Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
File: r0E_0q2eJchLwLWeYIpkNmPmu2g.mft (raw, json)
Hash identifier: J+HPGvOUn6pIOedZRkMYHCk0LNIqwuT/dmI/9R79KhY=
Subject key identifier: 98:70:50:BF:3F:6D:9B:95:47:C1:56:0F:F1:84:9B:5B:78:E8:D8:A8
Authority key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
Certificate issuer: /CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Certificate serial: 019D27DFA8A25E68F5DE20875BD571DE3F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
Manifest number: 0991
Signing time: Thu 26 Mar 2026 02:01:02 +0000
Manifest this update: Thu 26 Mar 2026 02:01:02 +0000
Manifest next update: Fri 27 Mar 2026 02:01:02 +0000
Files and hashes: 1: ij8sL7rYXUnVMlMrRsM_4bG7Zr0.asa (hash: aNABLeKKnKSQskOlM8pQebh0OzTg++9V8UoS1kZ0elE=)
2: n4T_7jQ4VVF7FkHyhaU0P-AIFys.roa (hash: txUNJivQakynCmq8XiBFMte1p7rhG0wBL1AKIlbWKds=)
3: r0E_0q2eJchLwLWeYIpkNmPmu2g.crl (hash: R4qXgvmpaN0DlOQ+x2egNfMMtAF/heR8aztPoBt8mY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:a8:a2:5e:68:f5:de:20:87:5b:d5:71:de:3f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Validity
Not Before: Mar 26 02:01:02 2026 GMT
Not After : Mar 27 02:01:02 2026 GMT
Subject: CN=987050bf3f6d9b9547c1560ff1849b5b78e8d8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:5b:71:ab:3f:cc:6d:6c:27:e5:52:7b:e7:
4c:95:3b:c1:7a:94:28:ca:ca:fe:68:31:75:0e:e3:
ca:25:91:31:bb:04:ba:d8:90:31:59:1b:a7:f8:1d:
20:b6:31:a4:e5:37:90:3b:29:6a:20:bb:ba:ab:77:
a5:fd:fc:5f:fb:64:8d:2a:cd:e9:dc:9b:5d:dd:64:
0c:b7:f3:1d:e0:0a:6f:2a:d7:d4:de:e1:8f:2c:f8:
a0:40:d2:a3:06:da:ff:52:09:ae:a6:fc:31:60:80:
cd:f9:52:2f:c2:76:2a:cf:1d:de:fd:9b:13:d3:e0:
d2:db:a4:c0:b5:9c:86:84:df:85:21:72:00:1c:b1:
80:9c:81:2d:bb:e0:a4:07:9e:70:fa:fe:26:a1:f5:
5c:d6:cf:a9:53:d4:da:ae:68:99:ef:60:e7:92:8d:
35:8e:c4:c5:1e:88:42:b5:6d:1b:32:25:9e:8b:df:
1d:03:9e:cd:e3:25:44:03:60:52:37:a3:8e:7c:02:
00:c8:a3:40:89:e8:d4:bc:8a:bd:b3:78:ff:af:56:
b8:a8:d5:36:11:a5:f5:ee:5c:74:f5:03:bf:8d:c4:
78:e6:89:fe:3d:06:c8:de:e3:1c:68:d2:09:a2:ff:
c5:72:ef:49:c0:8d:46:c9:96:7f:a0:b8:ca:f4:34:
73:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:70:50:BF:3F:6D:9B:95:47:C1:56:0F:F1:84:9B:5B:78:E8:D8:A8
X509v3 Authority Key Identifier:
keyid:AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9d:0b:b4:95:20:31:cc:1e:c2:49:dc:76:74:00:c1:53:5d:
43:5a:77:7d:7f:17:fc:0f:5e:db:9a:3e:17:40:3b:88:76:1f:
9a:ba:9e:52:2d:b5:ab:70:fb:67:e4:07:43:a4:2a:24:33:50:
90:c8:70:48:c9:48:71:a1:6d:d1:c6:0b:9e:80:ff:7e:61:27:
63:dd:be:af:23:c5:6a:96:4c:14:e9:ba:bb:8a:c7:7c:76:4c:
fb:2a:7c:ab:95:6b:33:e3:3d:67:cc:53:74:5b:c1:74:66:77:
31:43:df:c7:a7:67:8d:83:92:cb:30:5a:4a:09:30:b8:56:10:
f9:65:96:f5:93:dc:39:a9:16:07:83:0c:e2:dd:50:b1:e4:bc:
67:c9:a2:fd:8b:7a:61:0c:77:3e:ee:7f:b9:d1:29:4e:aa:32:
e9:e7:3f:bf:95:59:0c:16:86:22:83:53:0c:79:37:bf:ca:1c:
2e:ac:c3:bf:25:7c:82:d0:6f:ca:d8:f6:4e:1e:ea:aa:95:91:
74:f3:37:a8:a4:49:95:ce:55:41:bc:54:9b:a5:39:8f:f7:57:
f7:b3:66:c8:8c:d6:53:64:94:43:59:36:1e:12:3e:7f:a7:4d:
b0:bd:f9:30:93:17:a1:48:51:6b:0c:ce:4e:c7:35:f2:26:96:
b8:b3:60:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:52 2026 by rpki-client