Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
File: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft (raw, json)
Hash identifier: MSbag3ZNqW6/6Tw8Y7Zr5KgrMSF/cKe7cdbqt7gCuzo=
Subject key identifier: 3C:1A:4F:5C:7B:69:AF:60:42:3C:47:1C:EC:FE:5A:D2:64:C2:47:3F
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Certificate issuer: /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial: 01A0D4CBB87CB12E2DBF4F9B8F8A250BDFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
Manifest number: 1599
Signing time: Thu 24 Sep 2026 19:01:55 +0000
Manifest this update: Thu 24 Sep 2026 19:01:55 +0000
Manifest next update: Fri 25 Sep 2026 19:01:55 +0000
Files and hashes: 1: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl (hash: Oo+BPtSFYx/7p8rR3mB5poyAHlQQRyzzOch81RtH0Fk=)
2: CxjvBT6i6ORn-LgV2GBf20kjEYw.asa (hash: BzUmnePwH8qqVa3rp1UNOBEk9Rs5woiSczy+DZk7nog=)
3: _OzM8w4FoR9ccCbQv3-snmY5IPs.asa (hash: MiIqtXDMPv3SC27FerQ7njWvgkVA9z0GFX+NGxq8AW0=)
4: an9hiLBXueLZ3NEcOw9p4FcCxvc.roa (hash: xhMio/+0Ambyy6cAJzP9lIpu104tRtCUBWmevhvYmvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:b8:7c:b1:2e:2d:bf:4f:9b:8f:8a:25:0b:df:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
Validity
Not Before: Sep 24 19:01:55 2026 GMT
Not After : Sep 25 19:01:55 2026 GMT
Subject: CN=3c1a4f5c7b69af60423c471cecfe5ad264c2473f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:83:ba:41:36:f2:e6:26:eb:f7:c9:85:32:
a4:ef:34:71:64:11:f4:67:39:a3:f6:a4:d6:c4:a8:
80:08:84:31:cf:f1:49:e0:de:4c:2f:14:70:2f:f4:
b8:96:8b:f9:ca:2e:9c:b2:1a:37:7d:7f:69:7f:be:
ac:6d:83:e6:d0:90:a6:3d:0e:47:63:ac:73:fa:4e:
5b:7c:51:b4:e3:5e:e6:15:ac:d1:6b:3b:ef:7b:ee:
99:6f:9a:34:2c:6f:44:ab:14:f6:5d:fe:b6:dc:1f:
12:74:5d:72:92:70:b2:cf:62:83:dc:81:bd:8b:dc:
c2:2f:bc:ca:a5:6e:98:7e:9a:d6:e8:39:2b:a7:0d:
fb:7c:2d:5f:49:76:a3:1f:1d:a8:04:e5:7b:a4:96:
68:52:5f:7b:9e:7e:33:1b:e6:ab:ab:3c:14:19:97:
3d:78:b4:0a:72:cb:b9:1a:b8:c9:1f:f0:0c:d5:2e:
ab:6e:29:23:ff:58:7a:5d:52:93:4c:e0:23:c7:e8:
3b:b4:0c:6a:6d:48:af:ac:1a:54:b6:0c:e4:03:42:
de:01:73:55:dc:89:23:37:51:8c:b2:75:d2:f8:e2:
90:e5:55:03:e3:38:ce:9a:89:e1:74:b9:62:a2:a8:
73:38:9f:e2:03:b3:b2:02:a7:3b:55:ea:94:15:d2:
04:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1A:4F:5C:7B:69:AF:60:42:3C:47:1C:EC:FE:5A:D2:64:C2:47:3F
X509v3 Authority Key Identifier:
keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:61:d7:54:d7:7c:68:45:fc:58:c2:b8:7d:84:a5:a0:2c:98:
94:3d:81:57:c4:20:d1:ab:23:50:94:20:ca:37:f0:88:d3:5b:
40:e2:84:90:e9:3b:97:db:a5:bb:f0:54:00:80:c1:dc:af:42:
5b:a3:61:f5:50:38:1a:d4:d3:96:7a:35:c5:92:42:88:8d:84:
80:6f:64:e9:73:f9:f0:ac:02:0e:12:76:03:e2:01:7b:52:71:
12:68:a0:17:e9:9d:71:95:ed:3c:45:e7:a6:19:8a:40:11:8c:
69:c9:4c:f8:69:99:e0:10:9f:7b:3c:0f:3b:db:fc:ba:35:2c:
71:6b:95:9a:c0:13:47:88:22:e9:ae:8b:8c:27:62:aa:33:eb:
9d:8e:54:99:f0:21:f4:a8:bb:27:e6:c3:a4:3c:f3:25:93:74:
80:ef:05:a5:9c:c3:8f:f2:df:bb:2e:82:4b:dd:f9:12:e5:04:
11:ce:6e:48:f6:c8:a4:a4:21:e3:60:bd:5a:71:eb:a5:8e:01:
e0:f8:02:ab:92:02:db:93:96:6b:f8:90:9c:63:07:ae:f0:b9:
26:90:d5:b7:17:52:36:92:46:e0:a0:a9:29:1b:d7:3b:4b:06:
07:63:aa:c6:1c:75:11:b3:c3:88:d1:a7:25:13:54:16:fc:e5:
42:9b:7f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:41:17 2026 by rpki-client