Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: m1x71/oCPSRVwJF/k1YuDUT0YEtY+h3gA4UVI2QLygs=
Subject key identifier: DF:52:88:79:BB:18:64:84:BE:82:CF:BF:C6:FA:C7:07:4B:7D:D5:93
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 01A0D0B6DF215EAC008221026E89CD9B0CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 0EC5
Signing time: Thu 24 Sep 2026 00:00:40 +0000
Manifest this update: Thu 24 Sep 2026 00:00:40 +0000
Manifest next update: Fri 25 Sep 2026 00:00:40 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: p1zYXXG9gO0vu9zfLozXL3zZexO4jfofT6wxZsekUqo=)
2: ke5BBmP9uJ5If3ItewQloGu8EQA.roa (hash: sg4mup0G5eaNuuse6GfgbbBnUv1YkDhld8yTzOiPKE4=)
3: wmiyGteEO918b1PMxNCpgfoVaDs.roa (hash: ZPhGNaDbDb+DbDzUXj55AFIPAg+DVhgaYwBguflVQCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:df:21:5e:ac:00:82:21:02:6e:89:cd:9b:0c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Sep 24 00:00:40 2026 GMT
Not After : Sep 25 00:00:40 2026 GMT
Subject: CN=df528879bb186484be82cfbfc6fac7074b7dd593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:f8:3a:af:2e:90:04:8b:fa:d7:72:73:56:
28:d8:e1:85:c4:80:38:1c:b0:cd:6b:a9:f9:35:29:
52:9f:b4:9b:65:52:ef:39:38:38:8e:35:c6:57:0e:
9e:0c:52:a7:1e:2a:d8:ac:38:82:c0:87:68:14:e2:
5c:10:44:00:65:c7:3e:55:45:dc:78:6e:74:9c:e0:
b4:ca:60:a7:3a:6f:5f:23:ec:e8:49:55:75:c7:bd:
c1:42:f0:0b:1c:82:70:f3:f3:a7:97:de:5e:06:68:
a0:01:d9:8d:da:1f:f3:f0:f3:d0:16:ae:37:2d:e9:
12:98:6c:83:db:12:ad:2c:da:6d:c3:ec:88:a2:cd:
f5:f1:29:33:df:5a:d0:69:57:40:c3:c2:fb:81:26:
a2:c6:6c:40:5c:d1:37:d7:c3:0f:f3:88:a1:5c:14:
72:4d:9d:91:d6:f8:1e:97:7b:3a:a9:68:f4:2d:89:
2b:72:57:48:6d:1d:e9:bd:88:bd:24:9c:6b:5c:67:
4d:0b:34:22:72:68:bd:2e:ec:39:d4:c5:a7:a3:21:
5c:6b:c8:38:af:c4:8a:64:cb:8d:e4:5a:e0:42:53:
27:02:13:1e:f2:8c:99:69:80:fb:20:8d:64:42:5e:
39:a2:78:82:b7:09:c5:ac:93:11:6c:19:8b:47:fe:
08:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:52:88:79:BB:18:64:84:BE:82:CF:BF:C6:FA:C7:07:4B:7D:D5:93
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6f:70:19:ea:09:2e:3e:60:33:e4:5d:91:21:e2:eb:57:1a:
19:58:9e:57:2e:ff:50:6c:47:12:5c:53:0b:0b:bc:76:27:c8:
6e:fe:ec:0a:58:36:ce:44:bb:9a:5c:a9:ca:ea:9e:b6:87:be:
61:e8:09:af:6a:e6:89:e6:3b:b1:64:37:de:00:f4:33:11:9b:
b2:59:50:48:3e:6a:50:0e:27:e9:02:ed:74:8c:98:44:97:11:
c0:3d:64:7b:45:aa:1a:8c:08:9e:fd:23:b1:ea:b8:39:b2:c2:
03:d3:01:d4:47:f0:e4:3b:d7:dd:65:50:25:87:52:18:54:b2:
cc:e5:a1:60:a5:2a:c8:38:8e:33:8b:68:48:8f:34:19:aa:25:
ca:c6:97:84:bd:5d:fd:1f:0d:50:38:cc:0b:2e:b3:a4:c4:36:
bc:22:41:61:29:05:ba:d2:10:d1:0d:2d:74:ae:ad:c7:45:b9:
df:4c:df:6e:49:39:3e:26:9e:d5:bd:d8:fe:04:e6:eb:93:9e:
fa:e2:9a:55:da:23:a5:26:93:39:21:ba:e9:13:13:79:c5:65:
08:1f:8f:82:07:85:68:c9:d7:f3:ad:2d:79:43:2f:36:96:9f:
7f:11:16:6d:d5:3a:54:3b:20:c4:56:c7:ee:20:6c:30:05:50:
fd:85:06:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:31:27 2026 by rpki-client