Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier: SGu2l7k6+R47tJYd+SpbrM/rp1PtkW7xFaXuBjwmmo0=
Subject key identifier: 74:84:98:45:2C:C2:9F:6B:B1:77:2B:7F:78:8E:C9:D6:3B:9A:00:9D
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial: 01A16CED15177627A177A6B3B93056251E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number: 0D3E
Signing time: Sat 24 Oct 2026 08:00:38 +0000
Manifest this update: Sat 24 Oct 2026 08:00:38 +0000
Manifest next update: Sun 25 Oct 2026 08:00:38 +0000
Files and hashes: 1: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: qP3OeddwtdvWf5Jl3Z364vBbVLYN3RpQDZFARu7nnHU=)
2: schhp52ulEJ2Q5lWWzeviWV-gSw.roa (hash: HhUn0pI+C/AL7qljIPdAHULHb8txQJ+RtoE68bF3XwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:ed:15:17:76:27:a1:77:a6:b3:b9:30:56:25:1e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Validity
Not Before: Oct 24 08:00:38 2026 GMT
Not After : Oct 25 08:00:38 2026 GMT
Subject: CN=748498452cc29f6bb1772b7f788ec9d63b9a009d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:3d:99:04:17:28:71:d9:8e:db:49:a7:e6:
1b:b2:1c:8e:fb:f3:ea:c2:30:c4:a8:40:63:f1:43:
8b:a2:56:5d:18:c4:fa:08:3e:a1:ec:61:e9:e5:f0:
0a:4f:ac:4d:cc:bd:b2:be:16:79:f0:ab:c3:ab:82:
fc:9b:c9:1a:17:a6:3c:1b:7e:a4:ba:cc:a7:8e:98:
7e:af:63:4f:73:7f:c0:c8:cb:48:9f:d6:e6:49:40:
b0:d1:38:9d:5a:4f:7c:e7:16:6f:a9:4d:b6:2b:86:
a5:a0:ac:39:6c:d8:66:0a:63:93:33:f2:7b:62:18:
d1:c1:70:16:3d:aa:82:90:81:c2:90:68:b6:6a:48:
ff:08:dd:09:af:3f:8b:4f:4c:9b:da:f6:bc:60:54:
68:37:b9:4b:a6:2d:74:d9:f1:ca:14:ad:e4:a1:c3:
5e:f4:06:14:fc:e2:37:60:43:4f:72:b7:65:b1:4b:
19:d3:fb:b1:23:4e:aa:fa:6e:18:6b:f4:48:1c:44:
02:77:59:d2:e2:7d:5f:30:6d:61:b9:c9:bb:b3:35:
b7:4b:13:2e:3b:80:99:e7:bb:8d:d0:7a:10:ff:72:
54:fe:8a:a9:7e:22:96:7e:1f:32:4a:a0:58:49:f9:
b8:0c:ce:7f:a3:ec:c7:d0:97:ba:1e:26:e4:a6:ea:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:84:98:45:2C:C2:9F:6B:B1:77:2B:7F:78:8E:C9:D6:3B:9A:00:9D
X509v3 Authority Key Identifier:
keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9b:17:16:c5:a0:27:64:12:0d:c4:52:b3:e9:02:ee:50:29:
4e:46:8b:d3:7f:f1:e4:c8:90:e5:71:4f:c3:5b:76:2c:90:48:
1d:16:c8:b6:69:21:ec:e8:5c:92:a6:90:98:25:96:d8:76:5c:
f5:13:32:6d:61:b6:42:bf:74:d2:2f:10:70:1e:ee:c1:ff:e9:
05:16:3f:bb:d5:bd:08:be:93:a3:9d:80:40:c4:a5:d9:d9:7d:
89:3a:87:97:01:7c:4e:06:0c:3f:9c:d3:0c:dc:4c:52:da:d5:
f7:da:8f:a6:35:fd:2b:8e:a6:f1:04:c0:4f:f1:d9:37:01:d1:
b8:60:23:8b:c6:fa:3b:ca:f3:a6:72:7e:9f:bd:45:b8:b3:e3:
a0:2e:b5:da:40:8b:68:36:82:a9:ec:80:23:37:70:13:d8:a6:
3f:1f:6d:b9:f4:17:b9:ef:a9:9a:0a:28:22:76:07:0b:b7:8e:
32:5a:6c:eb:4a:48:f7:a3:86:dd:fb:39:dc:a0:52:30:bd:a2:
b7:9d:fb:c1:77:9c:be:ef:d5:2f:fd:07:12:3c:b4:7d:fe:b5:
ed:88:81:a2:37:23:d8:4c:80:1c:24:7e:7d:f0:6b:77:e4:da:
43:56:7a:13:40:de:a8:25:55:c2:fd:d8:a3:e1:e7:c1:83:5e:
de:4d:5a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 16:34:24 2026 by rpki-client