Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier: CIO+goMdB9n6mVYzzlVuqzXgUMj3pUSCpVNaLZT64Ng=
Subject key identifier: E6:B2:71:33:99:59:5F:B6:3D:0E:DA:DC:3A:A2:6A:CF:EB:2F:A3:9D
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial: 01A10E4CCE3042C3DFE9D37B606A56B08E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number: 0D0D
Signing time: Mon 05 Oct 2026 23:01:16 +0000
Manifest this update: Mon 05 Oct 2026 23:01:16 +0000
Manifest next update: Tue 06 Oct 2026 23:01:16 +0000
Files and hashes: 1: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: tA5ZbU360xVYZCn9wd3np3MO0g2pfJKoAPD+cVsPnqw=)
2: schhp52ulEJ2Q5lWWzeviWV-gSw.roa (hash: HhUn0pI+C/AL7qljIPdAHULHb8txQJ+RtoE68bF3XwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:4c:ce:30:42:c3:df:e9:d3:7b:60:6a:56:b0:8e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Validity
Not Before: Oct 5 23:01:16 2026 GMT
Not After : Oct 6 23:01:16 2026 GMT
Subject: CN=e6b2713399595fb63d0edadc3aa26acfeb2fa39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:d9:52:f3:92:8d:22:17:ee:09:06:74:3a:
8f:af:87:c7:cc:2b:4b:07:c4:a3:f4:1e:9d:67:09:
d8:e8:dc:71:a7:a6:64:3e:2b:29:6d:60:79:c6:fa:
06:4a:04:95:5e:ca:4a:6f:93:a0:b8:d8:f4:f4:08:
14:ea:40:ad:74:0a:9a:5a:20:a1:be:0e:b7:e0:cc:
6e:bf:43:53:72:c4:42:ed:d6:d2:55:5b:92:88:6d:
af:4e:72:a5:76:f2:89:36:f3:92:4f:20:90:e5:3e:
bb:a3:b9:00:ac:3d:9f:38:af:81:52:a5:d2:30:2e:
e5:95:8a:9a:13:e8:f0:e7:23:64:2c:32:63:7f:96:
30:71:59:c2:1f:11:01:0d:6c:27:5b:f6:36:7d:0a:
cb:62:4f:6d:ef:1f:d6:51:88:2e:b0:67:41:f1:21:
af:b1:ee:76:71:85:f5:be:51:fe:9c:c2:ee:5d:3f:
1e:93:6b:47:cf:87:f8:91:2d:88:97:4f:cf:78:2b:
15:47:ac:d0:e8:cd:06:ee:4b:d2:bc:9a:76:ab:f3:
5d:e7:dc:9e:27:c7:26:80:ff:c7:02:29:4b:8b:35:
16:fb:40:f9:7b:55:65:c7:b9:8e:fd:fa:50:b0:3f:
19:61:d2:3e:e3:fa:1f:84:a2:5a:fd:bd:91:e9:d1:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B2:71:33:99:59:5F:B6:3D:0E:DA:DC:3A:A2:6A:CF:EB:2F:A3:9D
X509v3 Authority Key Identifier:
keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f4:b0:e8:9c:12:0c:cf:f5:7d:a0:44:43:bb:96:31:89:2b:
5e:49:61:88:bf:e4:87:84:79:42:7c:76:80:93:eb:4b:77:6e:
39:c0:cf:9d:1f:a7:f7:76:ec:ae:8b:e4:37:7e:40:79:91:df:
6f:3c:7e:42:99:7c:5f:0b:a0:d6:32:a7:a3:18:f2:e1:26:76:
38:99:db:9c:b7:38:e6:c2:e3:af:0f:13:94:f1:67:7b:23:1e:
3e:31:c8:7a:45:3e:8c:9d:df:b4:69:3a:b7:21:8a:71:3f:a3:
95:21:d8:63:be:c8:a0:d8:91:98:05:8b:f4:6f:48:01:66:01:
62:84:11:76:30:08:45:c8:73:e5:7e:df:ff:ec:9e:74:ec:77:
23:1b:23:04:dd:ae:f0:d8:71:c9:1b:38:29:c7:7f:86:3e:76:
4e:57:c1:7d:86:75:a0:7b:e7:4f:3a:a7:12:9d:c6:e0:f4:ed:
88:99:fc:ca:b1:2a:62:81:d4:2c:15:ad:92:71:a5:46:ee:af:
f8:28:b9:68:bc:ee:ed:01:90:32:a1:57:aa:14:ff:be:8b:2a:
ac:f7:85:22:58:cb:dc:6f:be:c9:53:3f:be:05:61:7d:19:6e:
f9:90:31:a9:73:46:a6:d2:3b:f5:42:a1:b4:ec:46:60:0b:5b:
76:c3:cb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 06:08:23 2026 by rpki-client