Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft
File: 0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft (raw, json)
Hash identifier: bIa0CYL0UtfV1A2sxIeH5EJNJx+KbkZQc9tgGEKG2ss=
Subject key identifier: 18:88:BD:C3:B7:5A:73:E6:59:C2:20:BC:05:5A:97:AE:42:6B:A5:EB
Authority key identifier: D0:42:5D:25:4D:FF:F3:E1:2A:96:72:93:08:43:FC:0E:9A:BC:90:62
Certificate issuer: /CN=d0425d254dfff3e12a9672930843fc0e9abc9062
Certificate serial: 019FF9ECBFCEA2B36B2A94D2851802C0425E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft
Manifest number: 0108
Signing time: Thu 13 Aug 2026 07:01:09 +0000
Manifest this update: Thu 13 Aug 2026 07:01:09 +0000
Manifest next update: Fri 14 Aug 2026 07:01:09 +0000
Files and hashes: 1: 0EJdJU3_8-EqlnKTCEP8Dpq8kGI.crl (hash: 6eiZCWk1KAxL+wU9R2px0QQagvUE7a6CVkXEQ3gFyeU=)
2: IaPceu7VrN0Ci4QLf1Y22DXK38c.roa (hash: DDTyYVit6V7bbPxJ+s9WJ7GGlOrY5GhIJkW0KajJFr4=)
3: OFzeLQp8ZtYhjFWlwJy_x_KM2LY.asa (hash: E0getpcGl6J6ZvnmJSNfKZfGDdp3vLQMHkNwq1dR66Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:ec:bf:ce:a2:b3:6b:2a:94:d2:85:18:02:c0:42:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0425d254dfff3e12a9672930843fc0e9abc9062
Validity
Not Before: Aug 13 07:01:09 2026 GMT
Not After : Aug 14 07:01:09 2026 GMT
Subject: CN=1888bdc3b75a73e659c220bc055a97ae426ba5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7b:87:c9:30:d0:a0:ce:d8:ec:51:4b:0f:dc:
db:b8:4c:27:17:6a:b1:78:47:2d:6b:a3:9e:25:cf:
94:a1:da:d9:88:78:ff:d5:b2:8d:48:42:bf:4e:2b:
f9:1e:47:18:04:ad:90:5d:06:c6:c3:e2:b7:cd:65:
a5:47:cf:ae:90:89:3e:d3:63:00:6b:b9:07:57:08:
ff:9f:a8:b1:df:a4:7c:1d:a3:8d:44:7b:7f:d0:7c:
e1:97:52:85:be:71:94:c8:90:46:fe:a2:22:ec:a9:
7a:40:3d:51:46:cb:16:8c:81:ce:94:94:09:69:e9:
d2:bb:5b:7e:15:0d:cb:0a:83:9b:08:cf:11:35:a4:
b8:7f:8a:c0:f0:34:18:ab:27:ec:8d:68:5c:50:b6:
b2:8f:2e:ec:f9:fd:e4:d5:d8:df:9f:20:0a:01:88:
6a:b9:19:90:ec:e0:3f:c1:7e:7a:af:d9:ec:66:e6:
06:2c:1f:01:bd:73:39:bd:01:af:64:18:77:35:6c:
4a:c6:f6:05:6d:98:54:4b:37:39:d9:7b:6d:52:73:
1d:98:eb:56:42:d1:dd:ea:78:e6:b4:ab:38:f0:89:
9e:03:5f:08:28:28:6c:13:b7:42:b1:b1:df:6c:86:
b6:5d:e2:6e:b5:3d:03:0c:1c:b9:d4:61:60:78:fc:
db:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:88:BD:C3:B7:5A:73:E6:59:C2:20:BC:05:5A:97:AE:42:6B:A5:EB
X509v3 Authority Key Identifier:
keyid:D0:42:5D:25:4D:FF:F3:E1:2A:96:72:93:08:43:FC:0E:9A:BC:90:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:21:e1:38:75:7e:24:4c:0c:19:c9:d5:57:ae:96:a5:79:1b:
d6:73:81:bf:c4:19:1f:aa:54:84:e9:67:99:4b:00:3f:8a:64:
a2:09:51:17:56:34:73:41:3a:72:fa:d6:b0:2d:d1:d1:74:8a:
14:a2:09:e1:be:96:a0:97:61:93:a6:94:27:7b:ec:f4:ba:27:
53:61:e8:78:97:7f:f8:33:f8:38:b2:6b:1f:a6:a2:15:e3:e0:
ec:df:c4:0d:44:da:07:77:6b:06:d1:91:74:96:b9:bc:c0:84:
81:03:ee:0b:18:cc:cd:ff:f7:14:93:e6:cb:fa:40:44:f4:e3:
7e:18:03:88:95:5e:5d:2e:df:d9:48:02:0d:a5:3f:3f:c2:32:
97:4b:ee:ac:22:c7:64:f0:6f:62:0d:d3:cc:d8:c1:98:5f:d1:
24:47:00:ab:b3:a9:7d:9f:1c:0e:1a:fe:19:54:5f:0d:3a:f1:
79:c4:43:89:6e:e3:58:72:cb:1e:b3:99:4c:15:5c:91:de:07:
e7:41:c6:04:5f:cb:6e:0b:a4:48:51:cb:95:71:84:73:0b:d3:
fe:a3:18:51:fb:b5:b4:7d:7e:dd:17:74:53:7b:ce:1f:20:3c:
4b:b0:b3:a8:cc:ea:93:aa:18:03:4d:e6:87:e1:f6:22:3c:a9:
75:f4:23:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:48 2026 by rpki-client