Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
File: 0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json)
Hash identifier: 3bjyUR69EuB/+I1L+CHa6hPqVRzENm/PY0RjjShjqP0=
Subject key identifier: F9:69:B6:77:EC:73:1C:71:2C:C8:76:80:8D:13:29:68:5C:03:EE:8F
Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
Certificate issuer: /CN=d234798e0712f155292d3211f7c447223ccd49ac
Certificate serial: 019F9F5EE1FF09BBE7B8D1036C16CDE36672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
Manifest number: 16EE
Signing time: Sun 26 Jul 2026 17:00:23 +0000
Manifest this update: Sun 26 Jul 2026 17:00:23 +0000
Manifest next update: Mon 27 Jul 2026 17:00:23 +0000
Files and hashes: 1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: nmv8SSHGoKeqxTAOGUcYwbAPaWGpPIyr0YKNKwKmmNk=)
2: RjK8oLQkpJRzAeEdXg6vAbqYOYY.roa (hash: Mnx3rs/opPeBY8JJ1GG9XmHg+1e4VxaebybsYn1/rbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5e:e1:ff:09:bb:e7:b8:d1:03:6c:16:cd:e3:66:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac
Validity
Not Before: Jul 26 17:00:23 2026 GMT
Not After : Jul 27 17:00:23 2026 GMT
Subject: CN=f969b677ec731c712cc876808d1329685c03ee8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2c:28:1b:19:25:aa:3a:a4:0a:c3:e1:e9:a3:
e2:53:c6:43:dd:37:eb:37:41:a2:37:1d:0d:ba:cc:
d1:81:cc:ec:67:da:f1:8a:65:48:41:a4:82:b9:31:
01:34:ab:88:d8:1b:da:a2:9a:95:30:cf:9f:c8:87:
26:20:52:1d:d4:e5:32:4b:fc:5e:d2:a1:98:92:63:
f8:2a:e1:f7:b5:6d:42:57:93:d4:28:8a:c9:65:fd:
5a:d8:b3:23:40:08:48:36:c4:41:80:b0:38:af:12:
5c:21:8b:de:b6:80:e0:5b:71:17:de:07:7d:b4:eb:
5d:67:6d:bf:69:1b:6e:bd:a3:68:76:2c:20:77:74:
a2:27:a0:d4:13:36:1f:bd:0d:9b:72:cc:3c:81:b1:
df:38:9b:6c:8c:6c:04:c0:65:ef:19:8b:0a:e0:ec:
d3:a3:0e:86:39:f7:82:03:19:08:79:c7:b5:d0:7d:
6a:86:45:13:85:db:e5:7f:e1:9a:4d:7e:d3:98:b6:
86:27:01:2a:6c:f6:07:77:ad:7e:74:46:79:3f:fa:
88:5d:30:b7:c4:24:0b:3f:38:11:7c:c8:cd:57:1c:
92:54:b1:fa:a5:95:d8:da:7a:07:42:ff:24:a2:21:
7d:e1:4b:c3:1e:19:88:7e:6a:11:fe:cc:a6:b2:95:
f6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:69:B6:77:EC:73:1C:71:2C:C8:76:80:8D:13:29:68:5C:03:EE:8F
X509v3 Authority Key Identifier:
keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:36:f8:6a:58:56:ad:47:fb:57:1e:b2:5e:80:7a:fc:78:c8:
f9:aa:01:fe:b5:0e:13:d0:61:37:86:32:21:b3:b5:ac:43:ac:
b1:9e:03:af:8d:37:bd:9e:90:e1:55:10:ad:38:ba:ea:69:b7:
93:55:fd:86:a9:a2:84:26:9c:dc:27:38:21:03:a8:11:71:5f:
ae:28:19:5a:9b:3c:98:f4:b2:03:69:da:ac:2f:68:00:c4:9f:
98:d3:54:ad:11:80:f5:2d:c0:39:8c:bb:fd:4e:5a:73:1a:23:
0f:a7:21:fa:b7:6f:e4:43:2b:e7:56:8e:9d:c5:d5:19:6c:b1:
be:91:e2:2e:3d:10:03:32:a9:9b:3c:86:a1:82:a2:b7:3b:8c:
50:93:a4:32:a2:3a:5b:49:ea:47:c9:8b:9b:99:77:60:bc:c9:
6e:df:cc:c6:a9:e5:46:55:9d:af:0d:d8:ea:be:5d:ca:65:fa:
33:04:6e:60:71:e1:ec:67:23:aa:44:6b:0e:ac:07:bf:3a:bf:
65:cf:46:20:be:b4:70:e8:00:85:2b:e3:64:f8:16:1a:77:13:
27:60:ff:63:57:4c:de:c4:17:d0:2a:6e:2d:42:bf:35:08:52:
06:bc:56:53:bc:93:f1:d7:23:a0:ab:9f:cb:bf:6f:f8:5c:e7:
bc:d0:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:32:52 2026 by rpki-client