
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
File: 0j8EewbItyce4Qya9dFEPwE5wSc.mft (raw, json)
Hash identifier: a2N3/0xGcrR2D99sMf4MwaUnjCtuysV1lKJQmWgkAPw=
Subject key identifier: 62:D9:F2:CE:FC:79:22:0A:D7:A3:EE:5A:F8:42:4D:FF:BF:29:BC:6C
Authority key identifier: D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
Certificate issuer: /CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Certificate serial: 019D2772D19F8C849C2BEFAFD45292F30B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:02:09 +0000
Manifest this update: Thu 26 Mar 2026 00:02:09 +0000
Manifest next update: Fri 27 Mar 2026 00:02:09 +0000
Files and hashes: 1: 0j8EewbItyce4Qya9dFEPwE5wSc.crl (hash: YN/a+0Pk98XOT0w8jWRfFUriWVil3xbcTEN4zE/JLjs=)
2: CAV5F_RxEFXurDzHuM5vHnzsOwE.roa (hash: qQ54X/73hEKC7jEpzKqRYCSiWpjiVoPDcppGmKRov9U=)
3: W0loJf4D68Ef7i-HjeMsi9v8Nk4.roa (hash: iMHrQIDdFD1cWCvyB+6q0E771JtwuMCy7hQtEXJMTUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d1:9f:8c:84:9c:2b:ef:af:d4:52:92:f3:0b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Validity
Not Before: Mar 26 00:02:09 2026 GMT
Not After : Mar 27 00:02:09 2026 GMT
Subject: CN=62d9f2cefc79220ad7a3ee5af8424dffbf29bc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:17:47:5e:cc:85:41:8d:db:01:ea:7f:97:
cd:ca:1b:f5:05:14:c4:c9:98:82:2b:8a:df:d9:eb:
38:47:10:e8:fc:56:79:7c:ab:ee:88:c9:e6:c4:eb:
2c:11:80:f8:b7:49:35:7f:79:d4:07:67:fe:d2:80:
01:89:1a:2e:a4:88:df:04:f5:6c:03:25:20:73:55:
b8:83:8e:96:73:c2:31:0d:37:b8:c8:ad:34:ee:fe:
d5:d6:11:de:a6:e0:cf:2e:52:49:44:40:be:b4:52:
5b:fe:ce:5e:2a:fe:ab:6e:45:23:42:36:f7:ae:5a:
d9:a9:11:b7:5d:0c:59:49:4c:dd:33:e3:9e:9f:1f:
97:36:ba:84:bf:c3:eb:8b:7c:46:aa:06:f2:3a:f2:
24:fe:77:24:91:74:62:47:be:6b:43:26:a2:fc:c0:
07:db:f9:5b:0d:fc:b9:53:d0:9a:c6:e8:9f:d8:e8:
b4:16:2a:07:f9:85:8c:37:77:dc:82:ef:c6:d3:6e:
e1:99:5e:0d:28:6f:2e:2a:74:8c:36:6b:ed:bc:31:
5e:b7:94:af:a1:90:f5:b8:bb:58:11:8d:fe:d8:e1:
8e:16:98:6c:15:88:a3:c6:6b:db:e0:38:b9:73:e2:
6b:d4:cc:82:4b:bb:c0:44:5d:aa:f5:45:63:d1:eb:
f0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D9:F2:CE:FC:79:22:0A:D7:A3:EE:5A:F8:42:4D:FF:BF:29:BC:6C
X509v3 Authority Key Identifier:
keyid:D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fd:de:ed:a4:cc:9a:37:89:4d:99:47:fa:f2:4e:3e:4b:34:
ba:2f:cc:e4:5a:3a:0f:d8:bf:cf:b5:d0:c4:2a:f3:c2:b8:0a:
5c:0c:5f:28:60:ec:c8:9b:57:ce:9e:de:29:aa:89:d7:63:48:
8d:08:04:57:d4:6b:27:e9:77:37:04:22:bf:b3:cd:b2:f0:50:
61:cb:47:49:23:b6:01:ec:01:f9:0d:be:0a:15:b3:c7:84:48:
8d:6d:b6:2f:da:cb:8e:02:9c:44:f3:22:09:f9:8a:d7:5f:52:
e2:bd:4e:63:6c:2b:bf:c6:b5:ca:5c:96:af:b7:f0:fe:c2:90:
00:cb:eb:99:35:b8:7e:71:0a:40:18:ed:18:fe:c0:0a:2c:9c:
b2:ca:3e:36:91:4d:e9:02:e1:e7:9b:a2:0a:e6:1c:d8:39:eb:
aa:6e:4a:4a:93:00:81:e2:a7:fa:e0:11:38:be:13:cf:c6:bf:
e4:6a:71:2b:a5:4d:58:0e:46:c6:e0:3b:18:70:34:bf:04:bd:
7e:7f:0b:bf:d3:69:8f:7e:a6:d1:0c:24:cf:2f:f6:26:f6:7a:
f2:6b:8a:84:d8:bd:3d:57:91:06:db:80:7d:6c:8c:69:30:18:
4f:33:ec:29:7b:22:27:a1:5c:51:61:1b:89:1e:ce:49:2e:eb:
c3:2b:40:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:43 2026 by rpki-client