Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json)
Hash identifier: KswAkmEJx71EoJdXhJcPTiVlHtJaUrUbpXDrpkdfK3M=
Subject key identifier: 5B:65:EA:BC:97:CA:F8:B4:2D:2E:1D:9A:CB:6A:6C:12:5A:DF:F3:96
Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f
Certificate serial: 019F190C7AACC679582700827134D49D6FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
Manifest number: 08A0
Signing time: Tue 30 Jun 2026 15:01:15 +0000
Manifest this update: Tue 30 Jun 2026 15:01:15 +0000
Manifest next update: Wed 01 Jul 2026 15:01:15 +0000
Files and hashes: 1: 8SAch57AMOQRbiAz1pknxEq8_AE.roa (hash: dOCl4oMRadim0zorBGeK3Z3XhSzd3Cim0jIw4uxvw28=)
2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: G9qAgDYGs6AzuM7+pFgulPUZJhCqakHH72NuJf4ZJ/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:7a:ac:c6:79:58:27:00:82:71:34:d4:9d:6f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f
Validity
Not Before: Jun 30 15:01:15 2026 GMT
Not After : Jul 1 15:01:15 2026 GMT
Subject: CN=5b65eabc97caf8b42d2e1d9acb6a6c125adff396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:cd:77:98:ca:ec:da:5e:cf:63:5c:de:99:
82:02:86:a7:05:4c:a3:51:cf:76:4b:e7:71:81:e7:
5f:4d:b0:1a:b4:b8:59:86:50:7b:bc:c0:2b:72:85:
5a:73:6d:93:60:ac:b4:51:c5:2b:17:dd:26:76:24:
56:a2:20:cf:2f:09:0b:ca:39:36:3d:ff:9e:36:7b:
e3:60:03:ba:1d:7f:c6:43:77:c2:e9:2d:0b:05:58:
d5:46:fb:a3:de:72:0c:bb:f7:59:72:ed:33:b5:8a:
5d:cf:8d:91:fe:5e:46:e4:3a:53:69:29:8c:fe:73:
12:0e:13:28:b7:d1:48:06:00:33:5d:6d:54:fe:64:
dd:6d:1b:7f:4e:43:b4:53:c1:7c:f9:5d:1e:97:58:
38:fb:56:ea:a5:5d:d2:30:16:b5:94:cf:a5:0c:32:
7f:4d:b3:48:13:1c:5c:5e:0a:c6:ac:56:67:d3:d9:
82:42:a1:a8:fd:82:a4:7a:27:bd:26:e9:8e:87:c9:
74:ab:dd:e3:df:1d:2c:10:56:ed:a5:0d:f1:59:9a:
0e:f3:8e:3b:1d:73:5d:58:22:8e:68:7b:62:8a:02:
65:89:0f:d4:fe:d9:b0:2e:f6:a8:26:fa:9c:e8:66:
e3:9b:1d:51:c7:ef:51:60:a7:8b:f9:81:d4:0d:6d:
e7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:65:EA:BC:97:CA:F8:B4:2D:2E:1D:9A:CB:6A:6C:12:5A:DF:F3:96
X509v3 Authority Key Identifier:
keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:36:0c:38:a5:5f:2f:a0:76:f7:8a:60:ab:1e:f7:03:16:0a:
0f:bb:f5:96:d5:bf:9c:ed:f1:89:58:15:2f:ca:0e:98:c3:80:
32:6a:ae:bf:f1:f1:cc:91:ab:6e:dc:16:9c:df:7c:ae:1b:05:
1f:7f:4d:17:09:61:43:5a:9c:a0:66:97:79:9e:59:2b:cd:02:
c8:45:62:28:6b:5e:7c:7e:d6:75:c4:2d:1b:b9:7b:93:8a:53:
31:34:91:cd:31:ec:01:e9:8c:32:1a:aa:ce:51:86:54:48:3d:
79:b5:3f:2e:b4:c7:a8:ca:8e:93:98:42:d2:72:22:31:bd:3e:
e2:04:23:ed:72:d2:8d:85:01:d3:27:31:15:92:98:6e:37:58:
00:83:ff:0d:8d:2c:52:e5:e3:cb:0e:a7:ce:1e:0d:ec:f8:0f:
d3:a2:7e:29:8b:1f:0e:97:87:33:63:35:8e:ef:74:07:84:47:
38:92:35:1b:d3:2d:24:33:23:3f:a3:cc:74:fb:78:62:91:8a:
58:a3:66:4e:c7:f9:41:62:5e:f3:78:10:61:b5:88:c5:da:b7:
10:11:a0:46:cb:fc:b5:db:fb:7b:be:b2:5a:15:43:2c:27:e8:
64:89:c1:d6:77:f5:00:40:f6:9c:8b:6c:4f:df:37:56:c7:1a:
cd:4b:94:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:44 2026 by rpki-client