Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
File: 0KFr9-DjuTMLVEg-GfYTsCtie-8.mft (raw, json)
Hash identifier: FR2HXlD3n0cNGMe/pMQcdQMqPf3Z1Lj92QW7LEjfkFE=
Subject key identifier: BA:1F:42:C0:14:6B:24:E6:00:50:71:3F:5F:9E:32:D1:D9:69:7D:DC
Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Certificate serial: 019F9323F92574345734CAAD3455A10DF35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
Manifest number: 1402
Signing time: Fri 24 Jul 2026 08:00:35 +0000
Manifest this update: Fri 24 Jul 2026 08:00:35 +0000
Manifest next update: Sat 25 Jul 2026 08:00:35 +0000
Files and hashes: 1: 0KFr9-DjuTMLVEg-GfYTsCtie-8.crl (hash: YuBOGWlXiMikC1lcvl8mFdUDZ2l2Aj6lBxQ0akG+Yw8=)
2: wf4Dioz38ILB4v1B0ECWLEz6X7c.roa (hash: EBxrOoYlpbtk2ShhC7WmcBl12gxV4Wa50Z9TM1JzCUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:f9:25:74:34:57:34:ca:ad:34:55:a1:0d:f3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Validity
Not Before: Jul 24 08:00:35 2026 GMT
Not After : Jul 25 08:00:35 2026 GMT
Subject: CN=ba1f42c0146b24e60050713f5f9e32d1d9697ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0c:bc:24:7c:8c:ad:78:f4:8c:0f:0f:d4:1b:
fa:cc:2f:0d:a7:c2:87:43:c0:a4:65:a5:c8:34:3b:
9f:80:46:4a:8a:8a:68:78:83:c9:02:dd:51:65:f4:
67:59:e2:21:07:ec:e4:fe:52:32:d6:f2:11:23:4b:
0c:66:0f:eb:56:8a:2c:d6:96:57:3d:5d:81:63:83:
19:53:9f:8a:ba:34:9f:34:b0:a9:e4:9c:64:0e:61:
92:8e:bf:c9:4b:ed:09:d4:3c:62:6f:3e:f2:f9:3e:
cd:e5:88:d5:7c:74:91:28:0a:7f:8d:ee:11:89:59:
48:4f:a6:ed:47:3d:d1:4e:28:b7:ff:58:04:9d:31:
1e:17:67:c0:27:85:64:eb:1d:25:14:f9:92:1b:50:
7d:c3:3d:9c:a9:e4:7d:86:5d:ac:d8:25:12:80:6b:
60:00:20:1e:1f:1a:3a:a3:33:53:33:ee:ef:07:63:
62:67:5f:4c:83:ac:85:4e:95:9b:0a:11:2a:5e:6d:
a0:3b:d8:80:bd:db:95:25:99:fd:eb:60:ae:26:a6:
93:f3:e7:18:a9:ca:6d:d2:b8:9d:cc:4e:eb:c4:80:
3d:83:b3:f2:b1:8a:86:07:79:7a:a7:7f:d2:1a:d4:
ec:2d:52:5e:48:c0:b9:ac:70:1a:8b:37:61:84:35:
7a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1F:42:C0:14:6B:24:E6:00:50:71:3F:5F:9E:32:D1:D9:69:7D:DC
X509v3 Authority Key Identifier:
keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ce:a0:42:84:7a:ec:73:2f:ab:09:77:91:90:ee:32:bf:22:
2e:9a:1f:74:1e:84:c9:ba:fc:79:e6:e0:ac:45:c7:a6:8d:47:
28:f2:cf:80:78:5e:73:77:7d:ad:a7:81:80:1f:76:10:0c:35:
b2:d8:9c:67:3d:7a:be:a1:ba:f9:0d:c3:2b:be:e5:43:bc:8e:
d3:23:b6:2d:12:d4:ea:37:1c:61:1d:9c:09:4e:7c:7e:d3:96:
e0:a9:bf:b5:be:f9:c6:e8:33:a3:1f:00:0d:67:28:c4:a9:82:
66:24:aa:1d:57:d1:94:64:a6:1f:54:94:3c:9e:2c:47:4d:a2:
f8:c9:fc:d3:2f:2b:99:04:aa:ce:5e:66:37:1c:c4:58:f1:0c:
70:34:68:f0:15:89:c8:19:f3:41:b6:4d:b0:3d:f5:58:d8:c8:
c4:34:0a:5e:9e:db:cc:6a:53:db:37:fb:15:82:98:af:ce:c2:
76:40:d1:cc:30:17:79:2c:f6:11:aa:12:45:fb:dc:77:ab:be:
56:f8:53:a5:e8:81:22:c8:dd:0d:a0:67:b1:85:eb:14:19:94:
80:51:16:ff:92:9f:77:42:f1:fd:e5:02:7a:da:04:f1:1b:ac:
98:ea:09:36:b7:b3:8a:da:d1:2d:5e:46:20:98:06:6d:7f:7f:
36:08:cc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:16:31 2026 by rpki-client