Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
File: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft (raw, json)
Hash identifier: GiTMeX8gIW0IGxVyc4OmpIM6sk43Gq7tZSOds9aRVso=
Subject key identifier: 19:AC:3A:64:70:B4:8A:61:7A:9E:ED:90:2B:BD:A6:83:66:C6:EA:F6
Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Certificate serial: 019D25BAB2137DFB13C0568FB7621631F2C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
Manifest number: 07F2
Signing time: Wed 25 Mar 2026 16:01:25 +0000
Manifest this update: Wed 25 Mar 2026 16:01:25 +0000
Manifest next update: Thu 26 Mar 2026 16:01:25 +0000
Files and hashes: 1: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl (hash: YQoCEWOOt64pWbWxtw7VTDYwAWVDem6XIsq2iH3aZvs=)
2: cMk2mCaRACr3l8M7sJ_ept3JIs4.roa (hash: 4pfIgLqqvlkx/cyGi0n0BcL4NVT0kLVp1xsZdjF3ulk=)
3: opsubjEoRPBD2SKWbQwhsyQi_lA.asa (hash: Wxgmik5eog5zeLftYBqHXvPHZjZbZr+djsPQFi4j55s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:b2:13:7d:fb:13:c0:56:8f:b7:62:16:31:f2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Validity
Not Before: Mar 25 16:01:25 2026 GMT
Not After : Mar 26 16:01:25 2026 GMT
Subject: CN=19ac3a6470b48a617a9eed902bbda68366c6eaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:2d:b3:c0:40:59:07:b4:a7:ba:c7:47:5b:
1e:ce:8b:22:d2:72:de:07:b4:75:a3:fa:38:6a:26:
af:0e:02:3a:e3:b5:ca:7a:ee:ac:66:d3:7e:d3:3e:
83:ae:87:e0:5b:99:05:2e:04:25:b4:74:53:bb:eb:
66:7d:1e:42:27:e6:a8:bf:ab:7f:71:80:f1:c9:5f:
a5:9a:a1:85:42:ff:30:d3:52:14:3f:76:6c:26:3c:
da:2a:23:c2:a4:93:94:b3:c6:d0:dc:27:54:a7:04:
1e:7a:5e:50:68:db:28:fc:b2:e7:7e:63:12:7f:9f:
80:7f:6e:db:4b:49:54:d1:1a:34:e5:06:86:a9:e7:
81:43:1f:b7:1d:42:28:f2:f9:4d:51:e7:19:80:af:
ca:98:d6:5d:e6:6c:a5:cb:c7:05:9e:2e:1d:29:72:
ac:68:e2:f9:b3:51:34:e9:22:d7:c4:c1:20:82:87:
e9:88:86:c4:f8:a6:c5:96:51:29:d5:92:21:8f:ad:
60:0c:f1:3c:5c:c0:bc:3b:b0:a9:72:8f:d2:04:de:
56:fd:bd:a6:df:fc:5b:58:2f:c0:31:3d:df:81:92:
3f:91:85:a1:0d:f0:00:49:ef:20:f2:c4:75:ae:5e:
b8:81:2a:97:8c:3a:5e:fa:89:5a:55:e5:34:43:6a:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AC:3A:64:70:B4:8A:61:7A:9E:ED:90:2B:BD:A6:83:66:C6:EA:F6
X509v3 Authority Key Identifier:
keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1d:8f:fb:62:4a:0c:01:d9:c4:1f:80:61:ce:5b:d0:c9:31:
85:cd:f6:86:d8:8e:49:57:d9:c5:4b:c4:07:ab:6e:ff:25:45:
bc:d3:63:92:e8:d4:35:f5:d6:3f:7d:0d:ca:7a:89:5c:2d:ad:
f6:1d:7c:f7:c9:11:cc:81:cc:37:dd:63:6e:d4:73:ed:e5:5b:
4d:b9:b3:36:97:43:0b:a7:28:41:91:59:19:a1:d2:02:5d:98:
18:57:17:e7:2c:d0:52:3f:b1:cf:38:29:36:0a:8b:84:ac:fe:
70:28:2c:e4:cf:4d:92:c8:4e:1c:ca:13:bd:79:0e:fb:50:ec:
4d:09:8c:ec:27:7b:6b:56:88:55:31:e9:81:57:8c:97:a7:72:
a6:29:b2:b2:fa:aa:e1:98:1a:90:f7:bd:ba:ae:03:62:fd:5d:
bb:8f:5c:27:60:a4:42:be:b2:7d:aa:06:19:8b:05:c1:66:1c:
ee:1e:bf:5b:04:0a:6e:d2:f1:49:f2:6b:31:86:3d:70:cc:b7:
11:2d:b6:b6:ba:33:77:06:42:eb:87:23:db:61:dd:ca:75:75:
e0:e1:1a:58:49:8d:0b:29:6f:66:f1:6e:a8:61:9f:77:b9:5d:
15:06:cd:7b:a2:88:97:f0:df:48:ae:e3:96:8d:dc:de:39:6b:
52:a0:99:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:46:50 2026 by rpki-client