Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft
File: 0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft (raw, json)
Hash identifier: SVflFECHzDjyCmIqSq8WW10Np8e1CUqN5ruhveE4Uns=
Subject key identifier: 9D:E5:AB:B8:C4:50:E3:BD:52:52:23:EC:71:E2:82:39:24:62:24:1C
Authority key identifier: D0:42:5D:25:4D:FF:F3:E1:2A:96:72:93:08:43:FC:0E:9A:BC:90:62
Certificate issuer: /CN=d0425d254dfff3e12a9672930843fc0e9abc9062
Certificate serial: 019F8FB58D942130ABE3F535AA170274CC64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft
Manifest number: D1
Signing time: Thu 23 Jul 2026 16:01:07 +0000
Manifest this update: Thu 23 Jul 2026 16:01:07 +0000
Manifest next update: Fri 24 Jul 2026 16:01:07 +0000
Files and hashes: 1: 0EJdJU3_8-EqlnKTCEP8Dpq8kGI.crl (hash: oEaNTK3rWaF0VyAzzkF/Y/qB72Wlog+RfDKqG527hGg=)
2: IaPceu7VrN0Ci4QLf1Y22DXK38c.roa (hash: DDTyYVit6V7bbPxJ+s9WJ7GGlOrY5GhIJkW0KajJFr4=)
3: OFzeLQp8ZtYhjFWlwJy_x_KM2LY.asa (hash: E0getpcGl6J6ZvnmJSNfKZfGDdp3vLQMHkNwq1dR66Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:8d:94:21:30:ab:e3:f5:35:aa:17:02:74:cc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0425d254dfff3e12a9672930843fc0e9abc9062
Validity
Not Before: Jul 23 16:01:07 2026 GMT
Not After : Jul 24 16:01:07 2026 GMT
Subject: CN=9de5abb8c450e3bd525223ec71e282392462241c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:78:48:5d:ed:e2:fd:26:55:10:4a:fa:01:45:
49:b6:8e:3a:77:05:4b:2a:a7:74:d5:7d:e3:79:8a:
6b:81:78:08:7d:44:72:2c:36:b1:c7:65:77:81:9f:
11:c7:e4:61:84:f7:86:00:b7:88:2d:ed:f2:e4:b3:
96:ac:0c:0f:23:ef:2c:d4:99:07:16:a6:c7:68:f0:
0f:86:1f:94:8a:e1:59:e4:2c:14:d8:a8:7e:e4:cd:
b1:ac:8a:a8:db:f3:9c:d0:3c:1e:55:3e:19:8f:0d:
60:48:07:cb:17:1d:28:10:92:e2:df:e3:f7:b0:f9:
43:72:19:38:bc:8d:6b:b0:93:24:6c:6d:42:9f:95:
20:63:cd:96:70:39:16:b6:69:89:30:66:7d:fd:3f:
82:8e:c0:12:a5:25:af:e2:07:fb:33:ae:ec:3a:f6:
0c:56:77:ce:7d:e7:4a:06:15:54:6f:6d:9f:f6:f2:
9a:12:35:83:34:1f:4e:dc:64:a1:a8:9b:29:78:fd:
3d:c3:d9:a2:83:d2:31:d1:5f:59:30:76:7d:95:5b:
69:68:12:11:1e:98:b1:af:98:da:98:1e:8b:3b:ba:
43:01:ef:61:a4:30:42:48:1e:df:73:32:10:20:61:
87:22:78:3d:7e:ae:85:85:d7:5e:16:22:28:b9:48:
e8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E5:AB:B8:C4:50:E3:BD:52:52:23:EC:71:E2:82:39:24:62:24:1C
X509v3 Authority Key Identifier:
keyid:D0:42:5D:25:4D:FF:F3:E1:2A:96:72:93:08:43:FC:0E:9A:BC:90:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:c5:51:ae:d3:08:42:9e:1e:af:79:aa:6b:89:f7:0b:1d:45:
84:7d:6b:14:4f:cc:7f:d1:28:f1:f7:ae:ec:59:98:9a:79:f4:
e3:93:6a:04:f5:b0:a1:cc:7e:6d:1e:ba:30:3e:e5:b4:ea:32:
fa:52:48:ac:54:31:10:04:25:81:80:bf:40:06:cb:d2:b5:45:
a9:2e:b1:1c:28:c5:38:df:ba:80:a0:41:b0:9b:96:27:bc:69:
90:f5:ae:c4:c2:dc:d2:ab:a2:83:d1:da:cf:26:96:df:76:8b:
d3:90:ee:21:a0:8b:08:31:b1:eb:d9:67:9e:16:80:41:1a:a7:
49:6f:df:2e:b5:4a:92:74:ab:89:1a:66:7b:b8:06:d3:22:a0:
fc:02:cd:a9:bc:ca:0a:aa:b5:85:1a:93:19:27:d1:89:7e:66:
6a:8d:3d:2e:35:76:c7:d4:db:ad:a9:af:1d:01:24:09:74:c2:
38:c7:3c:03:23:ea:4c:50:54:d7:a3:a6:8f:a8:4c:58:ba:70:
5a:73:25:51:f0:cd:17:15:ac:33:19:20:3d:30:a4:76:0a:02:
32:d2:aa:76:be:23:5a:8b:f8:d3:87:32:e4:00:1c:ed:24:04:
6f:d0:3a:29:53:5f:f0:8d:b8:08:2e:a6:e3:16:ca:ea:bb:5f:
d9:b1:bf:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:14 2026 by rpki-client