Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
File: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft (raw, json)
Hash identifier: UH/T2wQkhr+j0bdKNkx9pA3CAD2Nz6Q47xtrOibMfGc=
Subject key identifier: 71:23:E8:8A:2E:06:33:16:7E:13:49:E2:4E:27:D5:5D:3E:75:27:46
Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Certificate serial: 019EBD3580A49F188819D3A1EDA2541B53B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
Manifest number: 08C5
Signing time: Fri 12 Jun 2026 19:01:00 +0000
Manifest this update: Fri 12 Jun 2026 19:01:00 +0000
Manifest next update: Sat 13 Jun 2026 19:01:00 +0000
Files and hashes: 1: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl (hash: x2xaJY63BY+PtJBMvqmawh9MKs16xY628qIBgNuEObk=)
2: cMk2mCaRACr3l8M7sJ_ept3JIs4.roa (hash: 4pfIgLqqvlkx/cyGi0n0BcL4NVT0kLVp1xsZdjF3ulk=)
3: opsubjEoRPBD2SKWbQwhsyQi_lA.asa (hash: Wxgmik5eog5zeLftYBqHXvPHZjZbZr+djsPQFi4j55s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:35:80:a4:9f:18:88:19:d3:a1:ed:a2:54:1b:53:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Validity
Not Before: Jun 12 19:01:00 2026 GMT
Not After : Jun 13 19:01:00 2026 GMT
Subject: CN=7123e88a2e0633167e1349e24e27d55d3e752746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:68:f5:ba:e2:b3:21:c1:03:ff:66:37:3e:b5:
df:5e:fb:f0:48:e8:99:f4:a1:8c:9e:ea:10:a2:aa:
6d:58:3b:32:d9:98:b0:2f:03:51:f2:fc:56:29:8e:
0b:55:90:99:a8:fe:d6:39:48:c5:fa:ca:3b:1c:5e:
3e:bb:bc:6b:fe:fb:1f:ce:e2:ac:89:63:b9:d5:d1:
04:1c:b9:c7:78:4e:b7:84:1a:16:a0:5c:08:ab:26:
68:ce:12:b0:ab:46:09:ea:1a:9b:15:8a:ff:42:cc:
1c:c1:e4:62:40:ed:23:ea:86:14:52:35:9e:2c:dd:
7d:61:39:a2:48:f1:93:5f:01:d9:40:cf:3e:a3:f9:
87:ce:f9:23:08:5d:d5:ea:c6:13:d6:d1:2b:e3:f2:
fd:07:fc:d3:5d:13:54:8c:44:d9:f0:4a:29:46:f6:
5e:09:ee:d0:35:34:e2:fa:1c:cc:cd:cd:96:09:86:
f1:f9:fe:37:7d:c0:06:0f:ff:68:80:3b:5f:36:95:
b4:d0:4a:56:5d:ee:0e:80:72:34:83:97:c7:23:18:
c0:52:c5:f7:55:58:ad:79:0c:47:1d:c3:23:2c:a3:
2c:8b:64:75:9f:0a:08:7a:ec:59:ed:f0:fb:92:7e:
c3:b5:a2:77:91:e8:b4:8c:41:eb:5d:b0:0e:20:aa:
9d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:23:E8:8A:2E:06:33:16:7E:13:49:E2:4E:27:D5:5D:3E:75:27:46
X509v3 Authority Key Identifier:
keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1f:a9:bd:4a:30:4f:d5:16:be:e3:cb:b5:41:4b:28:b6:f7:
b7:40:f4:c8:05:8a:92:9e:92:82:53:6e:07:43:99:e6:a0:61:
60:d1:bf:4f:88:21:59:ec:00:70:f5:d5:b8:8f:9e:9c:17:73:
96:65:9b:b7:bb:09:cd:a2:fa:d3:c7:34:b5:7f:76:69:c1:35:
af:20:39:5d:12:3b:b6:ba:43:af:87:5d:10:dd:88:ec:7f:03:
c8:80:fa:b3:06:44:6c:3a:76:cd:99:4e:42:8a:49:d9:23:38:
ab:46:50:59:be:d6:6f:46:7e:b8:d3:b1:57:ca:32:23:eb:4e:
08:8c:a5:6c:4d:d2:e2:43:1c:f0:70:da:94:8c:d1:ce:a2:2f:
0a:e9:33:9b:d3:33:ab:9f:94:28:ba:fd:f2:68:a5:4a:66:b3:
64:ba:ab:02:03:f9:22:f3:fc:38:9b:0f:43:9f:90:37:ea:1a:
41:8b:30:b4:3b:4d:48:d7:a8:17:1f:b8:04:09:0d:d8:84:83:
65:24:58:77:d3:52:f6:e3:37:42:f9:dc:b5:7b:0c:a8:ed:62:
e1:c5:5d:84:c7:2e:eb:59:d5:62:bf:1d:e5:ff:ca:39:14:2a:
a7:92:f5:3b:27:68:e8:cb:03:69:82:8d:ab:06:8b:6a:b3:b3:
d7:16:e3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:49 2026 by rpki-client