Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
File: 0j8EewbItyce4Qya9dFEPwE5wSc.mft (raw, json)
Hash identifier: aIBCxjxzoVCXZH2dpmhrKChMDlurTk3Jo0VicoIUpbY=
Subject key identifier: 13:07:EF:CB:02:D8:37:00:00:E2:DB:9D:57:29:3E:FF:59:5B:DF:0C
Authority key identifier: D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
Certificate issuer: /CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Certificate serial: 019D3308A13426A279B41D8D2B7225C87A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 06:01:36 +0000
Manifest this update: Sat 28 Mar 2026 06:01:36 +0000
Manifest next update: Sun 29 Mar 2026 06:01:36 +0000
Files and hashes: 1: 0j8EewbItyce4Qya9dFEPwE5wSc.crl (hash: 3HT3eCttmF5k2RS5MRduGMI2Au6+kNUDmsgDGrnJXJ4=)
2: CAV5F_RxEFXurDzHuM5vHnzsOwE.roa (hash: qQ54X/73hEKC7jEpzKqRYCSiWpjiVoPDcppGmKRov9U=)
3: W0loJf4D68Ef7i-HjeMsi9v8Nk4.roa (hash: iMHrQIDdFD1cWCvyB+6q0E771JtwuMCy7hQtEXJMTUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:a1:34:26:a2:79:b4:1d:8d:2b:72:25:c8:7a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Validity
Not Before: Mar 28 06:01:36 2026 GMT
Not After : Mar 29 06:01:36 2026 GMT
Subject: CN=1307efcb02d8370000e2db9d57293eff595bdf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c1:33:75:9e:7a:33:0e:f9:fb:54:1b:3b:86:
84:56:b7:0c:34:52:a0:71:e6:66:d7:13:9c:a4:39:
d8:7c:56:e3:7b:56:63:53:a0:a5:a9:63:96:b5:86:
ad:c7:75:1e:8d:c7:b4:d1:f2:8e:ba:b8:f6:18:65:
e7:54:87:45:16:fc:09:3f:ce:64:6a:9d:0e:d7:f2:
f7:86:39:84:71:2a:7c:1e:ab:06:8f:da:4c:f1:53:
67:b6:ef:ce:f1:e3:10:51:a2:db:a9:06:d6:a1:49:
3d:04:4f:b2:b8:28:d4:5e:8e:f8:f0:60:43:b8:04:
30:2c:90:10:4e:57:96:97:b5:b0:d7:a1:da:4f:54:
91:09:d1:0f:f8:f7:b6:72:9e:b7:b8:f1:31:80:87:
89:5a:01:32:13:ea:82:ca:b2:25:a6:2e:1a:74:31:
e0:e0:dd:3d:f2:f3:6c:8e:8c:8d:4a:ea:24:11:3e:
af:ca:ee:45:e0:f5:9e:66:7b:b9:be:16:75:01:12:
0d:d7:8d:e8:35:43:11:fe:78:75:ef:dc:59:66:d7:
d0:c6:8f:ac:ee:a3:3a:19:c5:96:86:2d:df:a4:57:
9a:ab:aa:19:76:ae:13:bd:dd:aa:b5:c0:44:94:e2:
77:80:0c:2a:4a:ae:fa:a8:9c:33:fc:01:1c:0c:e2:
d6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:07:EF:CB:02:D8:37:00:00:E2:DB:9D:57:29:3E:FF:59:5B:DF:0C
X509v3 Authority Key Identifier:
keyid:D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:2f:86:f2:6d:af:39:1a:3d:f3:0c:ba:87:30:91:8b:a5:ee:
57:cc:7a:31:55:57:43:61:77:e7:53:b9:d2:72:a7:29:89:c8:
2b:51:54:75:9e:04:35:21:27:71:e8:cc:d9:9d:f1:a0:31:b2:
49:c3:7d:be:1f:17:6f:0b:32:9f:3b:2d:6b:64:5b:74:aa:e7:
50:bb:3e:29:df:14:bf:c2:5a:0f:48:58:1d:d0:76:26:cc:aa:
f8:7d:d7:7b:51:fa:f7:2b:6a:05:1a:0b:c0:3f:71:ce:98:57:
44:c3:70:bd:8b:2d:cd:b5:87:9a:b3:43:d1:b7:1a:96:04:c5:
a6:9a:3d:34:90:85:ad:56:2e:bc:c6:e0:11:9b:3a:d4:81:72:
a2:b9:09:54:68:5c:11:40:94:d5:6a:dd:1d:f6:56:87:89:ab:
b9:d5:e1:2f:6c:45:56:70:06:f2:09:96:cd:c8:4b:c7:aa:03:
c3:1f:a5:a9:76:c1:35:d5:1e:55:af:19:18:52:84:68:4e:68:
45:5b:af:6d:9b:3c:a3:d3:ba:f6:86:85:85:57:22:99:31:d3:
2e:c6:fd:7d:bc:48:1b:c6:0d:ba:24:58:b7:9b:0a:06:e0:84:
dc:34:a3:e6:64:40:e2:5a:55:c2:6c:52:30:ea:60:65:c9:95:
88:20:8f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:08:23 2026 by rpki-client