Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.mft
File: 0kLjA3tgiO5t6UhiWWiT5uupT78.mft (raw, json)
Hash identifier: VXZNG8aOOD4X/fujCHeQ6FYPh9Bs8Ee5nbbZi+J+R8Q=
Subject key identifier: 1D:5B:28:B5:6B:2C:A5:69:38:17:68:2E:1A:28:4C:C6:50:CA:D8:5E
Authority key identifier: D2:42:E3:03:7B:60:88:EE:6D:E9:48:62:59:68:93:E6:EB:A9:4F:BF
Certificate issuer: /CN=d242e3037b6088ee6de94862596893e6eba94fbf
Certificate serial: 01A0D5DDDB68E5B04677DD8377192F51E0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kLjA3tgiO5t6UhiWWiT5uupT78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:01:21 +0000
Manifest this update: Fri 25 Sep 2026 00:01:21 +0000
Manifest next update: Sat 26 Sep 2026 00:01:21 +0000
Files and hashes: 1: 0kLjA3tgiO5t6UhiWWiT5uupT78.crl (hash: haIhk0Zzn2S1umtEhuy7gjGBSzxV4MfT5I+X3IJuWq4=)
2: BeW6fNTmqXgR5pM9jh3vGj3b64A.roa (hash: IkKehMA98jcUqaZ277fk0SXWhXVAaXeBHuf7iTvYGmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kLjA3tgiO5t6UhiWWiT5uupT78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:db:68:e5:b0:46:77:dd:83:77:19:2f:51:e0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d242e3037b6088ee6de94862596893e6eba94fbf
Validity
Not Before: Sep 25 00:01:21 2026 GMT
Not After : Sep 26 00:01:21 2026 GMT
Subject: CN=1d5b28b56b2ca5693817682e1a284cc650cad85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:4e:e2:40:53:e7:f3:a0:c2:80:0e:8e:46:
a7:d7:a4:f5:cd:2b:24:14:5f:6f:c2:25:2b:ab:9a:
59:37:e7:e4:a7:f5:b9:48:72:1e:ba:a1:19:42:1e:
9c:10:39:a3:78:5e:f5:a4:ec:47:66:3e:db:9a:c1:
b7:fb:c3:6e:89:9c:29:83:d6:c0:61:a5:89:d9:17:
b1:6a:c3:c4:80:b6:34:21:08:28:b6:fa:1b:b2:f3:
0c:9a:a1:68:c1:e0:bb:b6:4b:09:d9:dc:0a:13:49:
e3:b9:23:eb:6f:ac:d3:49:9e:4b:b3:9c:5b:84:37:
f4:c1:ae:cd:51:55:81:0c:14:c6:83:31:cc:90:3f:
3f:8b:69:1a:0e:54:45:5f:e5:77:ce:16:76:58:a1:
f6:46:1a:55:b3:8e:a4:43:14:dd:f3:93:91:72:48:
51:b7:73:73:f7:f4:8e:28:ff:c9:1f:c5:5e:f6:08:
4f:f4:00:f6:e6:ff:fa:0a:91:68:d3:2f:84:6f:2f:
45:50:d5:14:b1:ca:86:38:a6:40:9c:22:f8:82:64:
70:1d:70:1f:72:44:b1:89:19:fd:1e:54:b1:16:28:
9f:6f:ff:72:23:a4:b2:76:fd:d3:b9:3b:10:57:1c:
a1:02:5b:c1:43:e0:e1:cb:5f:ba:5d:7f:31:9b:0f:
7b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5B:28:B5:6B:2C:A5:69:38:17:68:2E:1A:28:4C:C6:50:CA:D8:5E
X509v3 Authority Key Identifier:
keyid:D2:42:E3:03:7B:60:88:EE:6D:E9:48:62:59:68:93:E6:EB:A9:4F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kLjA3tgiO5t6UhiWWiT5uupT78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4e:29:bc:58:c3:a0:8c:32:e1:8e:be:c7:ef:0b:8a:f4:d4:
f8:97:4a:cf:f1:b1:15:cf:81:ea:64:bb:bc:79:e8:ea:74:a3:
1e:bc:de:50:ff:2e:71:28:1f:37:a4:56:01:ad:3b:7a:b1:72:
b0:7c:c4:51:a2:e4:17:21:04:c7:31:a9:04:1c:15:3e:92:91:
ca:d4:db:c3:4f:e9:3d:b3:dd:25:b6:8d:08:14:5e:93:9e:ab:
82:ba:32:55:3f:3a:6c:7a:40:98:4f:4c:eb:22:c1:28:1a:69:
e3:ea:70:b1:58:4c:ae:ae:db:63:a1:13:2f:a3:d2:cd:41:84:
9f:bd:a0:66:d7:ab:a6:9e:30:cb:31:2f:ef:11:e8:78:ff:31:
e6:fc:f9:a9:ca:88:10:ea:50:96:48:20:78:32:f4:13:18:d8:
f0:1b:e3:c9:75:e9:dc:9a:70:f6:94:a7:b3:1b:17:24:8e:c0:
96:9b:38:fc:e4:fa:21:1f:43:3b:c2:f5:86:9f:5f:8b:7a:b6:
71:79:65:1d:fd:a1:28:1a:02:85:00:7e:31:49:8b:fb:c7:cf:
36:1c:44:a7:b7:d4:e9:ca:04:93:22:06:2a:49:75:4d:e5:ae:
16:fc:8b:f1:91:31:d1:e4:96:8c:ce:ac:ce:39:3c:24:3b:2e:
29:d2:ef:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:02:21 2026 by rpki-client