Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
File: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft (raw, json)
Hash identifier: PtblaN8GQY1YnF6VSVWUr08fwPv+6ymIkn3xJJ5pHtg=
Subject key identifier: 96:41:95:EF:38:3B:38:60:E1:28:0F:85:6D:1D:45:68:84:97:C5:F3
Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Certificate serial: 01A0C39FF8CA605BC6204E09FC0FC81CC9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
Manifest number: 09D2
Signing time: Mon 21 Sep 2026 11:00:35 +0000
Manifest this update: Mon 21 Sep 2026 11:00:35 +0000
Manifest next update: Tue 22 Sep 2026 11:00:35 +0000
Files and hashes: 1: CEJpQLikxHa8d-YkFw2pIJEL_OY.asa (hash: xgb9X1dskGV3X7TT8TR/dOTA4c0i1Dzq1gZPGAbJI6Y=)
2: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl (hash: opeP3A6V4+4rrt+XPbF3BySXtgRrJUU4lZU5cji3794=)
3: cMk2mCaRACr3l8M7sJ_ept3JIs4.roa (hash: 4pfIgLqqvlkx/cyGi0n0BcL4NVT0kLVp1xsZdjF3ulk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:f8:ca:60:5b:c6:20:4e:09:fc:0f:c8:1c:c9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Validity
Not Before: Sep 21 11:00:35 2026 GMT
Not After : Sep 22 11:00:35 2026 GMT
Subject: CN=964195ef383b3860e1280f856d1d45688497c5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:dd:81:84:72:f1:b6:09:ea:e0:ac:12:b7:
12:ce:27:aa:3d:28:b8:bd:e6:2f:f5:7e:ad:9f:35:
00:8d:37:9c:89:51:3c:78:52:b7:65:fe:bd:ee:81:
ab:d2:dd:20:05:95:99:bc:78:93:e2:9d:3c:2f:aa:
d3:01:17:ef:50:5c:57:c7:ad:9d:9f:e7:00:62:13:
62:49:95:ed:be:dd:d2:53:92:3c:e5:fd:88:41:98:
1d:c7:2e:c4:cd:7f:5c:12:0b:ba:de:81:b3:dc:67:
40:3e:dd:d8:04:c5:82:85:f9:b4:b8:6e:bc:c0:51:
76:1e:32:8a:fd:07:ee:fb:e5:b0:26:ce:a4:cf:7e:
23:4d:70:4d:34:7f:cd:2f:d7:05:7d:57:a5:83:dc:
e0:f8:b2:6d:81:24:2d:f7:92:a7:6e:ab:78:24:a2:
13:d4:f5:47:14:95:7c:00:b0:f2:ac:f4:d1:7a:de:
20:d1:c1:c8:6c:7a:47:87:14:c8:94:07:e6:36:6c:
ca:bf:bc:f8:70:32:16:c0:29:58:0b:b3:44:f9:b4:
aa:20:8b:f4:34:e5:ff:3b:4c:78:58:a6:36:77:50:
de:3b:4d:bf:6c:16:b3:94:c2:69:d8:4c:1b:2f:22:
94:39:0a:8f:22:ac:77:34:16:b7:af:07:d4:db:0e:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:41:95:EF:38:3B:38:60:E1:28:0F:85:6D:1D:45:68:84:97:C5:F3
X509v3 Authority Key Identifier:
keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:4f:81:49:97:08:08:d8:93:46:4e:3e:2f:50:5e:3f:fe:b7:
3f:8e:0d:6f:ea:d8:0e:23:83:b4:89:4d:ce:9c:da:da:13:1b:
a8:9e:ef:67:21:d1:4f:dc:45:51:76:fb:72:7e:1d:c9:a8:03:
0b:45:1a:f3:a1:2a:41:df:88:29:da:5a:9d:d7:ef:46:8a:12:
f5:ec:83:87:c8:7e:86:84:94:ee:f6:21:4e:cd:9c:d8:93:61:
f4:0c:4b:eb:4f:df:d0:88:25:07:f2:76:ed:90:18:aa:92:c2:
1b:2c:5c:80:25:7a:b1:cf:a5:56:71:76:eb:cc:8e:04:00:5b:
9a:06:62:e7:d2:3d:08:27:84:b0:9e:2d:ed:9e:a0:e3:d5:cb:
bf:7e:28:ac:48:04:d1:14:8a:c3:c2:0e:73:29:3a:11:b1:1c:
82:ac:1e:ec:0e:f9:26:ef:af:2c:20:5e:42:15:c9:8f:93:07:
48:32:1d:9a:bb:d7:3e:6b:fd:b2:b1:d0:df:ea:2c:3c:bc:72:
7f:87:78:4f:7f:c5:64:9c:6e:96:74:bb:84:1a:90:7e:7b:6c:
ab:a4:ad:d7:c4:5b:1d:82:cd:55:50:30:94:52:71:24:9c:b3:
52:e0:12:54:0f:6a:ae:1c:13:c9:4c:b6:85:e0:e3:88:0d:2e:
9b:6e:a5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:54:36 2026 by rpki-client