Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
File: 0jhr7YO2RaK64TifU9llfZGedtE.mft (raw, json)
Hash identifier: 9X1EUV69UlTB06LxOicTTEcdu8Tcz9QPj7UgU/Ts3+4=
Subject key identifier: EE:C1:47:F2:10:06:84:C0:C2:F6:CB:2F:1F:02:06:37:4C:6F:8B:6B
Authority key identifier: D2:38:6B:ED:83:B6:45:A2:BA:E1:38:9F:53:D9:65:7D:91:9E:76:D1
Certificate issuer: /CN=d2386bed83b645a2bae1389f53d9657d919e76d1
Certificate serial: 01A00101E27D8706002D618C2A14ECAF17B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jhr7YO2RaK64TifU9llfZGedtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
Manifest number: 0DC5
Signing time: Fri 14 Aug 2026 16:01:35 +0000
Manifest this update: Fri 14 Aug 2026 16:01:35 +0000
Manifest next update: Sat 15 Aug 2026 16:01:35 +0000
Files and hashes: 1: 0jhr7YO2RaK64TifU9llfZGedtE.crl (hash: fApbyTIAXLwV5dL3d+o4i8Vh6dU01H8HIswyn7KKFLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jhr7YO2RaK64TifU9llfZGedtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:e2:7d:87:06:00:2d:61:8c:2a:14:ec:af:17:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2386bed83b645a2bae1389f53d9657d919e76d1
Validity
Not Before: Aug 14 16:01:35 2026 GMT
Not After : Aug 15 16:01:35 2026 GMT
Subject: CN=eec147f2100684c0c2f6cb2f1f0206374c6f8b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:5e:ad:13:aa:fc:2d:28:58:91:32:9c:88:
db:cf:f7:d9:54:c9:4f:b3:72:06:ac:73:0d:a4:0c:
8f:04:88:8b:f2:93:0f:3a:73:8b:83:4b:f8:47:46:
71:78:68:4b:97:92:5d:9c:34:a2:7b:0c:72:75:b6:
9b:c7:b6:2f:ba:17:e2:0c:db:cc:b7:78:d9:65:c7:
cf:05:29:d9:61:82:eb:64:0c:c7:91:62:a9:42:e5:
54:ef:2d:40:b9:66:41:a9:b8:34:18:71:e1:d6:ae:
88:72:4c:d4:25:fa:2e:b6:82:36:15:00:26:17:de:
13:97:a6:ce:28:a4:65:0b:65:8e:46:9b:d7:75:ef:
03:18:99:05:b5:52:a3:d9:ed:44:93:b0:19:8b:4e:
71:91:78:52:17:79:2a:ee:a0:53:cf:c9:cb:83:54:
d5:40:bf:09:62:d8:f8:9d:cd:2c:8f:94:76:e6:b5:
69:85:a5:f6:62:34:a5:63:3a:7f:fe:a1:2f:9e:f3:
21:df:a7:6b:e9:ee:64:22:34:92:e4:be:be:44:ab:
dc:8e:53:ef:8a:9b:8c:3b:93:86:fe:6d:ac:53:4d:
7b:cc:92:fd:29:5f:21:9b:e1:48:70:64:f3:4b:a3:
7d:a1:e7:6f:7a:46:0f:66:fd:3f:55:ed:f6:c4:c2:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C1:47:F2:10:06:84:C0:C2:F6:CB:2F:1F:02:06:37:4C:6F:8B:6B
X509v3 Authority Key Identifier:
keyid:D2:38:6B:ED:83:B6:45:A2:BA:E1:38:9F:53:D9:65:7D:91:9E:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jhr7YO2RaK64TifU9llfZGedtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ee:91:56:bf:b8:6e:53:a5:79:72:c7:a4:8c:67:bd:b9:63:
e9:c3:70:57:91:62:8b:bd:52:50:a9:fb:7f:e2:77:f4:4a:cb:
db:60:55:1a:7c:f2:4c:c3:ac:e9:cc:14:13:08:17:6e:1a:b9:
4c:a2:a4:51:e7:90:5c:3c:9f:51:2c:0d:2a:e9:59:0b:bb:87:
64:45:67:10:3f:6e:ba:ed:14:ff:be:ac:f2:57:6f:5b:80:07:
a7:a2:bf:71:87:9d:9c:77:20:6d:6d:5a:38:e3:0a:c9:0c:ed:
49:50:a8:c2:e7:5a:ad:9a:3f:45:f7:e7:40:c7:bf:ea:88:39:
15:c4:93:eb:2b:85:4b:de:dc:fd:f9:f8:33:a9:21:ec:28:20:
e2:2d:c0:47:af:bd:38:19:08:38:74:7b:99:59:72:a3:c9:63:
03:73:c6:7c:d6:ff:b5:9f:56:7f:39:25:b6:9f:33:bb:a5:da:
59:4a:fe:d0:90:87:c7:f1:52:34:89:95:6a:92:37:5d:7e:e2:
84:92:1a:b4:59:48:7c:24:f9:08:b1:9e:1e:59:4d:58:c1:a0:
63:65:35:13:52:c3:f5:99:ba:09:50:3e:15:3c:42:c6:74:3a:
95:86:68:63:e3:7e:a3:15:65:52:d7:04:dc:be:f9:cb:40:b4:
62:a7:84:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:12:48 2026 by rpki-client