Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
File: 0j8EewbItyce4Qya9dFEPwE5wSc.mft (raw, json)
Hash identifier: kL2ANOJ8WwhWT8wLvvekm1/Vi7FnHx5icx2Gcgt098A=
Subject key identifier: B7:D2:2D:CC:6A:F7:AE:89:79:64:A3:AE:EB:9E:91:C9:5D:D8:7B:9F
Authority key identifier: D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
Certificate issuer: /CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Certificate serial: 01A1DE7027D75358A229D71999FA254A429C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 09:00:54 +0000
Manifest this update: Sun 15 Nov 2026 09:00:54 +0000
Manifest next update: Mon 16 Nov 2026 09:00:54 +0000
Files and hashes: 1: 0j8EewbItyce4Qya9dFEPwE5wSc.crl (hash: 54S7f/ujYGJEglUykSsSWL7GJJZuBNghF4AvUcjJN+8=)
2: CAV5F_RxEFXurDzHuM5vHnzsOwE.roa (hash: qQ54X/73hEKC7jEpzKqRYCSiWpjiVoPDcppGmKRov9U=)
3: W0loJf4D68Ef7i-HjeMsi9v8Nk4.roa (hash: iMHrQIDdFD1cWCvyB+6q0E771JtwuMCy7hQtEXJMTUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:27:d7:53:58:a2:29:d7:19:99:fa:25:4a:42:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Validity
Not Before: Nov 15 09:00:54 2026 GMT
Not After : Nov 16 09:00:54 2026 GMT
Subject: CN=b7d22dcc6af7ae897964a3aeeb9e91c95dd87b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a6:28:42:46:0f:ca:ed:c8:6e:f4:9a:69:b7:
5e:0b:1b:7c:ac:40:ee:cb:1f:f4:39:75:c4:8e:b1:
f0:2b:52:45:d8:90:65:7f:b9:31:8d:1b:d5:1e:39:
48:e1:a3:b8:60:0a:95:ed:87:e5:5d:ac:0a:3e:71:
d6:ce:58:34:55:c4:0a:d9:73:65:73:c5:8f:88:c6:
5e:3c:a0:33:52:13:57:ce:3b:81:90:63:94:b7:05:
5d:36:8b:ec:ad:cf:31:55:b6:f4:a5:76:72:9e:72:
42:43:f3:77:e7:c7:34:ef:55:9f:06:80:47:65:84:
9b:02:20:6b:2b:b8:da:e1:fa:59:6a:7e:51:b5:9a:
cf:d6:af:fc:af:03:85:12:39:44:a4:b2:84:a8:bb:
fd:83:1c:38:c1:e3:31:bc:76:88:d5:0c:5d:28:06:
31:6c:3c:1c:23:21:9c:1a:d9:aa:f8:23:74:7c:bf:
53:e9:90:41:55:be:ec:b2:00:10:2e:68:14:86:dd:
72:55:65:a4:d4:30:e7:53:1e:40:f7:c3:28:c8:1d:
1e:ca:7b:d1:b8:b3:6a:01:60:73:d0:46:e4:31:a1:
a1:28:3f:97:d5:d8:c3:20:36:44:c6:ab:21:3b:f1:
6c:93:1d:10:3a:70:b8:53:db:6d:fd:56:81:60:f9:
2c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D2:2D:CC:6A:F7:AE:89:79:64:A3:AE:EB:9E:91:C9:5D:D8:7B:9F
X509v3 Authority Key Identifier:
keyid:D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:45:e0:aa:7f:f7:60:80:af:66:ee:5b:5e:d0:c9:c2:c1:4c:
2f:fa:4e:42:a6:30:18:fe:ae:03:c9:4a:6a:cc:85:b1:66:25:
ee:9b:33:04:3c:d1:20:68:d7:6d:a1:22:a7:5c:54:13:3f:70:
e4:ec:a7:74:be:4d:dd:2b:d2:a8:28:27:45:c7:67:af:0c:2b:
50:81:04:90:d8:de:77:9b:8c:89:d2:64:14:5b:c0:0d:1a:77:
e8:65:7d:13:8a:28:17:13:d0:68:1b:f3:eb:37:18:8f:02:d7:
04:7c:22:ed:af:00:b2:0f:79:7b:4b:59:8e:66:d8:f6:0f:6e:
15:7a:fe:60:0b:48:b1:bb:73:01:41:16:6c:4e:bf:70:51:61:
82:70:4c:b0:cc:5b:5c:68:25:45:d6:14:36:a6:e3:8d:94:17:
0e:e9:8e:83:3b:5c:dd:e8:81:d0:83:ec:79:ca:75:d9:24:fb:
33:25:fa:11:a0:7d:a8:bd:e5:f2:99:bd:49:72:fe:2f:e9:24:
f5:09:c8:ef:4f:0a:0c:3e:c1:4f:86:28:e2:f3:4b:91:f3:9b:
f2:4f:ab:89:0a:41:84:5c:88:c5:f2:9a:b6:b0:1b:30:b8:f9:
79:0a:34:85:3d:e4:75:14:60:b4:5b:8a:8b:f3:aa:5f:fc:26:
3d:3c:f2:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecCfXU1iiKdcZmfolSkKcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyM2YwNDdiMDZjOGI3MjcxZWUxMGM5YWY1ZDE0NDNmMDEz
OWMxMjcwHhcNMjYxMTE1MDkwMDU0WhcNMjYxMTE2MDkwMDU0WjAzMTEwLwYDVQQD
EyhiN2QyMmRjYzZhZjdhZTg5Nzk2NGEzYWVlYjllOTFjOTVkZDg3YjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqYoQkYPyu3IbvSaabdeCxt8rEDu
yx/0OXXEjrHwK1JF2JBlf7kxjRvVHjlI4aO4YAqV7YflXawKPnHWzlg0VcQK2XNl
c8WPiMZePKAzUhNXzjuBkGOUtwVdNovsrc8xVbb0pXZynnJCQ/N358c071WfBoBH
ZYSbAiBrK7ja4fpZan5RtZrP1q/8rwOFEjlEpLKEqLv9gxw4weMxvHaI1QxdKAYx
bDwcIyGcGtmq+CN0fL9T6ZBBVb7ssgAQLmgUht1yVWWk1DDnUx5A98MoyB0eynvR
uLNqAWBz0EbkMaGhKD+X1djDIDZExqshO/Fskx0QOnC4U9tt/VaBYPksDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfSLcxq966JeWSjruuekcld2HufMB8GA1UdIwQY
MBaAFNI/BHsGyLcnHuEMmvXRRD8BOcEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGo4RWV3Ykl0eWNlNFF5YTlkRkVQd0U1d1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81MThmMTEtZDhmOS00N2EwLTk2MDAt
NWIwMGZiZjRhNTI5LzEvMGo4RWV3Ykl0eWNlNFF5YTlkRkVQd0U1d1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81MThmMTEtZDhmOS00N2EwLTk2MDAtNWIwMGZiZjRhNTI5
LzEvMGo4RWV3Ykl0eWNlNFF5YTlkRkVQd0U1d1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkXgqn/3
YICvZu5bXtDJwsFML/pOQqYwGP6uA8lKasyFsWYl7pszBDzRIGjXbaEip1xUEz9w
5OyndL5N3SvSqCgnRcdnrwwrUIEEkNjed5uMidJkFFvADRp36GV9E4ooFxPQaBvz
6zcYjwLXBHwi7a8Asg95e0tZjmbY9g9uFXr+YAtIsbtzAUEWbE6/cFFhgnBMsMxb
XGglRdYUNqbjjZQXDumOgztc3eiB0IPsecp12ST7MyX6EaB9qL3l8pm9SXL+L+kk
9QnI708KDD7BT4Yo4vNLkfOb8k+riQpBhFyIxfKatrAbMLj5eQo0hT3kdRRgtFuK
i/OqX/wmPTzyIA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:31:11 2026 by rpki-client