Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
File: 0e1mT0ry-OEZuHomjF1DA_uzYRY.mft (raw, json)
Hash identifier: jbVlnOVgF5SXmsRxAL67cs2SJdkNLTJTNBTL46FC5Yg=
Subject key identifier: 75:C9:30:11:CB:B9:37:A5:07:3C:FD:85:51:D8:64:ED:63:58:43:96
Authority key identifier: D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
Certificate issuer: /CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
Certificate serial: 01A040857BF1021D1FA52F1B19485CC3712B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
Manifest number: 034E
Signing time: Thu 27 Aug 2026 00:01:24 +0000
Manifest this update: Thu 27 Aug 2026 00:01:24 +0000
Manifest next update: Fri 28 Aug 2026 00:01:24 +0000
Files and hashes: 1: 0e1mT0ry-OEZuHomjF1DA_uzYRY.crl (hash: 4VIjr+hax98hVVP95H0KFuuFFkWWJsVBZVloo+cjpa4=)
2: BMvBIwftHVjOq-ECziUj7FT9eNs.roa (hash: VyJ9dmhC8T/OTxMz+hnV4q4zH9/xxLGMFMd7o25VL7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:85:7b:f1:02:1d:1f:a5:2f:1b:19:48:5c:c3:71:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
Validity
Not Before: Aug 27 00:01:24 2026 GMT
Not After : Aug 28 00:01:24 2026 GMT
Subject: CN=75c93011cbb937a5073cfd8551d864ed63584396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:88:14:25:7b:9b:cf:f0:d1:6f:08:c5:28:e8:
37:18:08:ff:f9:0e:77:db:de:e5:76:43:cf:fb:52:
cf:25:53:53:c0:c6:fc:35:7e:a6:fa:ad:da:03:9e:
9d:d5:ea:e0:33:0d:7b:1a:c5:8c:2a:c6:fe:21:a2:
7f:39:25:69:f8:55:84:9a:97:dc:b5:35:7f:27:8f:
7a:00:4c:ce:c9:fd:6e:65:e6:ab:ec:c9:aa:90:72:
33:e4:b1:ec:ba:5c:09:bc:9e:80:c4:2b:79:72:90:
fe:a3:f6:8b:52:5d:7a:4e:da:9d:c9:eb:9f:d9:60:
0e:ad:fb:37:a8:ce:40:26:ed:24:06:2e:ca:8f:f9:
d7:9d:91:48:b7:70:e6:63:64:4c:74:90:5a:5a:7c:
3d:cc:aa:d5:76:da:ce:71:a1:87:ee:51:4b:7a:b9:
b1:04:ea:11:73:a1:a1:87:df:ff:5d:47:fc:3f:e6:
a1:29:f1:f1:3f:db:60:58:5f:b4:0a:3a:e2:24:d5:
96:dc:9f:2d:17:b0:40:46:86:73:a4:7f:bf:9a:c3:
c9:df:a2:b2:d7:fe:cc:b7:43:b6:9e:a5:75:c6:7b:
bc:34:87:f0:f0:78:d7:00:61:28:d7:61:2c:80:66:
62:3b:2e:e0:b7:34:7e:96:cb:71:e9:99:6f:68:ce:
18:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C9:30:11:CB:B9:37:A5:07:3C:FD:85:51:D8:64:ED:63:58:43:96
X509v3 Authority Key Identifier:
keyid:D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:87:a5:80:7d:05:f0:34:e9:f0:09:1f:6e:88:53:de:b4:ce:
ad:3c:ab:d6:43:b4:8d:9d:3c:3d:c8:09:ef:01:10:b0:77:32:
b3:fc:5f:2f:6f:62:16:58:05:39:fa:58:a3:94:87:b2:24:a9:
2e:f8:9d:2d:35:27:ed:55:f8:90:f6:b9:65:b2:e5:f1:83:6b:
ed:58:55:ec:9f:a0:0b:9c:93:b7:7e:7e:62:11:ba:9f:ca:9b:
6e:49:af:8d:2c:42:da:00:26:59:30:f0:c3:88:2b:3f:1b:51:
e4:cc:17:3f:94:95:ee:9d:ea:7b:22:0d:90:6f:21:fa:1f:9b:
b1:6c:a9:7e:a3:aa:11:8e:15:be:b1:f9:55:9d:a0:b3:33:f2:
ba:66:f4:6f:fe:21:3d:3d:11:c6:01:f3:7d:9c:74:09:15:c4:
83:d7:a5:b0:59:19:e0:12:14:83:a2:bc:6b:0d:aa:4c:a7:88:
2d:be:5e:d8:a0:53:5e:9b:4f:9d:47:bd:7d:32:71:68:de:f0:
c9:a0:2e:e9:7e:3d:62:55:1a:b9:67:b4:8b:a1:9d:d0:c0:34:
d1:3a:c2:3d:2e:9d:b5:b9:a4:98:7f:1a:89:db:a8:5c:a5:f8:
d8:01:62:5a:c2:df:ea:84:9c:ca:70:63:f7:4a:c9:80:ec:a3:
f0:40:43:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:51:25 2026 by rpki-client