Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
File: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft (raw, json)
Hash identifier: pnBhg9QSN4hPdFd5pwRFeZLyxLuvYUIC6M38zGU1M2k=
Subject key identifier: F3:B2:4C:87:85:56:F4:ED:30:A5:A9:3B:15:2B:82:95:1E:EE:DD:81
Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Certificate serial: 019FA7BD3A4DE6BF2E5057CBCB58D42E91AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
Manifest number: 093F
Signing time: Tue 28 Jul 2026 08:00:23 +0000
Manifest this update: Tue 28 Jul 2026 08:00:23 +0000
Manifest next update: Wed 29 Jul 2026 08:00:23 +0000
Files and hashes: 1: CEJpQLikxHa8d-YkFw2pIJEL_OY.asa (hash: xgb9X1dskGV3X7TT8TR/dOTA4c0i1Dzq1gZPGAbJI6Y=)
2: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl (hash: QhoQcizLZfGb5T9tiJYp4BF7D3xtmNgy8vKb0LLRQ/s=)
3: cMk2mCaRACr3l8M7sJ_ept3JIs4.roa (hash: 4pfIgLqqvlkx/cyGi0n0BcL4NVT0kLVp1xsZdjF3ulk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:3a:4d:e6:bf:2e:50:57:cb:cb:58:d4:2e:91:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Validity
Not Before: Jul 28 08:00:23 2026 GMT
Not After : Jul 29 08:00:23 2026 GMT
Subject: CN=f3b24c878556f4ed30a5a93b152b82951eeedd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:bc:70:96:8a:02:c7:9e:1b:c0:86:81:c4:
71:cc:40:42:9d:41:6e:8c:5a:82:99:c0:6a:6d:50:
6a:32:6a:d8:82:90:33:95:17:ff:34:5e:45:0f:54:
67:50:d8:83:80:82:f8:66:b1:61:dc:e6:e1:78:df:
e4:dc:e9:4b:3a:12:d4:8b:0f:06:d6:c2:a9:ab:4c:
6e:90:5c:eb:27:c7:e1:02:c1:aa:fe:03:02:3b:df:
6e:b4:3e:1e:03:54:f1:b5:dd:e9:00:06:c3:21:5f:
5d:cd:d0:20:8c:7c:2e:f4:f0:48:2d:7c:ac:53:26:
6a:a7:c4:72:88:25:5e:29:68:6c:d1:8e:1b:65:01:
0d:d0:de:ac:7f:55:47:be:d3:42:fb:ec:67:23:17:
9a:b1:00:ec:4b:e1:ef:57:9f:e2:10:e1:66:39:0a:
ca:dc:39:7f:2b:81:6c:d8:c9:81:25:6f:37:f1:5c:
f6:7e:ec:4f:db:8d:5c:85:bc:6d:a7:12:ac:db:4d:
4b:d5:28:f3:41:d4:a5:92:62:b2:4f:cf:ae:8e:04:
0e:1d:c2:af:ce:92:b7:bc:74:7e:ba:0b:21:65:c7:
04:f5:5c:9f:e6:03:33:74:5c:33:12:ec:a1:8e:99:
66:bf:8a:3e:d5:f7:2a:a9:8f:3c:7d:eb:9d:85:e3:
4c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B2:4C:87:85:56:F4:ED:30:A5:A9:3B:15:2B:82:95:1E:EE:DD:81
X509v3 Authority Key Identifier:
keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a4:4f:9c:6b:dc:66:6c:4f:07:ce:06:dc:cb:ae:dc:e7:a3:
a0:b5:dd:cd:6c:13:0a:a2:85:da:fb:f1:c4:55:12:e8:84:76:
dd:d1:16:0f:8c:8a:cf:23:72:a2:a2:b1:8e:f3:9a:36:11:52:
15:48:42:15:5b:fe:a8:c1:5e:16:12:fd:41:13:4c:18:84:86:
7d:6b:0d:f9:66:7d:f4:88:ec:63:0e:53:0d:24:90:c5:67:16:
85:7a:ad:2e:c5:72:d9:2b:be:67:03:25:7b:c0:f0:e2:f6:9e:
13:16:ea:34:b8:c7:80:3e:64:e1:2e:f2:89:76:ce:4c:13:79:
6d:6e:26:a2:7d:a0:ba:0e:f8:77:6b:76:8c:8b:6d:c6:13:fd:
6e:fd:29:c8:42:f5:03:42:9d:f8:eb:d0:6c:d4:4e:45:87:13:
15:d6:65:b4:a2:d3:7f:4b:cd:13:39:63:5e:96:36:86:89:23:
e2:df:8b:85:39:ef:f2:53:a8:a3:d6:92:e5:98:d8:ad:53:e1:
47:73:ac:91:44:c9:ae:2e:7b:19:8b:19:69:8f:9a:f7:4d:6a:
88:b9:0a:a6:c7:3b:23:f6:a2:80:dc:0b:43:8e:bd:b7:60:f6:
a0:60:a3:5e:6e:8e:8f:19:06:6b:ea:3b:18:18:ab:e3:2e:e8:
c2:3d:0f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:25 2026 by rpki-client