Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
File: r0E_0q2eJchLwLWeYIpkNmPmu2g.mft (raw, json)
Hash identifier: iTXDDWCfO4hiypApdWkw1okL4Jh7UmjkicQ1syIQSvk=
Subject key identifier: B4:CA:57:DA:44:30:F5:06:BF:F5:0E:E0:6C:5F:04:E0:5D:2A:09:7E
Authority key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
Certificate issuer: /CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Certificate serial: 01A03DBB36B41AA574D6CD60AD23F54C647C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
Manifest number: 0B2A
Signing time: Wed 26 Aug 2026 11:01:14 +0000
Manifest this update: Wed 26 Aug 2026 11:01:14 +0000
Manifest next update: Thu 27 Aug 2026 11:01:14 +0000
Files and hashes: 1: ij8sL7rYXUnVMlMrRsM_4bG7Zr0.asa (hash: aNABLeKKnKSQskOlM8pQebh0OzTg++9V8UoS1kZ0elE=)
2: n4T_7jQ4VVF7FkHyhaU0P-AIFys.roa (hash: txUNJivQakynCmq8XiBFMte1p7rhG0wBL1AKIlbWKds=)
3: r0E_0q2eJchLwLWeYIpkNmPmu2g.crl (hash: KNsGlvrICFDbeJ06MCcoXIVPcHKYo/AWNoOzpgDxJmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:bb:36:b4:1a:a5:74:d6:cd:60:ad:23:f5:4c:64:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Validity
Not Before: Aug 26 11:01:14 2026 GMT
Not After : Aug 27 11:01:14 2026 GMT
Subject: CN=b4ca57da4430f506bff50ee06c5f04e05d2a097e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:9d:16:7a:f9:11:1b:64:6d:d0:46:25:9d:
ec:3a:70:72:0d:cc:96:4c:29:4e:ed:73:ea:6f:56:
27:c8:7f:ba:47:4f:0e:26:ce:eb:be:6b:c1:b7:e6:
89:3f:2f:64:7e:ea:73:17:58:1e:6b:23:6b:f4:18:
8d:28:13:41:24:50:d5:7c:5e:4e:92:5c:fb:02:5b:
fb:1f:a9:d5:af:83:61:ba:a3:4b:c9:82:c6:dd:8d:
cf:00:fd:fd:0e:93:33:ef:66:74:25:73:ba:37:8a:
a1:07:eb:45:ec:ef:84:0c:09:89:d1:ea:ba:cd:fa:
75:dd:e6:02:4b:81:a7:26:31:cf:7e:55:f6:56:40:
41:d6:54:bd:e5:d8:31:90:2e:47:c8:fb:7f:82:fb:
3c:bd:bb:ce:02:c9:83:1a:e8:a5:ce:0a:03:fe:5f:
4b:ef:e5:40:ca:b6:99:c5:0b:bb:8d:d6:79:42:c6:
f5:58:3e:e8:80:98:39:a6:be:d2:57:62:0e:bb:cf:
ec:e9:36:26:96:2b:1c:30:22:cf:4a:5e:01:09:53:
13:13:96:19:c7:62:64:f1:df:89:fd:ba:57:63:0f:
c9:93:0b:8e:f4:fd:46:45:15:69:a8:c1:16:81:40:
a5:a1:f6:5f:22:3f:a6:6b:b1:89:4e:3c:24:a3:0a:
1a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CA:57:DA:44:30:F5:06:BF:F5:0E:E0:6C:5F:04:E0:5D:2A:09:7E
X509v3 Authority Key Identifier:
keyid:AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:af:85:9f:fc:c3:31:a7:99:7e:95:01:a8:8b:48:d4:66:9a:
1c:be:0f:c5:2c:92:08:56:2a:3c:33:ed:ec:2a:88:7f:50:4c:
3f:83:cd:f5:d0:6b:e2:a4:29:64:38:5b:7f:1b:51:31:4d:fe:
de:25:0e:27:d1:4a:5b:5c:d2:5a:d6:aa:04:66:0b:1b:eb:fa:
02:e1:c9:ee:16:3f:b2:de:43:b3:4b:be:33:cb:6f:75:e4:ab:
df:81:a4:5c:6e:3b:02:9e:ad:a9:61:59:f3:b3:2b:63:24:43:
0e:53:c2:2e:cb:ac:54:63:a7:19:6e:92:28:88:fb:1e:d9:44:
4b:34:8d:18:b5:69:66:8f:79:6e:a8:2f:df:ec:05:2f:4a:78:
af:6a:73:0a:6b:6b:5e:09:c0:f7:b8:16:39:6c:e8:d2:f6:e2:
b9:cb:0a:dd:df:2a:42:0a:59:df:8c:f4:40:05:f4:f5:34:7a:
17:60:5a:33:88:f9:d0:a4:04:0f:0e:f2:c8:63:78:b3:fa:82:
9b:9e:c3:7d:47:7a:a1:e3:db:8c:d4:00:90:56:2d:4d:96:36:
cb:5c:c4:31:8c:9f:93:80:47:78:5c:35:dd:58:5b:61:a6:d5:
0e:57:48:6e:a0:7a:b7:9f:58:58:33:2a:4b:f6:c1:64:5f:fd:
d7:94:1a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:06:38 2026 by rpki-client