Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.mft
File: D-iOP9BlXUyaV3sxYiDe-DF3VbE.mft (raw, json)
Hash identifier: SUw0CIaPSykhmkgNpvAGnc2nx/bKVmOMinh+L0UmUQk=
Subject key identifier: E6:81:6C:4B:5E:D2:64:74:E7:19:59:E6:A6:CC:8A:D2:C6:8E:73:74
Authority key identifier: 0F:E8:8E:3F:D0:65:5D:4C:9A:57:7B:31:62:20:DE:F8:31:77:55:B1
Certificate issuer: /CN=0fe88e3fd0655d4c9a577b316220def8317755b1
Certificate serial: 01A04084B9C2EB1617A7A76FDF7E358745BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-iOP9BlXUyaV3sxYiDe-DF3VbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.mft
Manifest number: E3
Signing time: Thu 27 Aug 2026 00:00:35 +0000
Manifest this update: Thu 27 Aug 2026 00:00:35 +0000
Manifest next update: Fri 28 Aug 2026 00:00:35 +0000
Files and hashes: 1: D-iOP9BlXUyaV3sxYiDe-DF3VbE.crl (hash: s1+3UYNIUNp8nwll0XoTE/e4v5zjWpYcfF5a5ykh3iI=)
2: VRhw_fRM9jAzC_jp7EXs7OxLil0.roa (hash: AB9hVmBjo6ZhGYEOgtx/yX50Or9Lly3jgJBDfkouOC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-iOP9BlXUyaV3sxYiDe-DF3VbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:84:b9:c2:eb:16:17:a7:a7:6f:df:7e:35:87:45:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe88e3fd0655d4c9a577b316220def8317755b1
Validity
Not Before: Aug 27 00:00:35 2026 GMT
Not After : Aug 28 00:00:35 2026 GMT
Subject: CN=e6816c4b5ed26474e71959e6a6cc8ad2c68e7374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1a:45:f9:6d:9e:b5:57:b3:2a:20:0d:78:e8:
94:0f:32:e9:4e:3b:a2:0a:58:8b:a5:07:d3:0a:04:
8f:6d:9b:ca:10:99:33:fc:fe:e6:03:42:5a:6e:5f:
b3:ac:10:e2:3a:96:58:43:82:f0:2f:37:98:5c:7f:
0c:05:3e:c9:ca:c7:62:65:ce:68:48:9c:eb:ca:ae:
4f:dd:f5:e9:b2:fa:b6:54:4e:c9:cd:9c:28:27:65:
9c:6a:d0:5a:ad:b1:3d:8b:1e:b5:56:6b:e3:b3:48:
cf:b8:30:66:5f:e9:e3:b7:b6:85:75:7f:7b:48:97:
66:a7:5d:ca:c5:67:c8:8b:39:1f:21:66:7e:63:cf:
00:1b:75:3b:54:9b:e5:5a:14:d6:7a:43:3a:25:e7:
a2:c9:e8:38:43:2c:59:da:50:56:0f:02:01:43:a6:
ef:d0:70:9b:c9:22:17:9c:c9:07:e8:4e:4e:09:44:
1f:06:41:92:28:7e:61:fe:86:da:e3:06:f1:be:df:
dd:c6:10:0b:29:90:48:a4:c9:67:d6:40:0d:81:9e:
26:e8:7c:00:7a:69:3c:7f:5b:de:78:d5:e2:cc:09:
f1:40:cc:14:05:d8:36:a6:21:2c:76:24:0b:22:a6:
d9:d0:59:c7:f1:6b:30:7b:89:56:d7:d6:24:f4:bc:
e4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:81:6C:4B:5E:D2:64:74:E7:19:59:E6:A6:CC:8A:D2:C6:8E:73:74
X509v3 Authority Key Identifier:
keyid:0F:E8:8E:3F:D0:65:5D:4C:9A:57:7B:31:62:20:DE:F8:31:77:55:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-iOP9BlXUyaV3sxYiDe-DF3VbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:88:01:d2:87:3a:15:eb:e1:fa:28:34:b4:fb:3d:89:c3:bb:
68:96:5c:9c:d8:24:3d:9e:b2:cc:f1:04:c8:7c:80:16:74:9f:
bf:56:07:9c:e0:ac:5e:82:4d:78:7c:f9:20:8a:eb:b6:d3:e5:
3e:95:a9:81:eb:08:0e:82:96:77:f4:8b:41:bf:e3:7a:c4:1a:
53:dc:a2:19:59:ed:f1:5f:27:f9:2c:6c:ec:2b:50:b3:cb:7c:
53:57:6a:17:f8:51:24:66:07:a3:2a:fa:3e:71:9a:2a:bb:2c:
f0:fb:e0:42:fa:bb:ce:ac:a4:a6:be:ff:b2:11:26:ec:a6:fa:
e6:fe:58:31:d2:e9:f1:89:d5:28:09:5c:47:88:19:30:65:83:
db:af:8c:cb:67:b9:1d:a7:ab:e1:a4:f2:c8:e7:a1:e7:0b:1c:
22:f4:07:74:f4:6f:34:d7:08:9f:8c:fe:b9:1e:de:1c:15:66:
c1:c9:c9:98:26:31:8a:b3:b7:58:08:d6:74:44:74:89:c1:f4:
3c:eb:7c:13:7e:4b:88:21:57:e2:30:18:ef:31:b7:4c:38:07:
3f:4e:75:31:65:c4:9f:ac:f8:79:ad:fd:bd:8f:19:b0:fa:6e:
78:5f:44:8d:06:7a:79:7a:8c:ec:9e:88:97:78:f0:27:ca:0d:
e9:9e:93:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:55:53 2026 by rpki-client