Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json)
Hash identifier: QajaHZCjfyXGdzkthumDM5cvhZLanRhLPiBjpGouFMw=
Subject key identifier: C1:CC:E9:A9:D2:1A:D3:86:68:91:04:02:1F:60:9F:94:B7:6B:80:3C
Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f
Certificate serial: 019FA9E2B4FFFF92D2E97241B0D9B8077F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
Manifest number: 08EB
Signing time: Tue 28 Jul 2026 18:00:34 +0000
Manifest this update: Tue 28 Jul 2026 18:00:34 +0000
Manifest next update: Wed 29 Jul 2026 18:00:34 +0000
Files and hashes: 1: 8SAch57AMOQRbiAz1pknxEq8_AE.roa (hash: dOCl4oMRadim0zorBGeK3Z3XhSzd3Cim0jIw4uxvw28=)
2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: Y5ccWP/ACqjJpTcXPUGiA3mV4LnyzojPHnuU5EeT2W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:b4:ff:ff:92:d2:e9:72:41:b0:d9:b8:07:7f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f
Validity
Not Before: Jul 28 18:00:34 2026 GMT
Not After : Jul 29 18:00:34 2026 GMT
Subject: CN=c1cce9a9d21ad386689104021f609f94b76b803c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:df:ce:36:56:f2:ca:4b:1b:31:cb:4b:1b:a2:
15:31:11:0f:e6:ec:6f:9b:43:40:7e:5f:86:c9:b2:
5d:71:07:f7:37:ee:05:10:54:d5:4a:04:29:b9:8c:
46:d3:a4:0c:6d:37:a7:2e:31:db:7b:7a:cb:81:42:
90:95:d3:92:0e:da:21:27:f9:53:6d:e5:04:89:1d:
88:85:ea:28:b0:07:82:30:64:14:f6:f9:e1:24:d4:
84:6a:85:4e:d9:7d:73:80:4c:bc:65:a8:af:44:ad:
f1:d8:6d:d5:b6:bd:af:22:cf:d8:58:ed:a7:95:24:
ef:33:ab:59:c6:f8:36:ca:a8:d7:52:49:32:99:48:
70:9e:0e:fd:9b:ff:3a:2e:17:1a:1d:b9:eb:72:05:
53:b2:7a:78:2b:e2:d4:79:10:82:7f:84:67:4b:b2:
10:3e:9e:8f:d2:0d:97:e1:7d:54:44:bf:d3:85:4d:
1d:7c:8b:25:cf:06:50:47:e4:85:3c:8e:f6:be:61:
b9:66:ae:c8:ed:30:24:a9:eb:d7:ab:90:27:1d:38:
be:99:f2:71:74:c2:7c:7f:b7:2e:aa:67:44:73:8f:
0f:d8:d2:aa:d1:e8:cd:e9:8b:56:c5:3c:4c:d6:d3:
4a:69:c5:ba:58:1a:6a:4b:4c:04:2c:13:19:83:d2:
46:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CC:E9:A9:D2:1A:D3:86:68:91:04:02:1F:60:9F:94:B7:6B:80:3C
X509v3 Authority Key Identifier:
keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:5f:53:81:da:0a:39:13:ae:0f:c5:80:8b:41:32:85:54:99:
c7:3b:2d:1e:69:6b:a6:ee:65:91:5a:43:15:ed:5d:6d:c4:95:
5c:ee:52:93:ff:42:18:a2:6a:2e:a3:e6:b2:40:d7:15:e6:bc:
dd:44:32:5d:82:e2:26:50:be:76:bf:29:5e:eb:49:07:01:79:
77:ee:13:04:f4:c3:1a:09:81:d0:d8:02:63:01:3f:56:c5:f4:
f5:8b:03:e8:73:1d:87:4c:75:02:da:3e:22:2a:a7:e9:2f:03:
65:ef:ec:d7:2a:a0:68:00:da:d7:15:8a:a2:4f:e6:0e:38:b5:
c9:58:44:34:e3:ea:f0:15:af:cc:4d:6e:08:3b:20:07:2c:8a:
b3:c4:a8:e4:87:3a:1a:a1:05:a8:f8:4c:a8:0c:e5:47:16:f9:
2e:6b:19:23:53:41:67:9b:fc:97:c5:d4:4e:d1:20:d6:53:fe:
1f:f0:a5:1a:d3:7f:3c:ae:eb:ab:a7:c8:af:29:ff:65:ce:53:
55:d9:17:db:a6:e5:5a:46:a4:92:ed:4b:21:04:22:b7:c2:e3:
97:74:7e:81:f8:76:b9:b0:77:92:7c:41:d8:a1:21:67:e6:64:
6f:37:8a:af:fd:d5:fb:7b:54:79:36:52:b5:7e:fb:12:52:91:
95:81:c7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:35 2026 by rpki-client