Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
File: 0jhr7YO2RaK64TifU9llfZGedtE.mft (raw, json)
Hash identifier: yHheWhpOPdNeumNoUmF94ll8Sa6xbOf/Pj84HogUJWs=
Subject key identifier: 9C:29:67:58:7F:51:43:FB:81:B5:07:E1:35:5D:18:59:D0:85:08:A2
Authority key identifier: D2:38:6B:ED:83:B6:45:A2:BA:E1:38:9F:53:D9:65:7D:91:9E:76:D1
Certificate issuer: /CN=d2386bed83b645a2bae1389f53d9657d919e76d1
Certificate serial: 019FA82B8F4E951C815E894F928B40EFC0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jhr7YO2RaK64TifU9llfZGedtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
Manifest number: 0D97
Signing time: Tue 28 Jul 2026 10:00:54 +0000
Manifest this update: Tue 28 Jul 2026 10:00:54 +0000
Manifest next update: Wed 29 Jul 2026 10:00:54 +0000
Files and hashes: 1: 0jhr7YO2RaK64TifU9llfZGedtE.crl (hash: 5euc3OF65399mX1e4ywupqEBDw/CJqN6XIjxs6UqLgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jhr7YO2RaK64TifU9llfZGedtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:8f:4e:95:1c:81:5e:89:4f:92:8b:40:ef:c0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2386bed83b645a2bae1389f53d9657d919e76d1
Validity
Not Before: Jul 28 10:00:54 2026 GMT
Not After : Jul 29 10:00:54 2026 GMT
Subject: CN=9c2967587f5143fb81b507e1355d1859d08508a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6c:f9:55:10:a8:72:23:5c:92:88:aa:40:eb:
95:aa:21:b3:0d:7b:27:64:7b:25:3f:02:e4:5e:fc:
51:2e:4c:cf:a4:f7:99:eb:38:17:89:14:7b:81:ff:
9a:79:d6:8a:43:25:7a:ad:f7:3a:89:cd:c5:46:d9:
75:9b:74:cd:c0:7c:4b:06:f0:57:f2:d0:92:17:f2:
c7:d9:3c:52:bf:0c:28:8a:5e:7f:6e:02:cf:5f:bd:
e3:47:f7:1f:40:73:b9:58:b1:ca:f9:d4:15:b4:da:
c7:46:c9:ab:b9:01:6a:c6:43:ee:f1:d5:89:b8:3b:
8d:18:69:4c:1c:ea:d0:1c:c1:b8:02:d5:c6:d2:7e:
22:3d:cd:4e:21:ec:cd:2a:70:8e:a7:3a:e1:3c:01:
0c:39:ae:bf:30:cc:ff:df:52:03:6a:16:27:53:ec:
1c:ee:c0:fc:16:a7:36:65:30:0a:cd:78:f2:93:f0:
c2:29:5d:cf:aa:a8:5d:8d:fa:f1:12:1a:ba:c9:6e:
63:fe:74:54:bd:83:20:00:68:6e:a9:27:24:ca:f6:
2d:90:0b:49:2a:bb:fb:c7:5f:0d:66:8b:3e:31:99:
48:fa:fd:98:ea:c0:2f:8f:89:7b:92:65:52:6a:f7:
66:bc:cb:3d:3f:5b:3a:f0:aa:d4:c6:4d:78:a6:6a:
20:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:29:67:58:7F:51:43:FB:81:B5:07:E1:35:5D:18:59:D0:85:08:A2
X509v3 Authority Key Identifier:
keyid:D2:38:6B:ED:83:B6:45:A2:BA:E1:38:9F:53:D9:65:7D:91:9E:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jhr7YO2RaK64TifU9llfZGedtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c9:89:fe:0e:4b:c2:90:86:73:46:aa:db:05:76:86:f3:8c:
f2:d6:33:55:3e:5c:1f:df:fb:28:a1:72:34:bc:23:f7:b9:6f:
31:45:57:80:28:b4:4a:ca:66:36:d2:44:94:2a:4a:8a:da:4d:
41:10:3a:7d:8a:9c:16:b3:45:38:88:5f:66:69:f1:1c:6b:54:
3a:ca:7a:bb:5f:9b:f9:ad:00:8b:03:c5:17:11:be:de:56:a7:
f9:3d:e5:b2:04:c8:44:49:e7:82:15:32:68:a8:5e:cd:74:62:
f7:e8:aa:61:d3:3f:2e:62:ee:28:4b:ff:32:d3:df:d0:61:e8:
72:36:4e:b5:8b:37:b1:03:d6:7d:dd:79:3c:53:36:11:75:42:
9b:48:92:9f:57:b3:99:33:54:e2:6a:ed:f3:0a:63:66:4d:a4:
d0:97:51:54:29:d9:5d:7e:81:07:90:33:ea:c0:0a:b8:f5:54:
cd:2a:94:da:a6:82:6c:bf:ee:3c:58:ce:42:13:99:61:25:fc:
a1:fc:9b:d5:f2:fa:a3:92:9b:96:25:87:2d:bd:3c:8b:6b:72:
c2:22:cc:f4:a9:c5:c1:d2:b3:03:74:8f:e7:50:00:10:1b:56:
88:1e:93:e9:44:a6:17:c2:d2:6e:30:b2:9e:87:8f:c4:72:a1:
27:c3:a3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:14:22 2026 by rpki-client