Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
File: 0j8EewbItyce4Qya9dFEPwE5wSc.mft (raw, json)
Hash identifier: c6MHr1Cd3z14IYYEd9hWwa9PtYvMNjcjW+KQH++2Tsc=
Subject key identifier: DD:B0:0D:9F:09:20:15:55:E3:DF:1C:FD:41:2A:B2:4E:D9:1E:85:36
Authority key identifier: D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
Certificate issuer: /CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Certificate serial: 019E20916FC070F4FDE6722185FBE2D78C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 09:01:02 +0000
Manifest this update: Wed 13 May 2026 09:01:02 +0000
Manifest next update: Thu 14 May 2026 09:01:02 +0000
Files and hashes: 1: 0j8EewbItyce4Qya9dFEPwE5wSc.crl (hash: r75jwDZh186J16TBFiWeTuq/OlqQGIsKqMD/0L7bLaA=)
2: CAV5F_RxEFXurDzHuM5vHnzsOwE.roa (hash: qQ54X/73hEKC7jEpzKqRYCSiWpjiVoPDcppGmKRov9U=)
3: W0loJf4D68Ef7i-HjeMsi9v8Nk4.roa (hash: iMHrQIDdFD1cWCvyB+6q0E771JtwuMCy7hQtEXJMTUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:6f:c0:70:f4:fd:e6:72:21:85:fb:e2:d7:8c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Validity
Not Before: May 13 09:01:02 2026 GMT
Not After : May 14 09:01:02 2026 GMT
Subject: CN=ddb00d9f09201555e3df1cfd412ab24ed91e8536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:84:84:01:37:86:24:c0:e9:30:16:19:54:
3e:4c:cc:aa:80:0b:5d:3f:7f:e0:ad:ab:96:16:0d:
98:14:f6:5a:48:95:08:53:de:67:32:63:f4:25:14:
8d:72:2a:da:39:8d:63:77:e9:01:8b:34:01:ef:79:
75:3b:44:2b:3b:8d:5a:78:0b:ea:32:2d:1a:d8:a5:
c4:ba:90:83:f7:46:0e:39:27:a3:98:58:c8:d0:0f:
a2:d7:c0:34:fe:58:16:5f:97:cf:b1:05:a3:1b:69:
03:39:44:ec:d3:6e:71:4d:36:ce:07:ca:eb:82:05:
7f:1b:0f:88:3c:76:2d:e2:4c:f5:6c:d7:3c:a1:be:
14:fb:80:c6:d5:17:fb:3d:bb:c2:a3:70:0b:69:72:
46:6d:80:ab:14:b5:91:73:2d:b7:c8:e3:e4:5b:67:
af:a1:8b:c6:02:73:60:1e:83:a8:8d:f6:2a:03:d2:
41:04:e7:d0:fd:c8:95:18:cc:be:3f:d9:4c:cf:45:
9f:55:08:88:98:26:9b:95:48:2b:84:0c:80:76:2c:
8b:ec:7c:81:7b:84:51:8c:48:43:f6:36:52:42:74:
18:eb:8d:8e:0b:34:25:f6:4a:fa:22:eb:d1:68:4e:
08:e9:9c:f4:a7:a7:23:a6:e7:f0:49:1c:85:5a:12:
3c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B0:0D:9F:09:20:15:55:E3:DF:1C:FD:41:2A:B2:4E:D9:1E:85:36
X509v3 Authority Key Identifier:
keyid:D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b4:67:64:23:cf:4c:17:24:40:e2:22:bb:38:60:38:3b:c8:
1e:71:ab:d2:ed:45:f5:ab:f3:e1:a5:54:fe:17:4c:38:82:80:
de:77:2d:ab:d1:a1:f9:e5:68:e8:d7:e3:8e:2d:86:23:71:c2:
e7:8b:71:29:5c:a7:a0:1c:9b:8f:f5:95:1c:60:1e:50:9a:78:
c3:10:21:b8:ba:1a:73:3c:0c:1e:17:7c:80:f5:7b:51:bd:1f:
58:f9:ee:90:8a:d0:66:49:3e:7c:76:78:e8:bc:dd:8d:c7:df:
8a:d4:cb:09:97:3b:9e:98:74:f9:d8:a9:68:44:f8:f9:74:7a:
cf:31:9f:85:69:bb:32:9a:f2:e9:30:10:13:f7:17:31:4d:b4:
9d:e3:2e:bb:ec:96:51:93:88:41:4e:71:07:28:dc:fd:e8:6c:
3f:e0:7c:2c:bc:06:c0:83:2f:6d:cc:46:ac:1c:6d:7d:3c:3b:
be:2e:c1:f4:58:a9:1f:16:e1:57:5a:71:b3:14:50:37:be:c9:
5f:72:46:ec:aa:52:8a:cd:76:2c:84:91:2e:39:c2:0e:02:1d:
a6:80:fc:6e:08:0e:62:73:d6:dc:6e:2d:96:26:b6:ee:6e:ea:
be:aa:a4:4d:af:50:a5:99:9d:bd:a6:45:55:b0:68:63:56:66:
fa:63:2c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:52:40 2026 by rpki-client