Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
File: Jo0Q0QndkSVchN1iMHZBACN0_Do.mft (raw, json)
Hash identifier: RYrsnqF7u0vRGav5Bt2D/4vGDmPmuxwroUCS8aDhu/o=
Subject key identifier: 5F:8C:55:7F:F4:BC:F4:12:02:17:02:10:2A:D7:AD:5B:A9:48:34:11
Authority key identifier: 26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
Certificate issuer: /CN=268d10d109dd91255c84dd62307641002374fc3a
Certificate serial: 019D9886B4BEE9D892DB43D48CBEC8631265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
Manifest number: 0FB7
Signing time: Thu 16 Apr 2026 23:00:57 +0000
Manifest this update: Thu 16 Apr 2026 23:00:57 +0000
Manifest next update: Fri 17 Apr 2026 23:00:57 +0000
Files and hashes: 1: Jo0Q0QndkSVchN1iMHZBACN0_Do.crl (hash: DjZ935B8L05uCMnBNXpzgK2l/8lNKTa1NFqgvTRj4Gg=)
2: RY3gtGJUikJjvAv0lx45qrDHyp0.roa (hash: 76j4Lek2Mb/IIJEFcGb75gTBWRvx5a0x7KTV09dxAg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:b4:be:e9:d8:92:db:43:d4:8c:be:c8:63:12:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268d10d109dd91255c84dd62307641002374fc3a
Validity
Not Before: Apr 16 23:00:57 2026 GMT
Not After : Apr 17 23:00:57 2026 GMT
Subject: CN=5f8c557ff4bcf412021702102ad7ad5ba9483411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:f0:ec:61:90:cc:e1:05:e2:ab:47:28:ff:
17:d7:cb:69:54:f8:f6:91:4e:ae:94:d1:de:85:db:
b9:f7:25:b2:ef:2e:56:a2:f8:24:6f:69:4a:bf:84:
6e:50:9e:36:ae:44:8f:e1:0f:b8:c0:85:41:a4:d0:
9d:5d:9e:38:21:e4:b9:ab:25:70:84:af:93:67:44:
89:84:8e:35:ba:5f:d0:01:04:e4:f0:3a:a4:91:03:
7c:30:29:b8:3c:86:50:7f:f8:90:4f:10:50:c5:1a:
5c:2a:cf:07:a1:6c:63:7c:10:3a:ae:7b:98:06:db:
b1:82:cb:a0:0e:c8:f4:9f:0e:c8:dc:81:cb:3f:7c:
21:14:d0:11:4f:6d:00:e4:8d:03:c9:c0:86:7f:6c:
30:21:bd:21:64:91:60:6a:0a:3c:f4:9d:86:1b:1b:
e8:f4:9a:9d:b3:cc:0e:46:d3:2e:70:b8:02:f7:10:
db:fa:d5:bb:51:50:5b:b1:c0:e3:e0:59:32:74:82:
26:8f:d7:8a:8d:45:9d:03:31:a1:d0:d3:0c:0e:fe:
28:8b:0e:1f:54:06:09:8b:52:11:93:0d:1d:67:fc:
85:1e:f7:6c:71:4d:9b:68:c2:11:19:8b:f5:34:a7:
3c:71:4e:83:1b:91:11:3b:a0:4e:e3:51:00:d5:50:
c6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8C:55:7F:F4:BC:F4:12:02:17:02:10:2A:D7:AD:5B:A9:48:34:11
X509v3 Authority Key Identifier:
keyid:26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:41:d9:db:c8:05:d9:f2:73:11:ec:26:7e:a6:51:07:53:b2:
fb:ef:d7:28:55:9f:c2:af:9c:be:56:99:e4:6c:03:2b:c7:49:
cb:1e:8b:10:c7:1d:c3:30:f6:75:89:1a:a1:44:e5:bd:89:90:
45:18:2d:8e:1a:e6:fa:6f:79:db:1a:44:85:84:86:b0:3e:e2:
93:78:0d:9c:79:df:11:ed:7f:fb:02:26:6f:c9:10:a7:60:ba:
29:5c:fe:2a:3b:cf:ea:41:e5:1a:79:53:1b:9b:57:d3:6d:eb:
46:41:ce:c4:aa:9e:cb:2c:17:84:14:14:33:27:67:47:6c:6c:
04:c8:10:fc:c9:c7:ef:64:c8:0f:7f:55:6b:74:50:3f:a6:7f:
00:69:d0:3d:91:f6:fc:69:9b:4b:f9:02:86:e5:6d:4b:1e:c8:
bc:62:33:a7:41:8c:92:9f:48:6e:35:02:94:3a:4d:6a:ec:61:
26:35:53:1a:69:11:a4:f6:80:6d:ac:17:28:7e:9b:57:24:50:
e2:a1:95:44:0c:74:d6:b9:73:86:82:35:86:68:4d:c5:15:70:
59:34:10:a7:2b:c8:5d:a1:5d:ed:01:19:68:87:c6:62:af:e4:
ae:44:54:3e:8d:07:1e:60:11:d5:40:a2:4c:bf:88:3f:67:44:
c9:b1:70:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:39 2026 by rpki-client