Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
File: r0E_0q2eJchLwLWeYIpkNmPmu2g.mft (raw, json)
Hash identifier: s3xyKqiNtni0vXNIEKXeQKq3ikcpb6+uLPdOI2Yo+HQ=
Subject key identifier: 2D:20:57:04:7D:EB:64:90:71:CA:FB:61:4F:AD:E9:D4:A3:5C:F9:93
Authority key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
Certificate issuer: /CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Certificate serial: 019FA907357BE8DA151FE22C46B9D51DE423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
Manifest number: 0ADD
Signing time: Tue 28 Jul 2026 14:00:49 +0000
Manifest this update: Tue 28 Jul 2026 14:00:49 +0000
Manifest next update: Wed 29 Jul 2026 14:00:49 +0000
Files and hashes: 1: ij8sL7rYXUnVMlMrRsM_4bG7Zr0.asa (hash: aNABLeKKnKSQskOlM8pQebh0OzTg++9V8UoS1kZ0elE=)
2: n4T_7jQ4VVF7FkHyhaU0P-AIFys.roa (hash: txUNJivQakynCmq8XiBFMte1p7rhG0wBL1AKIlbWKds=)
3: r0E_0q2eJchLwLWeYIpkNmPmu2g.crl (hash: 3GmWt/y0nrfc+0ulu9wtpaDoM5U746OoRjkRSQBQB5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:35:7b:e8:da:15:1f:e2:2c:46:b9:d5:1d:e4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Validity
Not Before: Jul 28 14:00:49 2026 GMT
Not After : Jul 29 14:00:49 2026 GMT
Subject: CN=2d2057047deb649071cafb614fade9d4a35cf993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:df:68:7d:52:b2:44:26:51:9d:b5:25:a9:78:
f2:f6:a9:6b:8a:bd:b0:74:a0:19:9b:34:85:52:78:
b8:33:80:2b:c1:0e:f6:48:6b:b5:f2:25:f9:4e:9d:
85:e0:37:b7:72:e3:92:af:7f:72:eb:df:fd:7e:f2:
03:7e:9f:c1:52:75:04:89:f9:6a:2c:39:db:8d:c6:
ce:3b:60:a3:6c:e8:9f:18:75:80:95:30:3c:26:f6:
41:25:c5:79:55:e9:4e:54:57:63:7b:bc:ac:ec:84:
63:41:52:cc:0d:a1:64:e8:bd:82:33:4b:68:f1:89:
98:b3:d2:e9:ae:34:b9:23:f0:9f:d5:31:1f:df:61:
96:fc:27:a6:8e:ad:98:9c:8f:29:94:8a:d9:a3:3e:
48:09:49:73:f7:b5:40:bd:ad:2c:dc:7c:4b:77:a0:
92:20:d7:d6:c2:40:8f:4e:e7:f8:0e:15:b5:65:a6:
c3:63:64:de:6a:1f:b8:a8:ce:5d:b5:79:0a:13:a6:
2b:41:36:2f:b5:2c:52:17:9d:54:7d:f8:df:b4:b8:
c6:91:f3:b0:5b:63:8d:fa:b0:2c:57:8c:73:e9:cd:
de:31:ee:b6:82:da:ee:3f:b5:14:8a:b4:f9:08:a7:
84:57:3b:98:97:90:0a:9a:f0:c8:25:59:4f:3f:85:
c3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:20:57:04:7D:EB:64:90:71:CA:FB:61:4F:AD:E9:D4:A3:5C:F9:93
X509v3 Authority Key Identifier:
keyid:AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:41:04:43:47:a4:fe:81:80:3e:5a:80:24:6a:74:e5:5a:a1:
91:2b:68:03:71:c2:14:eb:1f:a6:39:90:d6:0d:4d:2c:40:86:
b6:88:33:24:b6:19:20:43:ac:7c:3d:7b:cf:c5:21:85:79:d9:
f7:59:7d:1d:58:79:95:b8:dc:d4:81:a5:e8:ce:ea:ba:fd:45:
e2:0e:36:19:71:4d:6c:c9:82:eb:e1:22:45:7e:cb:7e:58:f9:
45:9c:ca:ef:8c:30:c2:08:57:74:10:c5:f9:6e:70:b5:91:79:
53:61:c3:34:b3:9e:89:89:77:b3:a4:69:d4:46:e2:c6:f6:19:
6f:72:64:59:b6:f8:bf:2d:4b:ee:d5:86:7a:1b:59:bf:41:f0:
fb:7e:84:9d:07:87:59:0d:6d:89:61:c5:1d:38:07:68:f8:28:
5c:0d:bc:b5:bc:3b:80:6c:ae:33:4d:46:54:f1:73:18:b2:f7:
be:24:89:d6:0f:b5:16:d2:f4:4d:10:30:08:04:79:04:7e:39:
be:d4:ad:80:50:b7:24:c7:51:f7:a7:70:dc:74:66:66:d7:32:
0a:1d:89:79:1b:b3:3c:5e:31:5a:4d:c2:dd:d6:b6:5a:c2:13:
41:ba:15:35:1c:8d:bc:ce:86:84:5d:df:3d:9b:8b:b5:c7:62:
74:31:49:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:10:03 2026 by rpki-client