Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json)
Hash identifier: +aGyalzMaJOxbLeFyYNK643dJsDJ4lCkXIDDTSooi0E=
Subject key identifier: CE:8B:6C:9D:65:7E:8F:84:A3:4A:82:FE:DB:2A:A5:72:C9:5F:1F:C5
Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f
Certificate serial: 019D26CD0CCF2A11CBAE1AB7075133C2FCA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
Manifest number: 079E
Signing time: Wed 25 Mar 2026 21:01:05 +0000
Manifest this update: Wed 25 Mar 2026 21:01:05 +0000
Manifest next update: Thu 26 Mar 2026 21:01:05 +0000
Files and hashes: 1: 8SAch57AMOQRbiAz1pknxEq8_AE.roa (hash: dOCl4oMRadim0zorBGeK3Z3XhSzd3Cim0jIw4uxvw28=)
2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: e3fsgEuSZbVNFdwEYAXYHLSq/VhciT9y+sm+qPUV8m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:0c:cf:2a:11:cb:ae:1a:b7:07:51:33:c2:fc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f
Validity
Not Before: Mar 25 21:01:05 2026 GMT
Not After : Mar 26 21:01:05 2026 GMT
Subject: CN=ce8b6c9d657e8f84a34a82fedb2aa572c95f1fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a1:53:25:38:54:a6:58:7a:ee:a0:4a:5b:a6:
e3:b9:4a:53:26:97:e4:94:56:1d:be:27:a2:7c:05:
15:9b:57:81:3d:dc:71:23:b9:bd:fa:40:b4:13:df:
48:16:50:bd:3e:5e:99:48:58:96:50:1c:c8:a2:98:
48:1f:53:64:16:ec:62:c7:69:3d:63:ea:cd:34:a5:
86:c7:12:bd:19:1e:bb:2b:c0:9f:29:99:64:99:2b:
4b:e4:6f:25:7a:e7:1d:d6:6c:73:60:1c:ba:7b:0b:
ed:8a:b4:29:80:9a:ae:80:25:b6:96:66:6c:c5:01:
28:c8:77:65:f5:0f:a2:80:95:6d:54:2b:5e:d3:73:
1f:72:de:f2:4b:6f:76:ea:ca:74:ac:46:8a:84:f4:
2b:62:75:c2:05:07:65:22:99:88:18:2c:13:0b:1b:
6d:7a:46:e8:8f:9a:47:63:ed:86:62:3b:03:d1:b5:
33:40:27:01:27:a3:0f:65:eb:f0:1c:d2:73:65:af:
2e:80:01:ac:d6:fb:8e:cc:24:93:94:85:a6:73:47:
7c:1e:52:03:89:0a:40:9c:65:77:a2:10:45:34:05:
b2:80:82:c2:c0:b9:34:ef:f3:d6:16:e5:d4:4e:97:
21:fc:cf:7b:92:80:8d:c9:fe:65:bb:d3:f3:d8:5c:
e7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8B:6C:9D:65:7E:8F:84:A3:4A:82:FE:DB:2A:A5:72:C9:5F:1F:C5
X509v3 Authority Key Identifier:
keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:f6:11:c3:b4:16:75:85:4a:2c:63:0d:e7:9f:c9:f3:f6:c7:
b9:34:30:e9:33:ad:4f:36:8d:f2:a8:dd:f0:44:fa:d2:76:19:
00:4e:e1:a5:9b:6f:03:fa:eb:b7:1e:d6:fc:cf:4b:20:69:28:
1e:cc:59:1f:d3:d0:be:1b:27:11:09:4d:1b:45:de:6c:08:a8:
2f:96:e6:4f:69:c8:a3:b6:8a:7c:a5:10:a4:b9:f5:51:7b:ed:
cf:ae:07:e7:8d:07:7d:d1:91:54:44:b2:12:13:d6:c1:d1:15:
96:4d:25:12:b1:5b:76:df:8b:da:aa:da:15:88:8e:ad:6e:ef:
04:29:c9:64:c9:61:1b:9d:26:d1:58:e4:8b:b9:ac:f0:fe:b2:
d7:1b:01:21:69:68:8e:a3:fa:c0:35:e7:0d:82:4c:2d:c1:40:
01:24:d3:bf:df:9a:6e:5c:c8:86:ff:65:ad:84:00:1a:0a:b5:
0e:eb:74:51:58:d2:0d:4f:2a:d4:74:37:b4:ad:d2:27:96:b0:
c1:be:02:ab:a7:13:4d:78:1e:c2:82:9a:d4:68:d0:30:41:f5:
39:9b:1d:4a:dd:26:fe:61:1b:38:97:36:e9:80:76:93:af:84:
5b:d8:c1:8a:a4:0d:d5:18:34:c1:9c:99:63:96:8b:1e:a6:40:
d9:73:59:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:15 2026 by rpki-client