Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
File: 0elpYhQkgMux04QRdx60_z45g58.mft (raw, json)
Hash identifier: ECuFGUHCR+GgGHvb6l0ukgW80L52KiWwnu+WJjoQ9W8=
Subject key identifier: E8:A3:DE:75:A2:4E:A1:EA:05:61:39:69:6A:10:83:76:48:DC:76:DD
Authority key identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
Certificate issuer: /CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Certificate serial: 019F9437143F52C0E8D9E68D0B38935EFBAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
Manifest number: 0E28
Signing time: Fri 24 Jul 2026 13:01:05 +0000
Manifest this update: Fri 24 Jul 2026 13:01:05 +0000
Manifest next update: Sat 25 Jul 2026 13:01:05 +0000
Files and hashes: 1: 0elpYhQkgMux04QRdx60_z45g58.crl (hash: HMFwXvac1I7e6pCP2XaEGlvxRUzVwR8nMUA3iNsaDGE=)
2: cHvhPA5WiP2hlNkTCQAUdFz33aQ.roa (hash: kklG1LK9LOsPTVd1KnUPw3+fJn5429kCodQSEA85c8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:14:3f:52:c0:e8:d9:e6:8d:0b:38:93:5e:fb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Validity
Not Before: Jul 24 13:01:05 2026 GMT
Not After : Jul 25 13:01:05 2026 GMT
Subject: CN=e8a3de75a24ea1ea056139696a10837648dc76dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:fe:d8:a5:8f:05:64:3b:e9:ee:2f:e4:60:
bb:96:ba:f2:6e:b5:02:97:dc:c0:e4:a7:be:d3:b4:
1c:5f:37:44:d6:66:5a:b6:45:6b:db:bd:07:02:cf:
69:66:1e:90:b7:8f:31:12:25:fa:c4:2d:32:df:8d:
a5:4f:52:23:f2:65:99:66:ed:33:27:18:87:95:46:
76:63:72:e2:fa:8b:5b:d9:d2:79:c6:f5:a1:b5:d5:
73:cd:28:e3:50:43:5a:9f:30:b8:de:27:4a:fa:b4:
b5:10:71:6c:08:fd:3d:0d:51:b8:a5:1a:91:3a:d1:
31:77:c4:38:ec:a7:f8:ee:c4:71:96:97:38:60:b5:
d3:a8:85:b6:7d:58:10:2c:e1:bc:1f:89:80:ce:c5:
da:92:4f:70:c0:95:7f:6f:0a:d4:84:4a:61:06:87:
aa:bc:b6:68:39:8b:73:b4:0a:ed:4a:1d:c9:74:6f:
e6:a8:6c:70:2b:ff:fa:d1:48:ac:3f:92:d6:b5:a4:
c0:46:d6:88:41:f3:9b:9c:50:0a:22:59:59:d6:a0:
41:77:be:b0:97:5b:84:a5:19:26:87:2f:dc:92:c2:
26:36:f1:ae:a0:8b:c0:7b:5a:e4:a8:ea:63:24:7e:
cc:ae:e0:b3:ed:94:29:2b:14:c0:1c:e0:2c:3a:95:
4d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A3:DE:75:A2:4E:A1:EA:05:61:39:69:6A:10:83:76:48:DC:76:DD
X509v3 Authority Key Identifier:
keyid:D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:62:ae:20:27:e5:05:d0:a7:9a:9c:7a:51:90:b0:f7:cb:43:
c6:e0:e7:2f:64:0f:e6:fd:69:a7:c9:af:ee:9b:12:b0:85:29:
77:a8:d9:03:d4:07:32:33:26:3c:f5:44:0f:c4:ad:75:14:d2:
c1:8a:67:3d:a0:ab:82:16:9f:55:f3:c9:89:d1:b8:21:03:60:
0c:15:22:57:82:db:f5:90:39:d8:07:2b:d5:da:47:7b:a3:a4:
52:f9:22:9c:ff:b2:f1:b3:fb:2f:90:19:ff:08:45:8f:c4:d9:
dd:8f:bf:58:5f:09:b4:2d:f1:67:89:81:ed:82:66:c9:0f:76:
c9:ac:56:6d:45:f7:a3:0e:ab:81:7f:96:2e:05:c3:c4:02:62:
34:54:12:8b:23:8a:23:88:d3:04:45:6a:64:33:37:2d:9f:60:
1c:33:e6:11:4f:95:8e:d3:8d:a2:54:34:77:20:8e:d7:d8:24:
25:dc:fb:f0:bc:f8:6a:e4:01:a1:84:6c:f7:1f:3d:e6:2f:b1:
66:06:a7:06:4f:f8:46:de:a5:51:4d:52:53:f0:ef:6f:71:54:
7c:97:01:57:76:61:85:fc:c9:a1:07:9a:d0:57:fc:57:32:0e:
af:ee:37:85:e1:44:b8:7a:f5:73:23:6e:e1:c9:21:9d:84:36:
4d:e5:6b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:38:06 2026 by rpki-client