Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
File: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft (raw, json)
Hash identifier: u32V9AnSZF1PxPdYvjPLFZ98Gxjuf54aXLyIWyqlBEU=
Subject key identifier: 29:58:DC:C4:EC:10:7E:B5:CF:D4:DC:6E:DB:A6:23:4D:6F:5C:91:CD
Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Certificate serial: 019CAA216F6EF9F61EDDE5BB81A2C2C52819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
Manifest number: 07B2
Signing time: Sun 01 Mar 2026 16:00:43 +0000
Manifest this update: Sun 01 Mar 2026 16:00:43 +0000
Manifest next update: Mon 02 Mar 2026 16:00:43 +0000
Files and hashes: 1: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl (hash: tmhBPONaqqVALZH11uvdh4hX4Eqg1Ft4XZ0oEYEKye0=)
2: cMk2mCaRACr3l8M7sJ_ept3JIs4.roa (hash: 4pfIgLqqvlkx/cyGi0n0BcL4NVT0kLVp1xsZdjF3ulk=)
3: opsubjEoRPBD2SKWbQwhsyQi_lA.asa (hash: Wxgmik5eog5zeLftYBqHXvPHZjZbZr+djsPQFi4j55s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:6f:6e:f9:f6:1e:dd:e5:bb:81:a2:c2:c5:28:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Validity
Not Before: Mar 1 16:00:43 2026 GMT
Not After : Mar 2 16:00:43 2026 GMT
Subject: CN=2958dcc4ec107eb5cfd4dc6edba6234d6f5c91cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:a9:dc:ec:ac:b1:97:7c:57:79:9e:53:cd:
2c:21:8a:31:3a:e8:68:2f:51:c2:3d:76:56:54:e4:
57:91:eb:d7:70:af:f9:d9:38:f1:ac:c8:50:ed:6f:
63:52:a8:83:1f:c2:12:1e:bc:7a:c1:0c:90:17:5f:
43:a3:66:e3:43:5b:36:75:77:a3:fa:dd:45:20:92:
60:25:a6:61:dd:de:00:b9:60:f5:a7:05:ca:d8:01:
f4:72:df:8c:20:46:dc:43:d4:d7:e6:9b:99:d9:e0:
4c:17:4a:dd:8d:17:a6:0b:b0:43:f2:b3:55:e0:34:
87:c3:8e:27:24:73:4b:1c:78:b4:29:2c:48:26:c6:
92:37:61:02:c6:9f:5f:cb:4a:40:12:bf:36:03:3f:
41:5d:50:96:4b:25:6c:8a:03:ea:59:8f:66:96:9e:
80:00:8b:e9:8d:bc:46:80:5b:f6:ad:60:1f:e1:80:
5e:f8:ed:5e:6b:33:ac:ff:64:11:c9:fe:f3:25:95:
f4:7f:fe:f9:a4:c6:10:5d:07:b0:bd:42:89:69:a2:
2a:3d:fe:32:50:89:2e:c6:d9:f6:f2:80:cc:ea:08:
a7:4a:a8:05:71:9d:bd:38:fb:2b:5b:f8:16:0b:92:
0b:f0:dd:e9:96:54:f6:5a:90:61:0d:5d:65:95:18:
71:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:58:DC:C4:EC:10:7E:B5:CF:D4:DC:6E:DB:A6:23:4D:6F:5C:91:CD
X509v3 Authority Key Identifier:
keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:32:88:35:2a:1c:ec:14:01:78:7e:87:ef:c9:7a:2b:73:68:
01:72:a0:1f:e2:2e:cf:56:a8:bf:08:f0:c6:b8:e1:b5:13:3f:
a1:76:21:08:78:01:36:70:5c:f1:70:6d:d7:f6:2d:3b:5e:78:
58:dd:2b:e0:c9:3e:67:a9:b0:8d:0b:7c:07:04:07:06:b8:be:
aa:f6:6e:4d:32:eb:ee:ff:0a:f2:ef:15:39:8e:b5:c6:b4:a3:
55:39:26:2d:cd:f8:48:f2:b5:03:30:87:d2:f7:93:77:00:73:
b6:b5:e0:18:01:7d:71:36:cf:2e:27:19:7c:4b:64:0d:47:00:
df:7b:b8:6a:9c:20:74:b2:36:e5:7c:af:cf:b7:6e:e6:65:7f:
51:62:c8:53:7f:ce:40:2c:e6:24:e7:c0:8b:26:32:40:21:2e:
a0:28:59:9b:a7:41:e2:93:79:39:d9:7e:2c:52:6a:ad:a4:1a:
b5:7a:57:1f:50:46:6e:29:35:d1:ac:96:22:fb:de:bb:87:e9:
48:c6:06:8a:0d:ae:4a:01:0a:fd:c5:1f:14:33:b7:e4:ca:95:
ac:a8:11:ae:cc:cb:3f:7c:4b:45:34:32:be:38:45:e7:0b:ac:
c7:ba:24:02:64:56:4d:97:e4:c7:aa:22:7b:30:09:69:ea:f7:
e9:29:e3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:25 2026 by rpki-client