Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
File: r0E_0q2eJchLwLWeYIpkNmPmu2g.mft (raw, json)
Hash identifier: WmyXb/8iKXjDV8msvvTyhRREv7rBibXGsbHXmQe+Scc=
Subject key identifier: 3C:FB:0C:87:94:4F:49:24:78:01:86:95:01:F5:08:93:6D:B0:67:09
Authority key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
Certificate issuer: /CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Certificate serial: 019CA869D162F08821DB94F0D4CF23C919F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
Manifest number: 094F
Signing time: Sun 01 Mar 2026 08:00:32 +0000
Manifest this update: Sun 01 Mar 2026 08:00:32 +0000
Manifest next update: Mon 02 Mar 2026 08:00:32 +0000
Files and hashes: 1: ij8sL7rYXUnVMlMrRsM_4bG7Zr0.asa (hash: aNABLeKKnKSQskOlM8pQebh0OzTg++9V8UoS1kZ0elE=)
2: n4T_7jQ4VVF7FkHyhaU0P-AIFys.roa (hash: txUNJivQakynCmq8XiBFMte1p7rhG0wBL1AKIlbWKds=)
3: r0E_0q2eJchLwLWeYIpkNmPmu2g.crl (hash: wSgkYpF/kPO5sMuQav8aK838py0fkMtzKiObzh8ens8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:69:d1:62:f0:88:21:db:94:f0:d4:cf:23:c9:19:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Validity
Not Before: Mar 1 08:00:32 2026 GMT
Not After : Mar 2 08:00:32 2026 GMT
Subject: CN=3cfb0c87944f49247801869501f508936db06709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:59:d7:43:f9:aa:fe:40:68:e1:e1:ef:d9:
c4:5c:46:32:35:9b:bc:1f:1c:b0:24:f4:b0:1e:a1:
d4:e0:6e:2c:b3:9a:83:44:b6:4b:72:7b:22:83:12:
cb:12:23:b5:42:52:26:18:f7:2e:53:14:5c:97:71:
b3:c0:90:d2:7e:5e:be:6e:7e:e4:25:a0:f7:58:f1:
99:1c:fd:99:66:4b:02:87:12:f9:63:8a:78:a2:31:
0d:4e:72:b4:0e:94:57:e1:13:2d:b7:79:ec:de:1c:
26:6f:f1:70:78:82:df:cc:53:de:42:59:18:3f:95:
a3:26:a1:bc:eb:45:87:45:66:e8:ab:e3:1e:52:aa:
56:3d:17:86:8f:f3:7f:bc:f9:84:b1:f4:56:5f:0b:
78:6e:c6:7d:78:e0:78:07:c2:62:db:86:93:dc:00:
3f:86:3a:86:8f:a3:40:12:59:99:36:02:47:62:00:
7b:87:40:fc:8a:d2:22:5f:03:97:71:02:66:17:59:
72:1f:da:92:e6:fc:fb:fc:a4:11:64:20:6f:a3:e0:
fd:67:2e:a6:98:69:37:bf:79:40:e4:22:e8:7a:00:
af:4d:40:0c:71:09:97:bf:f6:c9:94:51:e2:b2:6f:
37:78:43:8c:51:77:c2:4a:b2:d5:8e:77:41:b5:2d:
01:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FB:0C:87:94:4F:49:24:78:01:86:95:01:F5:08:93:6D:B0:67:09
X509v3 Authority Key Identifier:
keyid:AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:92:0c:c8:30:57:d7:0f:7b:36:30:36:8b:a6:ae:7c:6e:2e:
5c:f5:a3:45:c1:3c:e7:c3:95:0d:73:88:ed:67:bc:30:7f:8e:
b6:7c:64:e9:b1:23:b7:ed:ae:87:e0:8e:15:35:92:9d:77:0a:
7b:b6:ff:b0:a9:73:91:00:88:7f:f5:fd:f2:bd:9d:3c:3b:1f:
46:a5:48:d4:f7:51:98:2a:ab:bc:58:46:8d:26:92:37:74:f5:
db:ce:60:9d:a4:02:f9:4b:c7:3b:c3:cf:d6:f0:34:86:db:72:
aa:af:3e:6f:69:95:72:78:bf:5c:24:57:6b:61:bc:e1:1f:d7:
2e:93:91:0d:af:6a:85:1c:9a:24:f1:5b:ae:55:71:c4:58:07:
8c:0e:8f:12:b8:b5:06:e5:bc:f7:ab:7f:ca:9a:8e:4b:84:75:
17:f4:fc:5a:f4:77:22:80:ef:2f:1c:54:8d:6d:ce:fd:cf:b0:
b1:16:ee:db:eb:20:97:ff:6e:79:11:a6:6d:78:85:ee:12:c6:
83:96:69:ea:ad:8d:88:1c:43:cb:be:50:66:fa:f6:68:74:2b:
18:d0:b9:98:e1:a5:b0:1f:4a:98:b6:c2:8f:f0:e5:3c:b8:9f:
58:24:a1:49:f9:70:6d:64:07:5d:64:28:25:f2:91:8d:65:08:
8b:f4:eb:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyoadFi8Igh25Tw1M8jyRn0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNDEzZmQyYWQ5ZTI1Yzg0YmMwYjU5ZTYwOGE2NDM2NjNl
NmJiNjgwHhcNMjYwMzAxMDgwMDMyWhcNMjYwMzAyMDgwMDMyWjAzMTEwLwYDVQQD
EygzY2ZiMGM4Nzk0NGY0OTI0NzgwMTg2OTUwMWY1MDg5MzZkYjA2NzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2xZ10P5qv5AaOHh79nEXEYyNZu8
HxywJPSwHqHU4G4ss5qDRLZLcnsigxLLEiO1QlImGPcuUxRcl3GzwJDSfl6+bn7k
JaD3WPGZHP2ZZksChxL5Y4p4ojENTnK0DpRX4RMtt3ns3hwmb/FweILfzFPeQlkY
P5WjJqG860WHRWboq+MeUqpWPReGj/N/vPmEsfRWXwt4bsZ9eOB4B8Ji24aT3AA/
hjqGj6NAElmZNgJHYgB7h0D8itIiXwOXcQJmF1lyH9qS5vz7/KQRZCBvo+D9Zy6m
mGk3v3lA5CLoegCvTUAMcQmXv/bJlFHism83eEOMUXfCSrLVjndBtS0B4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDz7DIeUT0kkeAGGlQH1CJNtsGcJMB8GA1UdIwQY
MBaAFK9BP9KtniXIS8C1nmCKZDZj5rtoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjBFXzBxMmVKY2hMd0xXZVlJcGtObVBtdTJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85YWY2MTUtMmM0ZS00Y2FmLWI1YWYt
ZWJiZTFmNDc3ZjY4LzEvcjBFXzBxMmVKY2hMd0xXZVlJcGtObVBtdTJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC85YWY2MTUtMmM0ZS00Y2FmLWI1YWYtZWJiZTFmNDc3ZjY4
LzEvcjBFXzBxMmVKY2hMd0xXZVlJcGtObVBtdTJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJIMyDBX
1w97NjA2i6aufG4uXPWjRcE858OVDXOI7We8MH+Otnxk6bEjt+2uh+COFTWSnXcK
e7b/sKlzkQCIf/X98r2dPDsfRqVI1PdRmCqrvFhGjSaSN3T1285gnaQC+UvHO8PP
1vA0httyqq8+b2mVcni/XCRXa2G84R/XLpORDa9qhRyaJPFbrlVxxFgHjA6PEri1
BuW896t/ypqOS4R1F/T8WvR3IoDvLxxUjW3O/c+wsRbu2+sgl/9ueRGmbXiF7hLG
g5Zp6q2NiBxDy75QZvr2aHQrGNC5mOGlsB9KmLbCj/DlPLifWCShSflwbWQHXWQo
JfKRjWUIi/Tr2g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:45:01 2026 by rpki-client