Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
File: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json)
Hash identifier: 4rwk61Y4YHgw3KrowZbtAql2H+pEmQrdbrI8C7MwPEY=
Subject key identifier: 36:E4:AF:D8:D4:E4:CA:89:EF:0C:92:1B:AC:4F:EE:2A:3A:3D:F7:ED
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial: 01A16A22E41B038913E104ED57DE069FF3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
Manifest number: 0EA9
Signing time: Fri 23 Oct 2026 19:00:33 +0000
Manifest this update: Fri 23 Oct 2026 19:00:33 +0000
Manifest next update: Sat 24 Oct 2026 19:00:33 +0000
Files and hashes: 1: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: +7TYG00Ax8wRHQSYEGRJh2sQReworBD/NpgljDYOVj4=)
2: SbbT_vemLYhSpPxloUrfpgEATIA.roa (hash: TxqN78AgB7Nz/Wz8KEGfJojT7Yd8MRSlYTLQkCNBIXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:22:e4:1b:03:89:13:e1:04:ed:57:de:06:9f:f3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Validity
Not Before: Oct 23 19:00:33 2026 GMT
Not After : Oct 24 19:00:33 2026 GMT
Subject: CN=36e4afd8d4e4ca89ef0c921bac4fee2a3a3df7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:2f:51:32:c1:05:ec:37:99:cd:a8:65:6b:
ea:bc:75:cc:a2:cb:3f:9c:74:b8:1c:06:02:f2:b6:
41:8e:40:8a:78:17:d7:ea:50:dc:ae:d3:6d:65:2e:
9d:cf:c6:d4:10:f1:e5:9f:f3:02:d0:e6:fc:76:83:
73:19:14:2a:9f:d7:0c:2c:42:ce:23:72:68:74:01:
ca:cf:ab:9d:92:c9:54:ff:2a:c1:8d:7e:6f:dc:85:
61:13:c0:3f:1e:05:a8:ff:f6:d9:53:78:b6:09:4c:
64:b6:51:7f:d5:d2:9e:81:ff:f1:75:1d:f0:f7:c5:
aa:e1:83:80:87:92:62:3f:77:ce:07:d7:1a:63:26:
20:ca:cf:8f:37:18:cf:7b:a4:8d:22:1c:e9:d8:2f:
d5:bc:da:5e:8a:e9:75:c2:49:9a:78:5b:fa:af:ba:
67:8c:a5:9c:16:c7:46:89:6f:5f:21:f8:7a:84:5c:
6f:ed:4a:3f:d8:bc:5c:c6:f4:69:5f:7e:0f:7c:45:
90:a9:cc:d3:27:89:06:20:a7:ab:c2:00:6a:93:4c:
b7:db:95:82:62:35:3f:22:2a:f9:ae:33:c9:1c:6c:
02:4b:3e:90:91:b9:f8:d9:b2:fc:bc:d6:21:ff:a6:
f4:8e:29:23:d9:b1:4d:aa:f2:52:81:24:12:3b:1f:
5e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E4:AF:D8:D4:E4:CA:89:EF:0C:92:1B:AC:4F:EE:2A:3A:3D:F7:ED
X509v3 Authority Key Identifier:
keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:60:55:d3:40:8b:32:5a:8e:7f:2c:32:e6:92:85:bd:65:3f:
9e:25:94:a2:18:e6:f2:fd:bd:d0:12:19:2c:b8:d0:29:d8:3c:
a0:4d:ce:c4:56:67:61:36:3e:46:b6:aa:92:3b:35:69:4d:f9:
5f:78:68:ca:75:4c:6e:9d:84:c8:1d:40:40:59:4a:3f:13:79:
26:6c:7d:06:4c:86:2e:79:3d:a0:46:fc:57:d6:63:11:76:5a:
a6:de:3a:3c:9e:83:35:23:44:4b:92:e3:0f:ab:c9:af:a0:a0:
05:ee:c7:69:37:72:70:4e:4c:83:af:12:1e:75:09:83:8d:4c:
5c:9a:13:07:5b:18:8f:56:db:48:a1:f6:5a:84:8a:08:4e:c5:
ba:c1:73:cb:60:f9:29:c1:e3:a3:82:47:e0:1e:23:39:1f:54:
64:a8:a1:c4:cb:6c:89:be:b9:0e:8c:5e:63:10:92:fe:5e:85:
85:e6:15:35:79:38:dd:b4:69:7f:22:03:c2:d3:c2:ba:c3:5d:
5b:9c:48:69:53:c1:32:e3:56:c1:f9:33:97:38:44:1f:3e:a4:
4c:41:76:a0:e9:d3:dd:cf:ef:f9:b2:e3:90:5a:86:60:aa:80:
59:47:ad:59:af:3a:f5:7a:8e:ae:11:54:d6:c4:b0:1e:91:fb:
f1:34:54:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 06:00:13 2026 by rpki-client