
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
File: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft (raw, json)
Hash identifier: YUg5vHvAV0MRxfTSU+WOtmOHX1aDbUbnII4Y/NdOCgk=
Subject key identifier: 60:70:0F:D6:A1:D8:D4:80:84:2E:78:56:68:4D:69:C6:A7:A7:79:D1
Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Certificate serial: 019DA34195D9DF974C94A8106473C1073901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
Manifest number: 0833
Signing time: Sun 19 Apr 2026 01:01:17 +0000
Manifest this update: Sun 19 Apr 2026 01:01:17 +0000
Manifest next update: Mon 20 Apr 2026 01:01:17 +0000
Files and hashes: 1: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl (hash: xOOy/OjXPTTozMBH8iiKU5FcPxJbib5Ts8zxCKMeK4A=)
2: cMk2mCaRACr3l8M7sJ_ept3JIs4.roa (hash: 4pfIgLqqvlkx/cyGi0n0BcL4NVT0kLVp1xsZdjF3ulk=)
3: opsubjEoRPBD2SKWbQwhsyQi_lA.asa (hash: Wxgmik5eog5zeLftYBqHXvPHZjZbZr+djsPQFi4j55s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:95:d9:df:97:4c:94:a8:10:64:73:c1:07:39:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Validity
Not Before: Apr 19 01:01:17 2026 GMT
Not After : Apr 20 01:01:17 2026 GMT
Subject: CN=60700fd6a1d8d480842e7856684d69c6a7a779d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bc:e6:fa:6a:b6:78:44:2b:52:06:ad:b8:16:
16:75:09:17:72:b1:d2:62:ae:cf:73:16:b9:61:41:
5e:bb:96:6d:b2:08:1c:65:bb:cf:f3:9b:c8:21:be:
60:59:8d:1f:40:aa:8d:32:d8:b8:f3:47:3b:17:0d:
2c:dd:b1:22:d9:da:f6:37:8d:25:1a:24:d4:8c:b0:
c8:8f:38:2b:cc:4b:2d:48:d6:32:a0:74:c7:bb:37:
5a:fe:1c:93:a1:dc:78:37:64:49:4f:5f:dc:7e:ab:
7d:01:03:bf:e0:b6:37:09:f5:c3:7e:e4:50:2c:c5:
53:ae:16:68:8a:cb:95:ba:82:c4:f4:5c:fa:bb:0f:
17:13:0a:18:fd:f0:a2:13:d3:d1:ee:93:76:59:08:
30:9c:4e:62:ff:b0:9d:e8:b7:bf:06:17:d8:18:aa:
28:37:a0:ea:fa:90:e2:00:f8:a3:fd:be:f0:d9:9d:
0f:a2:c2:44:bd:6c:20:d6:0d:fd:c9:8f:67:85:24:
78:af:0b:6f:41:9e:0b:fe:e0:69:db:ff:b0:08:8b:
d3:cf:35:90:34:9d:eb:8e:8c:8b:99:4d:a4:42:ee:
0c:ac:e1:67:03:b0:1e:c9:f5:a9:f0:7e:4a:76:56:
2b:31:88:79:62:ee:c5:b5:0a:ea:be:33:ee:82:f1:
4e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:70:0F:D6:A1:D8:D4:80:84:2E:78:56:68:4D:69:C6:A7:A7:79:D1
X509v3 Authority Key Identifier:
keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1e:25:c9:05:0d:96:4f:46:fb:36:03:32:f2:27:a7:aa:3c:
f3:2b:9f:e2:a5:81:40:a6:9b:5f:ce:e5:ef:98:52:d6:1e:33:
f2:d2:bd:fb:9e:31:1a:2a:7d:68:da:fd:0c:50:78:27:99:d3:
dc:42:61:e9:24:90:54:0d:c7:ec:82:10:c2:3d:5d:ff:fc:27:
89:7d:2b:e9:f2:5e:a0:9d:b6:68:c9:63:dc:52:ee:63:89:07:
71:c2:02:7d:1a:e3:26:e3:d1:2b:71:1d:d1:3e:a9:87:9e:41:
4f:08:de:b9:92:fe:84:10:46:fb:20:3a:3b:61:83:f5:32:d2:
eb:3d:5a:a4:8c:29:87:8f:02:3d:64:2f:7e:20:c2:ea:c9:2e:
51:8c:c6:b7:5d:03:a3:7c:e1:e4:e3:8a:64:f9:a3:07:be:a8:
1a:33:df:8b:22:bd:bf:57:73:f6:ef:26:18:25:05:fc:29:19:
ff:12:c3:b5:a4:ee:3b:0b:bb:36:69:11:c8:7f:25:4c:87:99:
f6:cd:9d:78:da:64:e8:b6:74:47:6e:c8:2d:cc:3f:60:8d:91:
16:f8:3f:8f:0b:94:2e:ee:28:95:b6:60:02:e7:3c:80:99:79:
ad:17:45:6e:4b:ed:d5:30:a8:c9:e1:e9:6a:e5:d8:3e:a5:0a:
dd:4a:e4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:45 2026 by rpki-client