Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
File: 0j8EewbItyce4Qya9dFEPwE5wSc.mft (raw, json)
Hash identifier: IrNhrz/yw3h+nvYxK8lFp7zzPevInnTrjVkw6Wk6iBg=
Subject key identifier: 0C:15:ED:D0:30:95:C9:C5:43:06:34:6B:08:B1:95:49:CC:23:6A:C6
Authority key identifier: D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
Certificate issuer: /CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Certificate serial: 01A0D5DEDF04108B9211D638EDF1B2731D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
Manifest number: 1A6F
Signing time: Fri 25 Sep 2026 00:02:28 +0000
Manifest this update: Fri 25 Sep 2026 00:02:28 +0000
Manifest next update: Sat 26 Sep 2026 00:02:28 +0000
Files and hashes: 1: 0j8EewbItyce4Qya9dFEPwE5wSc.crl (hash: 2y766R//zx8cwv5wEEGTIYfVSkdRvQkB5hwzmBO5Fkc=)
2: CAV5F_RxEFXurDzHuM5vHnzsOwE.roa (hash: qQ54X/73hEKC7jEpzKqRYCSiWpjiVoPDcppGmKRov9U=)
3: W0loJf4D68Ef7i-HjeMsi9v8Nk4.roa (hash: iMHrQIDdFD1cWCvyB+6q0E771JtwuMCy7hQtEXJMTUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:df:04:10:8b:92:11:d6:38:ed:f1:b2:73:1d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Validity
Not Before: Sep 25 00:02:28 2026 GMT
Not After : Sep 26 00:02:28 2026 GMT
Subject: CN=0c15edd03095c9c54306346b08b19549cc236ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:11:3c:92:86:b2:19:66:aa:4d:70:ff:22:87:
a9:3c:5a:6b:88:4b:72:b3:f9:67:63:ce:02:e1:14:
a4:be:3d:0c:b2:d1:15:54:94:ba:02:46:80:25:6b:
73:5c:cb:a2:8b:4f:52:dd:97:81:f3:e8:c6:48:7b:
e7:fd:37:a0:8e:be:d1:fe:d4:62:2a:6d:35:dd:15:
1c:cd:59:05:b4:7f:c3:66:15:ac:99:a9:95:0f:11:
ca:ce:b7:5a:d9:56:ab:82:37:c3:31:2a:2b:3c:ca:
a7:08:49:4e:82:aa:5a:3d:fb:aa:84:37:cf:df:72:
0c:5f:2f:51:05:f0:cd:e4:ae:55:a0:08:98:73:2e:
ef:ea:ad:ce:8e:81:9b:18:11:d4:1b:17:c7:d4:c8:
12:7f:28:36:af:34:0a:fc:b6:89:a4:ca:51:bb:a4:
52:3a:8f:67:86:e6:7a:10:3f:b3:9a:f1:94:27:29:
e7:fb:c1:93:5d:f3:2e:21:7a:d9:7b:a5:ec:e3:77:
61:d5:39:be:ee:f6:19:ad:82:54:28:03:a9:9d:45:
8a:03:d9:85:1f:d2:22:98:96:8a:14:06:7f:dd:0e:
e5:87:56:5b:6d:6e:b0:b2:05:12:c5:fa:67:9b:ad:
4c:b8:7d:ef:21:20:df:29:20:60:72:6c:43:8c:1e:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:15:ED:D0:30:95:C9:C5:43:06:34:6B:08:B1:95:49:CC:23:6A:C6
X509v3 Authority Key Identifier:
keyid:D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:69:08:9a:31:c5:3d:1e:54:e8:d2:b1:87:1e:86:f2:f5:38:
f3:53:13:51:3a:a1:93:6f:27:1d:20:5a:4e:87:a0:c5:44:4c:
bc:6d:b4:84:4d:36:c3:77:45:24:8c:7d:7c:fc:ab:da:a2:7b:
ae:e2:6c:2f:80:e9:c3:0f:4d:e9:1c:55:33:6b:70:a0:0a:f6:
a1:44:2d:42:9e:c6:59:86:b2:86:d7:0d:00:a6:29:5f:ef:bc:
a8:5d:4d:2f:db:d8:66:14:7d:f7:95:5e:77:9f:6e:eb:bf:21:
af:a6:4c:0d:37:95:d0:4a:c9:fd:fd:fb:44:76:54:74:66:00:
93:00:80:18:64:0d:a3:b0:88:5b:ee:d3:2e:c3:6c:53:cf:3f:
e9:84:c2:75:31:c5:cb:ab:4b:e7:f2:43:46:72:c8:80:14:a7:
66:10:fe:c9:34:a1:50:aa:4b:33:c5:bc:60:c1:53:dc:41:58:
b4:d8:5e:87:2f:a2:21:ac:ff:80:09:17:37:b6:df:21:79:25:
cb:25:81:e1:f2:67:9e:6e:fe:1d:0d:be:56:dd:e3:8b:00:94:
e5:41:01:8d:fa:da:37:31:8a:2d:1b:be:fc:40:18:24:2f:43:
28:eb:36:0d:ea:fc:25:a2:00:85:26:79:42:54:52:eb:fd:84:
95:f8:de:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:34:46 2026 by rpki-client