Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
File: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json)
Hash identifier: l4AFipMAcVqVf6m5SdBSPP7m1RmQjHQTcNZhLM7Qttk=
Subject key identifier: 5D:0E:62:A8:E6:03:9B:36:8B:23:61:3C:5D:27:37:8F:53:77:A3:DC
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial: 01A06F1558721945747A061D86E2BD7A598B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
Manifest number: 0E27
Signing time: Sat 05 Sep 2026 01:01:04 +0000
Manifest this update: Sat 05 Sep 2026 01:01:04 +0000
Manifest next update: Sun 06 Sep 2026 01:01:04 +0000
Files and hashes: 1: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: 3seEwckbvde7TQJVszZbFMOdFcbIXKdLeUjF42U9t+w=)
2: SbbT_vemLYhSpPxloUrfpgEATIA.roa (hash: TxqN78AgB7Nz/Wz8KEGfJojT7Yd8MRSlYTLQkCNBIXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:15:58:72:19:45:74:7a:06:1d:86:e2:bd:7a:59:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Validity
Not Before: Sep 5 01:01:04 2026 GMT
Not After : Sep 6 01:01:04 2026 GMT
Subject: CN=5d0e62a8e6039b368b23613c5d27378f5377a3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6c:4f:a3:61:84:e5:29:fc:f2:35:07:38:72:
2d:75:d4:1a:ac:48:cf:3b:a0:02:7c:39:77:1e:1f:
22:d3:d9:18:7b:52:10:a7:9a:c9:a9:51:8a:04:d2:
2f:08:dc:af:db:38:3d:e2:9a:e1:d9:88:01:ab:ba:
8f:7e:eb:59:d4:96:6b:1b:47:da:cc:6d:13:28:08:
2d:b7:40:a7:5a:2d:ed:5a:5b:da:3a:d9:f1:e3:d6:
8b:d1:b2:eb:f4:db:d0:f8:ce:d9:ed:24:38:4f:8b:
bf:33:8c:41:58:e9:91:a2:8e:e1:b2:21:1d:af:79:
76:06:cc:00:b1:1c:86:98:85:34:37:32:33:1d:e4:
3a:ff:d5:c0:6d:99:e1:7a:45:b8:b6:ea:b7:f9:f1:
7c:13:5a:6c:7a:86:b0:4a:8d:c7:b1:36:28:dc:35:
69:8d:cb:b8:0c:84:1e:30:08:94:7b:43:a3:54:bf:
9b:24:b6:fb:1b:0e:92:a1:20:a7:db:41:8d:e6:25:
88:6d:54:26:b3:64:ca:07:6a:24:02:96:6c:79:b1:
b3:fd:d8:e5:da:6d:a1:e2:2b:16:de:ea:f9:44:c8:
0f:a3:2c:31:bf:84:40:1a:07:1a:de:55:35:ab:23:
1b:2a:4b:37:9d:a8:bd:7b:6f:19:cf:69:f5:51:e9:
1c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0E:62:A8:E6:03:9B:36:8B:23:61:3C:5D:27:37:8F:53:77:A3:DC
X509v3 Authority Key Identifier:
keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:21:c7:38:21:ae:e4:d3:be:7b:0e:e5:35:58:14:04:d8:84:
fb:11:91:60:55:f7:47:84:39:59:13:86:7a:42:69:89:fd:c0:
c5:42:d3:d9:c2:43:e2:fc:22:46:6e:22:9b:fc:10:b4:2f:db:
f8:08:a0:60:92:0b:87:7d:95:a9:73:5a:4a:8e:d3:8d:25:fd:
9b:d5:06:32:aa:bf:d9:04:54:d6:19:58:58:99:a8:4c:7f:d6:
d3:f4:05:32:2e:ef:c4:3b:fd:24:ba:22:39:24:35:91:93:2a:
38:a1:55:c9:2e:89:f7:55:12:71:1d:ac:14:96:ea:45:28:8f:
41:e4:df:58:91:59:72:63:24:eb:9c:cb:59:cc:8c:c7:74:9a:
f2:34:bd:71:13:76:37:58:1c:f7:e9:c6:28:0b:50:c6:a9:cb:
4e:94:23:31:19:a1:c4:88:dd:e9:8f:56:0a:1a:62:c4:d5:a8:
f4:4e:b8:e6:7a:8f:42:62:8e:96:f6:dd:0d:42:49:35:43:93:
c5:12:cc:6e:70:b6:10:f1:71:ae:53:bc:9e:04:2e:cc:d4:de:
a6:b0:33:5a:11:a3:72:3f:e2:53:a1:c9:3c:7e:c9:12:11:f4:
d0:5c:62:30:71:34:79:85:25:1e:5a:57:fd:58:11:45:e4:09:
79:77:a4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:06:37 2026 by rpki-client