Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
File: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft (raw, json)
Hash identifier: rkJ36As4GC11vV4JlO+CE6u6KFORE0DXoYeraAPYfgI=
Subject key identifier: 0E:87:C0:61:88:32:0B:C3:EA:74:72:73:A7:1E:E0:3C:EA:9D:8B:67
Authority key identifier: 95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
Certificate issuer: /CN=951bb490e09df1467e4eec43d8f20484cee839fe
Certificate serial: 01A0C3D69CBC8F0CD3746B51B6AF13FC4E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
Manifest number: 0EE7
Signing time: Mon 21 Sep 2026 12:00:16 +0000
Manifest this update: Mon 21 Sep 2026 12:00:16 +0000
Manifest next update: Tue 22 Sep 2026 12:00:16 +0000
Files and hashes: 1: kE66fhDE4xBKZgP00aDSZ5wUo8Q.roa (hash: Xz3m7rpESDDSay6iugLcdgSAsdxY3IOPYIq5I7x/X5M=)
2: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl (hash: jJtiFKAUcaFxDeOjG0jYxj3KDcHkimyeAQzLt86PebE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:9c:bc:8f:0c:d3:74:6b:51:b6:af:13:fc:4e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951bb490e09df1467e4eec43d8f20484cee839fe
Validity
Not Before: Sep 21 12:00:16 2026 GMT
Not After : Sep 22 12:00:16 2026 GMT
Subject: CN=0e87c06188320bc3ea747273a71ee03cea9d8b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:83:bb:d8:08:be:b2:dc:8b:33:cb:50:bd:
cf:69:ad:0f:8f:ee:17:79:0c:9a:b1:1c:52:b9:27:
a7:72:ee:f0:a7:e9:a4:49:c0:e7:36:2a:3f:8e:cf:
55:ed:1a:86:30:9d:bf:3f:a8:de:07:1f:ae:34:40:
2c:0b:46:83:5a:03:22:0a:13:a5:99:78:6e:60:78:
dd:c9:24:6a:b3:d2:2e:cb:87:1f:49:97:13:0b:5b:
ea:14:7b:2d:40:a1:4b:ea:f0:3c:16:c5:a0:e5:40:
0b:be:44:c7:11:29:c2:be:ba:b5:2a:3a:23:80:c1:
f2:36:b4:48:09:a0:47:75:bd:9e:6a:92:26:6c:03:
26:9e:7e:1b:c4:fb:b6:af:7b:fb:2e:21:a4:75:a0:
6e:5b:54:52:5b:d4:1f:d9:e2:51:4f:12:c3:72:e5:
2b:30:b0:5d:51:87:22:ac:8c:d1:8d:69:29:78:57:
df:04:5b:2c:99:09:bc:86:3d:cc:79:b7:d9:69:64:
d3:46:08:6c:f2:8a:35:8f:fe:53:c2:e4:41:a4:f3:
f0:03:5b:ff:92:f9:3d:2b:e5:a7:5d:d1:d3:7d:bb:
dd:ea:11:4a:6f:88:3d:2f:f4:5c:af:07:66:95:0f:
82:4b:64:26:41:76:f9:3c:d0:67:bf:46:90:be:f9:
80:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:87:C0:61:88:32:0B:C3:EA:74:72:73:A7:1E:E0:3C:EA:9D:8B:67
X509v3 Authority Key Identifier:
keyid:95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5a:e8:03:59:03:43:53:82:94:6a:31:bb:b0:dc:ef:54:7d:
65:f9:75:8a:99:b9:93:fe:7e:6b:d1:76:21:60:f3:66:6b:6d:
9d:0b:0a:f8:ff:2e:ee:3c:b6:e7:4a:d8:40:24:62:a9:96:60:
aa:ff:b5:5f:af:a4:84:14:fc:ff:63:6c:2a:e0:2b:27:13:22:
f7:c5:72:d4:43:dd:0f:19:7c:42:2c:9f:69:f0:aa:27:19:66:
d0:8a:71:25:93:e0:25:ed:f3:c7:b1:1c:66:ca:26:ad:bc:5d:
bf:e9:95:dd:f5:ab:90:0c:96:4f:03:a4:c0:13:e7:0f:01:d1:
ba:fd:54:02:5d:a7:bf:ee:b1:6e:c3:35:5f:e5:0c:c1:aa:a2:
4f:e1:cf:16:fb:37:00:4b:c0:da:16:3f:c7:ad:06:1f:f9:1c:
7f:df:d8:c8:55:65:39:e4:ad:9b:69:13:6a:e1:f2:bf:09:fc:
40:ba:9c:78:c1:5b:37:61:b9:ef:f8:26:da:d1:04:1b:37:2a:
c6:7c:1e:c7:b2:be:78:1d:ae:b8:c9:46:c0:25:68:de:95:90:
97:e3:5f:1b:9f:7a:56:2e:5e:45:41:31:a7:99:5e:36:7f:85:
ca:74:d9:d9:7a:e5:8e:bb:c4:e0:40:0f:3c:f3:32:04:ab:b8:
4d:51:5a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:02:06 2026 by rpki-client