Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
File: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json)
Hash identifier: xpAxXbC2eQC45kg5hz0pLSWq9OYXWRzFKp+FLIoT90c=
Subject key identifier: 88:A2:A1:2F:9C:CC:96:E5:52:55:27:73:5A:62:C2:99:90:49:9E:EB
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial: 01A0D5700B486105E3F801E45E54F4866D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
Manifest number: 0E5C
Signing time: Thu 24 Sep 2026 22:01:24 +0000
Manifest this update: Thu 24 Sep 2026 22:01:24 +0000
Manifest next update: Fri 25 Sep 2026 22:01:24 +0000
Files and hashes: 1: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: 0b0eP1f+MCoy9y3WDY4uHg+cvlt71sgn2vzYTmfgxwM=)
2: SbbT_vemLYhSpPxloUrfpgEATIA.roa (hash: TxqN78AgB7Nz/Wz8KEGfJojT7Yd8MRSlYTLQkCNBIXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:0b:48:61:05:e3:f8:01:e4:5e:54:f4:86:6d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Validity
Not Before: Sep 24 22:01:24 2026 GMT
Not After : Sep 25 22:01:24 2026 GMT
Subject: CN=88a2a12f9ccc96e5525527735a62c29990499eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8d:eb:c8:63:ae:b3:7d:e8:97:0b:89:f1:5e:
a7:9d:cc:e2:a3:0f:b6:52:4c:f1:54:09:88:e4:da:
17:60:c7:32:96:87:01:47:61:91:5c:a0:5e:0b:98:
0d:d7:ab:f8:61:17:3c:b8:3a:38:68:a6:9e:da:e4:
2f:4e:1f:e8:80:5c:ab:68:ec:b8:09:71:6f:e6:7b:
a8:5d:bd:36:11:cb:db:03:07:20:f4:f3:63:c6:93:
86:d7:27:9d:49:2e:42:45:88:aa:46:ea:53:bb:88:
ef:f1:a3:a7:2c:bb:5a:4c:8f:72:f3:9e:a5:d6:30:
78:a9:1f:1a:0d:d0:de:4f:c6:52:e7:e8:13:ae:5e:
3c:bf:21:86:8e:71:39:b3:f3:e6:f7:cf:ac:ad:00:
33:92:b6:95:86:c2:f8:c8:9d:ea:26:6e:c0:f8:fa:
8d:a7:54:f9:cc:b6:24:0a:3d:ae:0c:89:a0:5a:42:
0f:e8:0a:0b:91:ff:1d:95:c1:27:a0:70:b9:d2:68:
f5:79:02:3a:f7:c0:46:c6:99:de:36:68:01:02:e8:
82:df:53:47:27:54:6a:f6:63:a9:44:ee:5c:32:b6:
cc:91:38:dc:1a:9e:4d:9e:f5:36:fc:48:51:20:76:
5a:2f:9d:86:8a:ae:d3:05:32:d7:a7:ce:f7:9b:a9:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A2:A1:2F:9C:CC:96:E5:52:55:27:73:5A:62:C2:99:90:49:9E:EB
X509v3 Authority Key Identifier:
keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f6:03:d9:0b:d1:33:bb:38:68:a4:fc:c0:ee:f8:c8:36:3d:
38:ea:53:9c:a4:12:4a:11:8b:79:89:cc:c5:ef:86:b4:1a:01:
c3:5d:a3:a4:fc:28:14:78:dc:40:44:d2:e3:fc:d9:1c:67:ae:
cf:41:af:67:26:a4:d8:b6:c1:8c:60:8b:aa:63:35:da:9f:c6:
e8:05:78:c6:10:c7:a9:5d:eb:07:46:bd:38:b4:49:0d:ce:74:
1b:c9:24:4c:5e:36:66:c2:78:4e:89:91:1c:85:3b:4f:e6:c2:
c1:df:1a:cf:ec:60:2e:8e:53:af:c6:7a:a1:6e:cf:45:32:70:
b0:72:db:4c:9f:e7:e4:16:40:0a:a4:d1:93:81:31:c2:a8:20:
54:21:72:e4:da:1d:4e:ea:5e:63:26:48:35:02:2b:df:6f:76:
0b:7b:20:ce:2f:22:ba:16:a5:29:b8:2b:25:51:08:86:c8:3c:
3d:c2:9b:1b:d4:59:5a:c2:a2:98:e2:54:a3:ec:dc:99:22:ea:
12:47:32:31:5a:eb:98:60:6f:20:02:9e:6a:3a:83:f3:07:92:
69:1f:8f:41:bb:06:3d:56:bf:f5:33:94:08:31:90:56:10:f6:
d9:6b:23:37:f4:dd:96:b8:ad:08:3a:ac:ea:e9:9f:11:21:89:
4c:75:7d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:13:45 2026 by rpki-client