Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
File: INJjO_-xbaLXXtr0m8ghGHz7iO8.mft (raw, json)
Hash identifier: fat1qPuBXAHVO6nq6Yn25uYwq71FRjB52Axg8Hm9H5k=
Subject key identifier: E0:27:E0:25:5D:B2:ED:6B:C3:5D:F0:94:51:79:CE:35:32:09:04:9E
Authority key identifier: 20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
Certificate issuer: /CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Certificate serial: 019D3865F79640F21DFEA7D6E2B62C2F74EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
Manifest number: 0D08
Signing time: Sun 29 Mar 2026 07:01:39 +0000
Manifest this update: Sun 29 Mar 2026 07:01:39 +0000
Manifest next update: Mon 30 Mar 2026 07:01:39 +0000
Files and hashes: 1: INJjO_-xbaLXXtr0m8ghGHz7iO8.crl (hash: T3v/5T1VBnvNlAvrIKAtnWBxY0Mtg9WZPIG58dkYP1I=)
2: p_-g8PelWdmqsdjOIMd952nJEQ0.roa (hash: SNcHznir+SSpk2nPwXwbT8vISszxA2KZ7EJsOdYVxCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f7:96:40:f2:1d:fe:a7:d6:e2:b6:2c:2f:74:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Validity
Not Before: Mar 29 07:01:39 2026 GMT
Not After : Mar 30 07:01:39 2026 GMT
Subject: CN=e027e0255db2ed6bc35df0945179ce353209049e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c1:a4:bd:d4:a6:5b:14:b9:73:f7:62:ba:22:
cd:c8:c5:30:79:11:1c:35:23:60:8e:5c:45:8c:81:
14:28:68:5a:c5:11:5c:76:aa:d6:30:21:5c:b7:d8:
ee:f9:f6:22:e6:07:d9:20:d9:4b:8a:ee:6a:28:45:
7d:9f:cc:81:93:95:5f:5d:c9:bb:ff:e7:df:cb:40:
d7:cd:22:8e:92:26:8f:53:9f:79:d3:3c:45:17:f0:
93:8a:81:2a:b0:10:5f:1d:0d:c8:78:2f:cf:6b:10:
ff:16:9a:05:7b:96:f1:45:15:ea:6d:a1:09:d2:28:
dc:c1:ff:e3:b4:b7:3a:18:02:e9:84:40:d8:f7:66:
ca:dc:1e:05:50:e5:e5:4e:67:f9:3d:d3:6a:11:d1:
68:40:79:eb:62:4f:dc:8b:f3:a7:f2:6e:26:eb:fc:
d3:ab:75:87:02:e5:bc:a6:51:fa:9c:a3:bb:20:36:
7f:3c:ca:8d:de:62:1c:79:8f:b4:01:a9:a3:f6:7b:
a9:96:05:36:4a:93:18:38:24:72:2a:6c:4f:28:e1:
49:2c:51:ef:15:95:cb:08:22:7f:db:a9:bf:dd:18:
81:22:40:7d:d4:54:ed:24:92:db:e4:06:fd:3b:d5:
f1:d6:c3:81:b2:81:dc:b7:9d:48:3a:8f:97:e4:93:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:27:E0:25:5D:B2:ED:6B:C3:5D:F0:94:51:79:CE:35:32:09:04:9E
X509v3 Authority Key Identifier:
keyid:20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5c:90:55:7c:a6:65:00:3c:b6:5a:62:66:82:eb:e7:50:a6:
d6:6a:17:7a:16:e1:95:ce:fa:fa:24:9a:ff:92:b5:83:2e:f7:
5e:da:33:f5:71:82:57:87:16:64:9a:d5:67:3b:4c:33:f4:f2:
b4:be:94:38:ab:5c:e9:28:fa:33:22:14:d5:65:1d:c8:a5:24:
d7:e7:1a:1f:33:93:cb:85:07:c7:d0:63:72:e9:40:12:61:eb:
cf:70:9c:29:b8:01:8b:3c:34:a0:f6:28:55:1d:be:fc:d7:71:
6f:56:64:bd:01:d4:1a:2b:ab:8b:a2:53:8b:83:3e:65:75:1d:
60:41:d7:78:2c:4e:d7:9c:e8:50:fc:c1:c5:42:10:43:10:07:
fb:cc:0d:70:d6:4f:8d:10:7d:dc:5d:13:06:da:5c:06:f1:8a:
e1:bb:67:78:e5:a5:4a:a3:de:8e:78:07:c1:1f:70:3a:ce:97:
0f:b1:4a:c6:9d:3c:28:85:43:e5:50:66:55:30:c7:4e:2a:e8:
b8:75:00:ca:9d:56:dd:e6:53:8b:dd:67:de:13:c8:cc:7f:79:
ef:13:91:8b:2a:0e:85:11:e3:26:68:e4:0b:36:33:29:70:39:
d2:00:37:55:df:47:cd:c6:48:92:a8:1d:b4:b0:e8:89:aa:0e:
20:91:b1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:52 2026 by rpki-client