Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
File: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft (raw, json)
Hash identifier: 6iRWX3dOJQxQ9x4jwy3r2NYOFonpWgRnOZuZswZBP9o=
Subject key identifier: FC:27:43:2E:CF:A3:2C:C3:0A:D8:74:EA:D0:C0:22:55:F9:99:2A:53
Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Certificate serial: 019E1CEB9BEB32EAB32712295D963D0B9C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
Manifest number: 0872
Signing time: Tue 12 May 2026 16:01:03 +0000
Manifest this update: Tue 12 May 2026 16:01:03 +0000
Manifest next update: Wed 13 May 2026 16:01:03 +0000
Files and hashes: 1: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl (hash: qxmWG2ggYNfY5OMYxnKC18AHu54/yTme7Sf1WVICg4I=)
2: cMk2mCaRACr3l8M7sJ_ept3JIs4.roa (hash: 4pfIgLqqvlkx/cyGi0n0BcL4NVT0kLVp1xsZdjF3ulk=)
3: opsubjEoRPBD2SKWbQwhsyQi_lA.asa (hash: Wxgmik5eog5zeLftYBqHXvPHZjZbZr+djsPQFi4j55s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:9b:eb:32:ea:b3:27:12:29:5d:96:3d:0b:9c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Validity
Not Before: May 12 16:01:03 2026 GMT
Not After : May 13 16:01:03 2026 GMT
Subject: CN=fc27432ecfa32cc30ad874ead0c02255f9992a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fa:ca:17:6c:18:6f:53:9f:b2:5f:33:cf:68:
7d:eb:23:94:ea:b5:52:73:7c:2c:16:22:b6:7a:84:
5e:f3:6b:eb:44:3e:91:52:41:a5:44:34:42:5f:cd:
bf:1a:af:8a:82:41:11:c2:7a:79:2b:7d:48:18:87:
ac:e8:29:60:ef:53:7d:36:65:12:ba:f2:c4:24:b0:
ee:d2:cb:6f:aa:81:42:ca:19:a0:29:dd:5c:ee:8d:
9b:7b:5f:ee:6e:be:4a:2a:ad:f2:23:be:8c:ff:f5:
9f:00:98:ed:57:11:f8:82:13:70:39:0a:2f:4b:8b:
fb:ef:62:b9:5d:fb:35:6e:85:3c:4d:99:ae:05:30:
4d:0d:1f:b9:f4:65:4a:40:75:79:d1:a4:04:32:be:
7d:ce:9b:48:2d:a8:94:4e:b6:be:2c:a5:db:17:35:
e4:79:84:94:90:03:09:39:44:3b:7a:09:43:f0:54:
30:42:e7:85:53:5a:4e:6c:23:bb:b1:32:75:3b:7f:
00:c5:19:77:17:a7:f3:15:a6:61:01:73:98:28:24:
36:5a:53:96:72:47:78:18:ba:fb:d0:7e:94:a1:15:
11:1d:48:96:4e:a8:aa:58:49:c2:29:41:d1:38:92:
ea:78:19:fd:0f:51:15:ac:35:b7:68:91:3d:e5:45:
f3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:27:43:2E:CF:A3:2C:C3:0A:D8:74:EA:D0:C0:22:55:F9:99:2A:53
X509v3 Authority Key Identifier:
keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:31:d7:17:ed:cf:f0:b1:56:5e:10:18:2f:be:1e:99:4d:66:
43:bd:0c:3d:28:9f:bf:eb:33:94:6d:a4:23:93:8d:b4:f4:54:
9b:a6:dc:77:43:3b:9a:13:26:7d:d6:f3:8d:70:f2:91:cb:0a:
9f:03:5b:00:95:e6:45:41:66:64:79:9f:fb:6a:80:f9:2e:f7:
51:18:d2:67:8d:32:bc:52:a3:b1:75:a6:b3:99:08:dd:a4:95:
d2:39:0b:8d:1b:7f:1c:09:18:ad:98:88:a5:43:c6:7e:c6:8d:
1d:e6:cc:bc:2a:18:4f:0d:94:3d:fc:d8:1e:52:58:55:6b:df:
e1:07:20:76:49:e2:97:fb:31:df:7b:4d:f1:fe:d9:b4:2a:9d:
69:80:32:0b:a0:78:7f:79:05:20:93:f7:0a:93:87:8d:8f:9a:
7a:f1:b7:bb:68:4a:17:6b:90:e6:be:e8:d1:2c:f6:2a:0a:b4:
6e:ea:4f:21:8d:e8:9a:08:36:36:1b:7c:7a:69:63:74:82:58:
48:46:bc:d3:14:ec:27:41:d3:ae:1c:cb:7f:f7:e0:fa:32:51:
dd:1c:04:aa:a2:88:e5:a7:7c:49:21:05:d0:37:07:b5:75:3d:
86:d5:7f:65:a6:fc:a0:0d:91:d7:5b:39:ec:34:76:46:1b:6c:
77:b4:4d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:19:22 2026 by rpki-client