Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
File: r0E_0q2eJchLwLWeYIpkNmPmu2g.mft (raw, json)
Hash identifier: dQ/DyxHFdPjThqgxSib1PIsYMOLQP9QFs0Dwq11aKE0=
Subject key identifier: D5:E2:DA:63:29:5B:BB:31:CF:FD:0D:23:D7:B7:70:7A:9D:24:08:BA
Authority key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
Certificate issuer: /CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Certificate serial: 019D37530DE82A2C3BC883CB64D462196B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
Manifest number: 0999
Signing time: Sun 29 Mar 2026 02:01:22 +0000
Manifest this update: Sun 29 Mar 2026 02:01:22 +0000
Manifest next update: Mon 30 Mar 2026 02:01:22 +0000
Files and hashes: 1: ij8sL7rYXUnVMlMrRsM_4bG7Zr0.asa (hash: aNABLeKKnKSQskOlM8pQebh0OzTg++9V8UoS1kZ0elE=)
2: n4T_7jQ4VVF7FkHyhaU0P-AIFys.roa (hash: txUNJivQakynCmq8XiBFMte1p7rhG0wBL1AKIlbWKds=)
3: r0E_0q2eJchLwLWeYIpkNmPmu2g.crl (hash: ZYdey3PQ2DioyOdGZ5wGcFzrf6hfqz5OpqgOV9WGPes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:0d:e8:2a:2c:3b:c8:83:cb:64:d4:62:19:6b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Validity
Not Before: Mar 29 02:01:22 2026 GMT
Not After : Mar 30 02:01:22 2026 GMT
Subject: CN=d5e2da63295bbb31cffd0d23d7b7707a9d2408ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6b:78:38:ba:70:fe:41:f9:27:9c:e3:7c:be:
62:2b:8f:90:15:aa:b4:b2:35:41:3a:8f:bf:e5:59:
93:7f:45:66:e4:02:fc:6a:26:be:0c:21:84:f8:6d:
64:2d:bd:d2:f6:42:29:0e:ef:2c:45:df:8d:e5:d8:
5a:c7:a6:a4:b5:28:dc:a4:4b:09:dd:38:42:50:5e:
be:57:ef:16:6b:4b:a4:1f:ae:7a:f5:db:18:98:1c:
e7:40:8a:d4:8a:fa:88:f2:00:af:14:1d:a4:ac:f0:
a5:6c:ef:1f:06:a3:80:62:d5:0f:b6:3b:e7:c0:0a:
90:52:32:e4:93:5c:76:7c:68:02:20:cb:13:72:68:
96:e0:94:67:1a:48:23:23:5c:be:aa:1e:d2:ff:be:
8b:81:92:48:29:b1:c0:fa:9e:0c:00:60:91:d0:8c:
11:51:51:af:86:84:28:6d:de:8e:f0:47:75:c8:29:
72:da:75:fb:0f:4a:15:d3:75:12:12:5b:1b:2d:17:
2d:43:4e:75:e6:63:b2:bb:f9:e0:c8:7f:b4:da:df:
bd:44:c2:74:da:4d:d2:ee:7f:8e:43:d6:27:d2:21:
34:b8:3a:84:c5:fc:d5:f2:6f:74:dc:cd:b3:4b:49:
89:3b:ec:2a:95:f5:11:6c:70:ae:67:19:4d:a0:49:
cd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E2:DA:63:29:5B:BB:31:CF:FD:0D:23:D7:B7:70:7A:9D:24:08:BA
X509v3 Authority Key Identifier:
keyid:AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a6:bc:d5:69:db:28:a4:57:93:f1:9f:43:73:a4:e4:c5:41:
a9:05:73:d1:61:c8:fd:bc:60:c7:4c:a6:e2:fe:02:f2:90:d0:
7a:27:96:61:7d:92:a0:f8:db:96:aa:c5:b6:af:7f:0d:58:9d:
cd:1f:f9:cf:7d:79:c8:8c:c9:2b:3b:59:22:87:7c:e9:8c:fc:
3b:b6:a4:4e:7b:af:c3:c2:78:87:06:3f:40:bb:75:13:47:86:
b6:24:e1:0f:72:33:8a:76:d7:38:03:d6:cc:cf:bf:7b:da:a5:
c7:e9:29:a6:53:55:d0:27:12:8f:26:c1:dd:ca:8b:db:53:e4:
3d:8c:ab:c2:b9:b2:1d:b8:fa:8e:c3:1d:4d:5b:df:56:fa:f3:
b7:b1:ce:5c:75:d6:fa:61:b9:b3:a2:e2:57:88:30:18:04:b0:
07:21:e3:a3:29:78:27:43:76:cc:38:27:e4:8c:b2:46:53:96:
c1:f3:0b:72:6a:a6:fc:5b:7d:ed:ad:e9:51:1e:d5:44:5a:58:
d1:f1:04:70:0d:87:58:35:2b:d4:cf:af:50:af:f4:44:48:94:
b0:f5:63:a3:c4:18:b7:29:74:06:3f:22:a4:59:aa:f5:36:1a:
4b:75:2f:21:d4:19:11:52:7d:b6:3c:96:96:9f:0c:84:d0:5b:
bf:d6:3a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:11 2026 by rpki-client