Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier: pQxRZvyEq3ZUtWMUBuTyX91nWLE2gvEP5ZLqJASvfts=
Subject key identifier: 19:29:CF:EA:38:FA:88:00:EA:93:60:2D:F5:87:BA:72:91:83:1B:E0
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial: 01A06649B18C88543194E9190A28D9A0E482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number: 0CB6
Signing time: Thu 03 Sep 2026 08:01:40 +0000
Manifest this update: Thu 03 Sep 2026 08:01:40 +0000
Manifest next update: Fri 04 Sep 2026 08:01:40 +0000
Files and hashes: 1: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: 0ENY+GPj4V9xz4u4MV7qyMFs8cNnenrAi6h1lGuXug8=)
2: schhp52ulEJ2Q5lWWzeviWV-gSw.roa (hash: HhUn0pI+C/AL7qljIPdAHULHb8txQJ+RtoE68bF3XwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 08:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:49:b1:8c:88:54:31:94:e9:19:0a:28:d9:a0:e4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Validity
Not Before: Sep 3 08:01:40 2026 GMT
Not After : Sep 4 08:01:40 2026 GMT
Subject: CN=1929cfea38fa8800ea93602df587ba7291831be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3e:55:84:98:e3:4a:a7:3e:79:e4:2e:0d:ba:
c7:f8:3c:bb:22:6b:11:58:24:be:f4:43:a7:65:ef:
d7:35:2c:66:2c:a5:bf:52:2c:1c:d7:ad:d2:db:07:
12:a2:06:89:79:62:4d:e1:2a:8f:17:4a:e0:7e:4c:
1f:10:10:41:1e:4f:78:f7:16:32:99:8d:55:51:0d:
70:a6:b8:82:f4:75:42:16:ba:45:52:29:23:d3:9a:
a8:f3:6b:90:4c:15:4a:1e:bb:14:61:1e:b6:6f:30:
c4:d0:66:9c:69:1e:70:10:14:30:cc:86:21:23:53:
9b:13:f0:81:0c:c1:4d:83:3e:34:d2:f6:40:f2:23:
8e:a7:a5:a6:79:c1:54:9c:c0:8e:08:87:c7:aa:95:
60:0c:0a:1d:98:db:aa:5b:86:ee:06:53:2d:53:bc:
8f:6a:c2:dc:c6:bb:76:50:d5:e7:96:66:21:73:99:
ec:3d:88:17:f5:79:6b:03:c1:f2:08:cb:1d:2a:71:
9f:b3:c4:4c:71:8f:56:ca:32:db:51:d7:21:ca:0d:
a6:ec:0b:c1:17:5c:1b:2a:64:aa:65:b6:65:b5:93:
bc:12:f9:7c:2b:bf:c6:4d:06:e7:13:1d:f3:55:c1:
86:db:46:1a:08:78:2e:7c:d7:db:1e:8c:75:be:bb:
71:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:29:CF:EA:38:FA:88:00:EA:93:60:2D:F5:87:BA:72:91:83:1B:E0
X509v3 Authority Key Identifier:
keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a6:85:bc:87:6b:73:69:dc:fe:7b:3f:12:0c:48:73:d1:e3:
0b:1e:90:8b:d3:96:52:04:ff:1f:d0:6f:9a:60:eb:12:83:63:
38:20:12:4a:53:6a:5e:ee:0d:53:e3:8c:57:e4:c3:33:da:6d:
24:db:c3:d4:36:5c:21:b6:6a:32:d9:8b:9e:25:a9:27:38:f5:
a6:13:25:29:14:6f:01:28:92:3b:63:0b:6c:df:23:71:a5:03:
87:88:86:c3:c7:14:de:16:f2:38:8d:2b:8b:4d:26:ec:16:73:
7c:9b:54:74:bf:84:b5:28:ad:59:d8:9e:62:33:39:76:d0:47:
67:34:60:c6:96:b1:43:65:7f:7d:7c:98:14:24:d4:2f:53:3c:
f3:76:6a:9d:e6:89:26:1b:db:60:18:0a:3a:f1:ae:78:e9:7b:
21:71:a4:6e:98:1e:a1:10:8e:d0:6b:47:9a:c7:63:a1:67:77:
8b:70:9f:67:31:74:1c:fc:24:29:80:0c:66:1c:5b:72:54:f6:
9a:7d:22:d1:83:6a:ee:09:9a:ae:06:1d:fc:cb:95:04:8e:b4:
15:c6:c8:8f:b0:1b:c1:f9:b1:49:80:2a:7e:80:25:2c:41:3f:
9a:2c:12:0c:c3:55:3f:43:53:c2:8c:1e:46:df:f3:f7:e8:a3:
8b:5d:3c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:10:21 2026 by rpki-client