Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json)
Hash identifier: K06Mc1Vu2DUFqU+i1zZ2f6VXZ0AVGqZDf1Zx34tIIT4=
Subject key identifier: 9B:86:76:A1:E4:9E:7A:27:36:03:3E:BB:C4:AD:CE:4E:E0:4F:FF:E5
Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f
Certificate serial: 019E1DFE45F99B272F3F227AD6ECE3619E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
Manifest number: 081E
Signing time: Tue 12 May 2026 21:01:03 +0000
Manifest this update: Tue 12 May 2026 21:01:03 +0000
Manifest next update: Wed 13 May 2026 21:01:03 +0000
Files and hashes: 1: 8SAch57AMOQRbiAz1pknxEq8_AE.roa (hash: dOCl4oMRadim0zorBGeK3Z3XhSzd3Cim0jIw4uxvw28=)
2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: p45oneatEi2ejE6Nx0tpUalhgWmMOPK/DAjHHZDqjfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:45:f9:9b:27:2f:3f:22:7a:d6:ec:e3:61:9e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f
Validity
Not Before: May 12 21:01:03 2026 GMT
Not After : May 13 21:01:03 2026 GMT
Subject: CN=9b8676a1e49e7a2736033ebbc4adce4ee04fffe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:24:c5:eb:77:19:cb:a3:a1:cd:e9:96:82:
c3:7b:ab:16:d8:31:f5:5f:6a:8f:76:0f:49:c0:b8:
92:94:17:51:08:22:ae:4a:36:d9:7c:4b:bf:22:a6:
38:18:7d:91:e7:67:a6:74:48:18:ea:2b:3a:5b:85:
d9:c7:87:bd:68:83:12:3d:80:f8:b8:69:11:ed:97:
f4:16:54:69:26:c3:b5:ae:d3:7f:29:5a:d8:74:15:
3c:4d:50:db:f7:bf:60:0e:ec:9f:22:ea:63:0e:f1:
0a:22:02:70:d3:46:ba:7f:7c:e2:46:5b:c0:4d:e1:
ec:be:4b:a7:c8:13:9a:c5:3f:af:12:9b:57:b0:27:
ef:ff:9b:10:22:f5:7d:77:81:41:ac:e3:3b:fb:c8:
c7:16:c9:4c:e4:69:73:e5:fd:2f:0c:59:39:6b:6c:
86:d4:8f:ce:45:a3:f6:13:10:c6:4e:11:43:ec:a6:
0e:d0:63:09:73:e5:97:88:77:93:c8:cc:7d:62:4e:
8a:c1:73:b5:b5:84:01:5c:7a:fe:cf:73:91:61:cc:
4a:6d:47:4a:6a:71:f1:79:84:90:57:93:ee:54:c6:
0f:56:22:95:db:cd:f8:ca:75:75:de:32:5b:10:55:
a7:9e:6f:37:ac:d2:1a:9d:dc:14:62:6b:7d:46:ac:
41:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:86:76:A1:E4:9E:7A:27:36:03:3E:BB:C4:AD:CE:4E:E0:4F:FF:E5
X509v3 Authority Key Identifier:
keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:60:c6:4d:c5:8c:7d:f5:02:6c:0a:fc:f6:c8:2a:6f:7a:a1:
14:7f:09:75:a0:ae:5a:e8:21:10:e5:a2:9a:a8:72:a7:12:8d:
c8:3b:90:2d:4a:20:d7:ce:64:43:de:2d:03:16:8c:e5:d7:ea:
bd:74:c8:53:7a:63:75:18:b4:00:f8:6a:aa:7b:1a:53:1f:e4:
1e:9d:6e:dc:af:5e:b2:96:62:cb:6a:dd:d5:e2:4e:7d:53:39:
c7:de:9a:a4:7b:a3:dd:1f:89:16:c7:94:6d:dc:7f:76:2c:10:
b5:39:ec:de:f4:ab:dc:96:ee:d8:25:cf:10:83:06:40:7e:21:
f7:b5:b7:35:94:c6:43:a2:b4:1b:54:a0:6b:e2:c5:1f:d4:c3:
9b:96:c8:28:e6:f2:f1:24:66:50:2b:72:5d:df:d5:47:0d:ac:
4a:8d:ce:32:34:2f:23:d9:1f:5d:b5:b5:d4:61:bf:04:23:26:
95:57:40:fd:3d:7c:22:c3:cd:f8:84:c3:e5:f2:ea:c7:e8:f9:
7d:96:00:3a:f0:6d:5e:26:2a:96:ee:de:41:4e:40:7b:b1:f3:
0a:64:7d:cb:dd:13:2a:8e:f8:24:9e:51:dd:b7:75:db:f3:ca:
d9:e5:29:df:73:61:b5:a3:16:a6:6f:4e:9a:66:eb:bb:37:6c:
3f:6e:89:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:15 2026 by rpki-client