Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
File: 0j8EewbItyce4Qya9dFEPwE5wSc.mft (raw, json)
Hash identifier: 78zAcd3OFAamVmqS/Tx6ndYoTPmuXNHamWnvVMcCWBU=
Subject key identifier: 51:FE:A8:B2:83:04:EE:65:33:92:34:43:68:12:81:64:88:DB:45:2A
Authority key identifier: D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
Certificate issuer: /CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Certificate serial: 019F11F819DD3567FA73CBB2461C8683119D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
Manifest number: 1985
Signing time: Mon 29 Jun 2026 06:01:39 +0000
Manifest this update: Mon 29 Jun 2026 06:01:39 +0000
Manifest next update: Tue 30 Jun 2026 06:01:39 +0000
Files and hashes: 1: 0j8EewbItyce4Qya9dFEPwE5wSc.crl (hash: L5Hk/cpR9/BjTGFpOW71BreB+wtpcPQl87IyLhvOWPc=)
2: CAV5F_RxEFXurDzHuM5vHnzsOwE.roa (hash: qQ54X/73hEKC7jEpzKqRYCSiWpjiVoPDcppGmKRov9U=)
3: W0loJf4D68Ef7i-HjeMsi9v8Nk4.roa (hash: iMHrQIDdFD1cWCvyB+6q0E771JtwuMCy7hQtEXJMTUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 06:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:19:dd:35:67:fa:73:cb:b2:46:1c:86:83:11:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Validity
Not Before: Jun 29 06:01:39 2026 GMT
Not After : Jun 30 06:01:39 2026 GMT
Subject: CN=51fea8b28304ee65339234436812816488db452a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a5:3b:07:cf:57:cd:48:8b:31:eb:ac:c1:21:
41:18:91:28:a0:0a:f1:af:78:11:22:08:4c:a7:2d:
8d:c9:8b:0d:51:2a:a6:5c:3d:93:43:91:22:20:d2:
b1:25:ff:b8:1e:89:98:cf:59:c8:59:45:37:2e:2d:
7b:22:7f:e0:e9:76:d8:21:d2:03:65:7c:2f:af:9b:
9f:98:9f:6e:5d:9f:6a:b4:79:44:a4:9c:70:31:80:
95:cc:a7:02:f9:65:cd:c1:ef:d7:d4:bd:e4:72:ea:
4a:78:1c:87:bf:3b:7d:ba:cd:c7:dd:d7:71:86:2c:
d9:c5:7b:a1:66:6d:75:de:d3:ae:05:ae:96:be:d2:
75:0a:b3:e8:c1:3a:c4:b8:0d:d8:82:a9:e0:50:09:
6b:b6:62:c6:fd:0b:b5:3d:2a:fc:ef:74:91:f1:31:
62:e1:58:3a:98:ea:13:68:41:21:d3:61:85:5e:b3:
b5:bd:d3:21:13:66:70:44:39:f4:97:48:55:b9:84:
33:1f:4f:b8:b9:40:5d:fa:60:1f:d0:b8:f2:8c:be:
c6:4a:54:91:44:09:e9:18:ae:5c:62:62:cf:4d:ba:
da:31:67:15:63:92:b6:28:c1:ac:9b:60:fc:ea:7e:
92:21:0c:31:7a:c9:19:e3:2b:47:ba:13:be:6d:06:
64:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FE:A8:B2:83:04:EE:65:33:92:34:43:68:12:81:64:88:DB:45:2A
X509v3 Authority Key Identifier:
keyid:D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f0:f5:98:0a:25:aa:fe:56:23:75:85:ab:e9:f7:68:05:a3:
34:9b:be:53:c2:81:6d:7b:37:0e:4c:16:aa:83:8e:0f:29:eb:
bc:7b:88:74:4a:20:ca:86:45:4b:f6:26:ad:6e:25:44:b3:5a:
44:cf:18:80:a8:56:8e:a8:d5:f8:b6:d5:2c:7d:c4:14:f2:b9:
1b:48:fc:c1:ff:38:4b:9d:11:ee:3c:56:8a:41:b7:11:d3:6b:
07:5b:28:db:c3:e2:cc:63:fe:19:df:f5:31:df:f8:24:3c:82:
0e:76:77:8f:ae:da:64:b1:52:6f:d1:d3:82:e0:e4:90:b5:6b:
9a:42:5b:c3:31:20:69:a1:b2:10:96:ab:dd:9a:76:4d:90:f5:
7e:2a:31:38:67:b0:da:c8:1d:f6:f2:de:d1:53:b2:47:c2:1f:
79:81:d3:70:23:51:3c:b4:32:41:85:de:07:c9:f3:13:23:db:
2f:ae:d7:56:88:9f:bd:61:c1:df:94:3e:07:8f:d6:94:65:e7:
94:02:5a:f3:a8:b4:37:d9:f1:f0:82:32:87:c6:da:34:a8:b8:
09:e9:02:5b:8e:27:1b:28:6b:1d:69:b7:22:26:2f:10:95:99:
86:2a:f4:2c:f7:8a:f6:56:5f:4c:ed:c4:f1:93:09:8b:7d:e5:
2a:33:ca:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:16:42 2026 by rpki-client