Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
File: 0jhr7YO2RaK64TifU9llfZGedtE.mft (raw, json)
Hash identifier: 4s3+Egvx2xFGjNizMZ5/ejPt1pAzjlwIPUL/EqbnySE=
Subject key identifier: FB:28:71:11:35:E4:D9:D1:20:6F:F5:E7:2A:DD:02:08:3C:99:5A:D2
Authority key identifier: D2:38:6B:ED:83:B6:45:A2:BA:E1:38:9F:53:D9:65:7D:91:9E:76:D1
Certificate issuer: /CN=d2386bed83b645a2bae1389f53d9657d919e76d1
Certificate serial: 01A1C4E868BF33BA7F8DF1B45B8E298C968D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jhr7YO2RaK64TifU9llfZGedtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
Manifest number: 0EAF
Signing time: Tue 10 Nov 2026 10:02:07 +0000
Manifest this update: Tue 10 Nov 2026 10:02:07 +0000
Manifest next update: Wed 11 Nov 2026 10:02:07 +0000
Files and hashes: 1: 0jhr7YO2RaK64TifU9llfZGedtE.crl (hash: /SqDnBnV8hnrq/TZAMZOWBBKqaXrq4qSaTu8S5otZV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jhr7YO2RaK64TifU9llfZGedtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 10:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:e8:68:bf:33:ba:7f:8d:f1:b4:5b:8e:29:8c:96:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2386bed83b645a2bae1389f53d9657d919e76d1
Validity
Not Before: Nov 10 10:02:07 2026 GMT
Not After : Nov 11 10:02:07 2026 GMT
Subject: CN=fb28711135e4d9d1206ff5e72add02083c995ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:de:2c:54:bd:91:98:c7:d0:99:65:9b:55:6d:
31:0e:3f:cc:e7:fe:03:fa:02:39:f6:5d:2f:8f:81:
46:fb:a9:65:25:74:6d:95:02:3e:d8:02:5d:a4:ec:
8d:73:54:05:fe:0e:76:1a:7c:5a:36:07:b5:2a:76:
0d:21:94:20:fb:e8:18:e4:94:4e:aa:8d:f6:58:8b:
dd:f3:8d:eb:5b:9a:93:23:98:bd:72:c8:6f:a1:78:
29:cf:34:88:b8:2d:41:92:de:49:bc:f8:67:58:01:
0b:f9:ce:76:a3:b8:5b:c2:bc:4f:93:fb:e9:ab:e5:
16:e2:dc:2c:18:7b:50:13:91:b4:23:df:e4:74:f3:
3b:39:1c:ee:e5:b1:c2:20:6e:50:da:55:cd:f2:20:
f6:db:7c:05:b2:47:c8:0f:99:92:38:f3:d3:0a:39:
4b:61:c7:ea:77:98:f4:24:74:87:7b:27:eb:17:dc:
be:5e:90:68:ef:97:b9:d3:76:06:b8:4d:77:c1:21:
1d:5a:8f:6c:6d:ad:e2:7a:dc:0d:07:12:af:5f:65:
ab:b8:74:42:28:34:d8:53:4d:30:4e:80:af:79:fe:
5d:da:c8:79:f3:bf:5c:63:8e:ee:46:da:28:97:73:
c4:50:b6:e7:2b:94:d7:7c:83:41:4b:f1:76:1e:a2:
e8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:28:71:11:35:E4:D9:D1:20:6F:F5:E7:2A:DD:02:08:3C:99:5A:D2
X509v3 Authority Key Identifier:
keyid:D2:38:6B:ED:83:B6:45:A2:BA:E1:38:9F:53:D9:65:7D:91:9E:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jhr7YO2RaK64TifU9llfZGedtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/563297-6056-4675-8399-03438351a369/1/0jhr7YO2RaK64TifU9llfZGedtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3e:df:64:44:f6:0b:75:e4:d3:11:45:6c:ba:a6:02:e9:95:
d4:74:ca:d9:6e:30:80:fa:db:99:56:cf:22:d3:39:e6:da:0d:
9e:52:3a:da:28:0e:80:62:56:48:d8:09:07:05:2e:87:ac:ac:
56:70:b1:24:f3:83:d9:17:cc:f0:b5:60:10:27:d8:50:27:7d:
74:13:90:4d:a6:f8:74:92:37:86:f8:c7:b5:f3:cc:69:42:15:
44:08:42:fd:90:76:2a:3d:12:82:c7:63:52:bf:32:d8:7a:ed:
07:ca:fa:26:a1:d8:9b:5e:3f:6c:15:9a:c5:e2:9a:a5:4f:16:
71:16:91:58:0c:f7:78:49:35:5f:66:30:45:db:20:89:b0:79:
7b:56:22:57:ed:18:b4:e7:ae:10:45:7a:19:d0:f5:00:03:2a:
19:39:0e:3b:63:ec:55:db:4f:5c:57:f4:e2:f1:8e:02:1e:e7:
98:6f:14:14:7a:ee:cc:0b:a5:db:08:b4:cf:71:61:a9:52:3d:
94:e9:49:99:db:cb:a6:35:81:73:0e:7c:ba:9c:38:81:41:d9:
c4:fb:6e:ec:d9:ab:d6:90:cd:51:03:de:c3:a8:10:76:c0:14:
7f:09:34:28:43:a6:47:f9:5e:f7:19:f6:73:b8:ab:61:c4:0a:
41:85:88:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHE6Gi/M7p/jfG0W44pjJaNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzg2YmVkODNiNjQ1YTJiYWUxMzg5ZjUzZDk2NTdkOTE5
ZTc2ZDEwHhcNMjYxMTEwMTAwMjA3WhcNMjYxMTExMTAwMjA3WjAzMTEwLwYDVQQD
EyhmYjI4NzExMTM1ZTRkOWQxMjA2ZmY1ZTcyYWRkMDIwODNjOTk1YWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t4sVL2RmMfQmWWbVW0xDj/M5/4D
+gI59l0vj4FG+6llJXRtlQI+2AJdpOyNc1QF/g52GnxaNge1KnYNIZQg++gY5JRO
qo32WIvd843rW5qTI5i9cshvoXgpzzSIuC1Bkt5JvPhnWAEL+c52o7hbwrxPk/vp
q+UW4twsGHtQE5G0I9/kdPM7ORzu5bHCIG5Q2lXN8iD223wFskfID5mSOPPTCjlL
Ycfqd5j0JHSHeyfrF9y+XpBo75e503YGuE13wSEdWo9sba3ietwNBxKvX2WruHRC
KDTYU00wToCvef5d2sh5879cY47uRtool3PEULbnK5TXfINBS/F2HqLouQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsocRE15NnRIG/15yrdAgg8mVrSMB8GA1UdIwQY
MBaAFNI4a+2DtkWiuuE4n1PZZX2RnnbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpocjdZTzJSYUs2NFRpZlU5bGxmWkdlZHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81NjMyOTctNjA1Ni00Njc1LTgzOTkt
MDM0MzgzNTFhMzY5LzEvMGpocjdZTzJSYUs2NFRpZlU5bGxmWkdlZHRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81NjMyOTctNjA1Ni00Njc1LTgzOTktMDM0MzgzNTFhMzY5
LzEvMGpocjdZTzJSYUs2NFRpZlU5bGxmWkdlZHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkz7fZET2
C3Xk0xFFbLqmAumV1HTK2W4wgPrbmVbPItM55toNnlI62igOgGJWSNgJBwUuh6ys
VnCxJPOD2RfM8LVgECfYUCd9dBOQTab4dJI3hvjHtfPMaUIVRAhC/ZB2Kj0Sgsdj
Ur8y2HrtB8r6JqHYm14/bBWaxeKapU8WcRaRWAz3eEk1X2YwRdsgibB5e1YiV+0Y
tOeuEEV6GdD1AAMqGTkOO2PsVdtPXFf04vGOAh7nmG8UFHruzAul2wi0z3FhqVI9
lOlJmdvLpjWBcw58upw4gUHZxPtu7Nmr1pDNUQPew6gQdsAUfwk0KEOmR/le9xn2
c7irYcQKQYWI/Q==
-----END CERTIFICATE-----
Generated at Tue Nov 10 20:36:48 2026 by rpki-client