Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json)
Hash identifier: QnCxjS24q92oU3s2dVl+KfrJwfxekvfTeJxyNktL99E=
Subject key identifier: B0:DD:C9:5D:72:8A:5B:AE:7B:E8:0F:6F:7C:60:91:EF:BE:D8:D0:9D
Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f
Certificate serial: 019E2F5F9A046B02B8D9CBF9D448607F8687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
Manifest number: 0827
Signing time: Sat 16 May 2026 06:00:54 +0000
Manifest this update: Sat 16 May 2026 06:00:54 +0000
Manifest next update: Sun 17 May 2026 06:00:54 +0000
Files and hashes: 1: 8SAch57AMOQRbiAz1pknxEq8_AE.roa (hash: dOCl4oMRadim0zorBGeK3Z3XhSzd3Cim0jIw4uxvw28=)
2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: vEk8mf3s03SG+PtfZ/YTspOLxsfBYuTedQV6tFToZSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:9a:04:6b:02:b8:d9:cb:f9:d4:48:60:7f:86:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f
Validity
Not Before: May 16 06:00:54 2026 GMT
Not After : May 17 06:00:54 2026 GMT
Subject: CN=b0ddc95d728a5bae7be80f6f7c6091efbed8d09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:4b:08:13:58:d8:74:88:47:ba:62:34:34:
db:70:23:77:c4:c2:ba:95:38:16:18:b2:e6:f8:23:
db:ff:80:6e:22:8b:58:87:81:08:09:fe:08:46:db:
6e:12:f2:6c:c5:22:45:b4:9d:f6:45:c3:ff:b3:b5:
7c:e2:9e:e1:68:38:1c:73:0f:81:1f:56:5d:db:d9:
10:25:5e:92:9f:ec:fa:f7:0c:98:1e:ce:f5:66:fb:
7d:89:a0:ef:e2:83:6d:9d:44:2c:47:56:2f:94:2c:
3c:8f:1f:ab:31:c9:83:f4:e3:bc:bd:98:38:11:5e:
3c:26:ae:0e:2b:ad:c5:4e:4a:fa:f5:80:90:de:f3:
bc:6e:54:ee:58:7c:ad:94:93:f0:fe:c5:6b:31:a0:
f3:93:e0:ba:65:1c:1c:9e:33:d1:35:08:ae:78:98:
4e:3f:93:51:7c:e2:ab:79:58:bd:87:b1:eb:74:c8:
04:5f:27:56:2e:7d:d9:37:be:02:98:c2:06:ef:b4:
0a:1f:34:35:85:57:26:ad:7c:7c:af:0a:79:16:c8:
72:9c:86:3b:fd:8d:26:57:fc:ad:b8:5b:cd:0a:90:
b5:ae:d6:85:52:cc:e3:9f:d4:97:e2:a4:4b:77:e0:
fb:ff:89:e8:30:da:d6:c0:0f:b8:5b:34:a2:80:15:
60:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DD:C9:5D:72:8A:5B:AE:7B:E8:0F:6F:7C:60:91:EF:BE:D8:D0:9D
X509v3 Authority Key Identifier:
keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c7:a6:e5:9e:4e:84:1b:36:69:1f:cc:ae:1e:59:68:0c:c3:
91:db:8d:33:84:7c:7b:53:99:83:de:94:31:73:a8:8d:93:6e:
86:c0:4f:91:fb:af:38:e6:8e:5e:56:88:b5:9e:db:0a:9e:a9:
28:72:56:35:7a:ef:ad:57:12:e5:c7:56:71:94:0c:cb:67:ce:
23:4b:c6:d8:bc:65:b6:00:a5:d0:51:86:76:e4:80:ae:cd:e1:
ea:ad:b5:1e:6e:c3:f8:b2:16:c8:95:44:b9:7d:ef:b9:2b:5a:
0b:30:0f:fe:43:b2:be:c3:d8:08:35:fe:aa:8d:6d:ce:9e:84:
96:15:37:cc:0e:76:e5:2a:b5:50:39:2e:de:66:db:66:e2:25:
f1:ae:1d:21:fd:62:11:4c:ac:f7:e8:c1:7a:cc:cf:35:f7:1c:
ad:6c:a4:56:c6:53:8f:30:6e:2e:a6:91:de:bb:5f:44:82:4e:
8b:53:b7:e0:06:96:fb:47:8a:d7:e9:5b:df:9e:fe:64:da:2e:
29:60:89:7b:95:8b:fe:7f:0b:2c:fb:96:f3:cd:3a:e0:47:15:
5c:a5:f0:81:85:9a:63:8f:aa:3f:de:e7:5c:f3:2c:3b:31:5e:
7e:c2:7d:f9:47:9f:69:7e:f5:fe:8a:2a:2b:c1:c6:82:8e:9b:
d1:8d:ab:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:30 2026 by rpki-client