Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
File: r0E_0q2eJchLwLWeYIpkNmPmu2g.mft (raw, json)
Hash identifier: N89zP/ie0rdLlwGw1m32ztwZuY/dQiNB9n3OIVospqk=
Subject key identifier: 2B:B3:3A:66:7D:2E:9A:A6:88:C2:17:4A:EA:4E:34:EA:97:C3:96:C1
Authority key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
Certificate issuer: /CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Certificate serial: 019D99D0A63682B1C3D053BE6CC2319FFCBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
Manifest number: 09CC
Signing time: Fri 17 Apr 2026 05:01:21 +0000
Manifest this update: Fri 17 Apr 2026 05:01:21 +0000
Manifest next update: Sat 18 Apr 2026 05:01:21 +0000
Files and hashes: 1: ij8sL7rYXUnVMlMrRsM_4bG7Zr0.asa (hash: aNABLeKKnKSQskOlM8pQebh0OzTg++9V8UoS1kZ0elE=)
2: n4T_7jQ4VVF7FkHyhaU0P-AIFys.roa (hash: txUNJivQakynCmq8XiBFMte1p7rhG0wBL1AKIlbWKds=)
3: r0E_0q2eJchLwLWeYIpkNmPmu2g.crl (hash: nfH2QEMn+w56nrAiqgDKNWIiZTW368u2gfl/832UgEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:a6:36:82:b1:c3:d0:53:be:6c:c2:31:9f:fc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Validity
Not Before: Apr 17 05:01:21 2026 GMT
Not After : Apr 18 05:01:21 2026 GMT
Subject: CN=2bb33a667d2e9aa688c2174aea4e34ea97c396c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:22:11:08:d1:41:74:96:06:7d:bc:e3:86:
b3:6b:a7:62:8d:ac:d4:53:c1:77:ac:f6:7e:e4:c7:
a6:59:44:3f:18:fb:3e:95:1f:64:d7:73:53:7c:cd:
d0:34:5b:b8:f0:64:6e:8d:72:77:35:02:f1:cf:1b:
1b:11:4b:22:71:6a:05:43:63:82:21:aa:b5:94:c4:
e4:9e:a6:fe:6b:10:df:13:58:44:01:ed:a1:2f:cc:
18:cb:31:97:99:f0:9b:ee:76:98:75:9d:ea:d8:3d:
fe:1c:b6:3f:be:a9:29:bd:9d:c6:28:ee:7e:93:d3:
29:ae:e4:2f:da:94:cb:d7:4a:5d:be:94:2f:2b:ee:
d9:20:2e:d4:e6:2c:67:35:25:5b:01:22:83:f4:dd:
f5:8d:c2:d9:d8:bd:f6:8a:3a:7c:c5:71:15:a4:0d:
16:cb:91:88:08:4c:b9:a2:89:8e:cc:19:77:d3:29:
42:a6:61:34:4f:1a:76:ae:97:9d:5b:14:af:ca:2b:
d9:4f:4b:64:55:4a:21:29:f1:2d:c9:79:0e:4e:74:
90:8f:62:d5:5b:fd:84:90:ec:fc:29:15:a1:23:92:
26:b8:03:b6:78:be:f0:55:7a:98:5a:40:8d:6f:6c:
8a:94:2b:c7:0c:bd:80:6e:b3:8d:3b:e6:d7:d2:58:
99:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B3:3A:66:7D:2E:9A:A6:88:C2:17:4A:EA:4E:34:EA:97:C3:96:C1
X509v3 Authority Key Identifier:
keyid:AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:cc:ac:15:04:c9:85:fe:93:32:9c:ee:d0:0a:a1:ab:30:d5:
3b:46:04:81:8b:ca:c7:3c:d0:55:45:c8:02:f4:61:7e:7b:a2:
e9:4b:8c:73:d6:af:38:a8:6f:27:e0:43:d4:6b:32:d5:b6:ff:
01:01:17:2c:3b:b5:c2:a5:6a:34:8d:66:01:0f:43:7e:82:90:
74:aa:02:4d:d8:fd:f8:02:8f:8d:c6:be:70:8b:ca:cd:01:f3:
cb:a9:e5:d8:34:de:00:73:91:b5:9c:91:c7:21:63:09:e8:11:
63:2c:13:c1:f7:53:af:5c:a7:2d:3a:7b:f5:2a:d6:2d:b0:6c:
4e:84:0d:27:6c:a5:90:04:07:d3:4f:4a:b3:4d:0c:37:40:74:
23:a5:fc:21:34:c0:4b:26:3d:39:50:aa:11:d2:db:0a:cd:29:
7d:9b:94:9c:a4:87:a6:ca:8e:0a:c2:d6:77:ef:73:8a:06:f3:
37:8e:f6:1d:b9:ac:6a:84:4c:55:37:70:3f:b1:d8:5c:49:8d:
79:41:4e:31:fa:b6:18:03:e5:73:12:bc:5a:c8:5e:74:91:15:
c8:8e:a7:72:b8:ec:1f:cf:17:1c:5a:26:89:01:de:a5:44:6a:
74:b0:b6:79:2f:6f:bb:dd:0a:04:84:c1:9d:b8:e0:47:38:ef:
2b:4c:4d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:11:19 2026 by rpki-client