Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
File: 0lE5LNfm5ApFwbikR5iA7vlg8zA.mft (raw, json)
Hash identifier: tqcUVabItOZ9ur0r4bJx0ktxAXCWAjLwBEAhwRPZm0E=
Subject key identifier: E0:24:05:25:AA:7C:B4:67:0D:79:A3:BB:DF:8E:10:83:75:0D:C3:A8
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial: 01A13F020CFF6C88A1E0DF621B9835FEA2EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 10:01:01 +0000
Manifest this update: Thu 15 Oct 2026 10:01:01 +0000
Manifest next update: Fri 16 Oct 2026 10:01:01 +0000
Files and hashes: 1: 0lE5LNfm5ApFwbikR5iA7vlg8zA.crl (hash: oMK/Baa8Xph5G3/8jvhfrL3QBO7rsZDvxknEYezciEM=)
2: 12mV3ZosY8cTKWpFfBQEfwnx0BM.roa (hash: sqnV6smhnureA54M31ulMVSP8a9WYb/7AIpEIZop+fE=)
3: w-By4YicrBafnG_nw52slsPB7Mo.roa (hash: EbrbjE7k8b3TDf5vDoluKgnOO0qKqQeCgXWBufBzO7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:0c:ff:6c:88:a1:e0:df:62:1b:98:35:fe:a2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Validity
Not Before: Oct 15 10:01:01 2026 GMT
Not After : Oct 16 10:01:01 2026 GMT
Subject: CN=e0240525aa7cb4670d79a3bbdf8e1083750dc3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:05:a0:56:0b:ca:b2:c2:d1:bd:25:87:0c:
3d:49:e6:b0:3e:c5:01:bf:c2:92:ae:90:a4:78:23:
ad:bf:80:0f:0b:7e:e3:3d:3a:84:b1:9e:86:07:d4:
d1:9a:00:99:15:ba:db:b4:a0:76:c1:03:6a:23:90:
7b:d4:a4:f4:7b:3d:3f:9b:39:46:1e:25:d0:e1:2c:
12:b9:e4:e2:db:0f:4b:d9:da:7a:48:c3:0a:3c:54:
71:a5:90:81:ed:f3:83:e1:82:64:bd:2f:4d:af:ab:
96:54:74:6d:34:9c:58:28:b2:43:48:77:13:cc:46:
46:84:a8:0f:3b:1f:c1:21:0e:b7:6e:04:b3:cc:d8:
08:c7:a9:d9:3f:6b:b9:6a:96:a3:7b:5e:92:56:04:
b2:7a:e7:0c:50:65:fa:e0:e0:04:86:46:6f:fa:63:
25:93:f0:87:2f:03:a5:85:f4:73:28:95:44:4a:ad:
29:58:af:e1:d1:51:d5:90:1e:bc:84:b6:2e:a3:90:
e4:68:44:ff:91:58:b6:ce:df:2c:45:0d:43:a0:26:
4c:6b:53:b8:cf:9e:8e:9c:48:b5:2f:a9:61:59:0a:
8f:bd:4c:20:61:13:90:ee:3b:46:ca:67:24:93:03:
d5:a0:fc:2e:65:c4:e9:0c:b5:94:32:82:d4:c6:79:
84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:24:05:25:AA:7C:B4:67:0D:79:A3:BB:DF:8E:10:83:75:0D:C3:A8
X509v3 Authority Key Identifier:
keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:33:85:a2:fd:7b:dc:78:57:24:3a:f1:ff:20:9a:94:59:c5:
a3:75:fd:83:0e:8c:13:31:50:14:f8:d6:5a:38:60:e4:4e:8f:
f6:14:16:df:75:4d:17:9a:9d:80:f5:c6:49:43:70:ed:a0:15:
6b:24:9c:87:72:16:12:a1:c3:12:94:fe:35:90:20:92:ca:50:
76:7e:c1:13:2f:88:da:04:5f:cc:0c:47:12:a2:41:b6:51:c1:
1c:8e:81:c5:c2:03:0b:83:88:78:85:c4:f2:e7:bf:f4:05:44:
14:2f:70:54:19:03:de:5b:bd:85:f3:11:eb:c1:e2:5f:d2:b4:
78:a0:59:4c:60:85:ae:f0:0c:e0:a3:63:54:80:c9:44:7f:d4:
bd:77:e2:4b:56:97:89:93:b1:44:3f:3b:e4:96:44:74:15:b2:
ed:fb:a8:73:0f:ff:e5:2e:2d:15:48:8b:76:f6:c6:41:ad:05:
72:e0:f4:be:5e:a3:95:74:31:ec:cb:f6:84:74:81:2a:b3:47:
d9:3e:f8:07:22:71:75:f3:54:77:a6:3f:54:0c:fe:bf:fd:9c:
39:0f:d5:e2:a9:97:a7:ba:f2:de:4b:21:bb:65:4f:91:85:76:
dc:a6:04:c4:00:97:28:e2:54:11:43:52:bb:a5:47:1b:9f:9e:
0b:8b:a6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:51:06 2026 by rpki-client