jul 25 00:00:47 2026 GMT
Subject: CN=86746fa352bd12527eb23bd5ba63f41893585de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:6c:47:94:87:79:15:a7:ec:8f:29:d6:e3:
2b:30:67:dd:60:f1:b9:9f:f9:e3:ed:e9:77:a5:25:
f4:77:ec:79:73:cb:bf:91:73:bd:67:b1:de:93:b4:
e8:27:0b:98:65:5f:ad:8f:0a:d6:dc:5f:9b:34:4a:
8e:1b:09:51:14:6f:60:9b:a6:4c:2a:96:ad:fc:43:
ee:22:33:37:3e:2a:d2:0b:ec:5b:4d:11:d9:49:ae:
13:07:0f:7d:d3:75:4a:53:19:ca:06:b5:c6:ac:c9:
81:95:08:37:52:71:8e:fd:ea:9b:4a:00:17:8a:7b:
ab:f3:f1:0c:7c:9b:0f:1b:b1:31:d9:6c:0f:4e:a3:
d9:04:44:a5:cb:dc:3d:06:ec:ab:01:cb:8a:26:5d:
3d:86:28:7c:7e:bd:87:17:2b:33:e9:9d:3d:6c:e8:
1b:09:4b:61:50:5d:77:46:2d:6d:b9:b9:94:5c:84:
dd:18:54:a1:67:f4:47:8c:60:9d:74:a8:7e:eb:06:
4c:b6:67:d6:bf:e2:4f:16:6b:b9:38:41:1c:d9:7b:
49:f8:3e:f2:fa:04:05:50:5f:e5:60:73:a8:d1:66:
ea:d5:ef:38:22:d2:ce:3a:36:c5:98:68:7f:1d:45:
ab:d7:58:57:28:46:6e:af:58:60:ef:e4:5b:8a:f8:
ec:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:74:6F:A3:52:BD:12:52:7E:B2:3B:D5:BA:63:F4:18:93:58:5D:E4
X509v3 Authority Key Identifier:
keyid:D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d1:bb:0f:d8:ee:8d:c2:eb:72:ff:f7:1d:7a:b4:7b:16:cb:
b1:f6:32:58:44:1a:16:2e:b4:bf:f0:fa:2b:e0:e5:e0:7d:ac:
96:a5:4b:b4:f8:7f:c8:38:56:f3:63:d7:85:94:4e:a9:2e:97:
6b:ff:82:24:af:e2:38:f8:af:45:30:87:ac:33:15:83:8a:0a:
ea:de:6a:c4:ca:fe:2c:43:31:28:ab:03:48:8e:ad:8a:e3:2b:
76:52:6f:32:5e:55:1b:4f:b0:af:9a:c9:04:ef:9c:5e:ec:2e:
b3:90:e4:d9:e1:1f:36:1d:e7:e3:1e:be:41:18:31:f1:8b:ea:
ec:c1:b7:82:85:d8:03:ba:63:c8:29:71:e1:cd:ec:3f:6a:2c:
ed:6e:62:85:ae:db:49:84:b9:bc:87:66:a3:c2:26:44:15:d2:
8b:b7:ea:2f:50:fc:e8:0e:ef:52:94:d3:6f:4f:7a:6c:51:45:
c5:cc:b9:2a:94:3f:d0:cc:fd:5b:4a:ac:f1:79:a4:44:59:86:
37:c9:e5:39:76:f7:a5:ef:6b:26:84:54:9b:40:ec:e4:eb:7e:
81:09:3a:b5:19:1b:d9:62:6c:a3:56:32:e3:5b:b8:f4:e2:f7:
c6:79:fa:7d:02:70:1c:4e:60:6b:79:8c:4f:67:b9:94:c8:8f:
32:03:d4:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbLH/QtvpXg3vdnmCULSYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyM2YwNDdiMDZjOGI3MjcxZWUxMGM5YWY1ZDE0NDNmMDEz
OWMxMjcwHhcNMjYwNzI0MDAwMDQ3WhcNMjYwNzI1MDAwMDQ3WjAzMTEwLwYDVQQD
Eyg4Njc0NmZhMzUyYmQxMjUyN2ViMjNiZDViYTYzZjQxODkzNTg1ZGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ1sR5SHeRWn7I8p1uMrMGfdYPG5
n/nj7el3pSX0d+x5c8u/kXO9Z7Hek7ToJwuYZV+tjwrW3F+bNEqOGwlRFG9gm6ZM
Kpat/EPuIjM3PirSC+xbTRHZSa4TBw9903VKUxnKBrXGrMmBlQg3UnGO/eqbSgAX
inur8/EMfJsPG7Ex2WwPTqPZBESly9w9BuyrAcuKJl09hih8fr2HFysz6Z09bOgb
CUthUF13Ri1tubmUXITdGFShZ/RHjGCddKh+6wZMtmfWv+JPFmu5OEEc2XtJ+D7y
+gQFUF/lYHOo0Wbq1e84ItLOOjbFmGh/HUWr11hXKEZur1hg7+Rbivjs4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZ0b6NSvRJSfrI71bpj9BiTWF3kMB8GA1UdIwQY
MBaAFNI/BHsGyLcnHuEMmvXRRD8BOcEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGo4RWV3Ykl0eWNlNFF5YTlkRkVQd0U1d1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81MThmMTEtZDhmOS00N2EwLTk2MDAt
NWIwMGZiZjRhNTI5LzEvMGo4RWV3Ykl0eWNlNFF5YTlkRkVQd0U1d1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81MThmMTEtZDhmOS00N2EwLTk2MDAtNWIwMGZiZjRhNTI5
LzEvMGo4RWV3Ykl0eWNlNFF5YTlkRkVQd0U1d1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXtG7D9ju
jcLrcv/3HXq0exbLsfYyWEQaFi60v/D6K+Dl4H2slqVLtPh/yDhW82PXhZROqS6X
a/+CJK/iOPivRTCHrDMVg4oK6t5qxMr+LEMxKKsDSI6tiuMrdlJvMl5VG0+wr5rJ
BO+cXuwus5Dk2eEfNh3n4x6+QRgx8Yvq7MG3goXYA7pjyClx4c3sP2os7W5iha7b
SYS5vIdmo8ImRBXSi7fqL1D86A7vUpTTb096bFFFxcy5KpQ/0Mz9W0qs8XmkRFmG
N8nlOXb3pe9rJoRUm0Ds5Ot+gQk6tRkb2WJso1Yy41u49OL3xnn6fQJwHE5ga3mM
T2e5lMiPMgPU9g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:05:06 2026 by rpki-client