Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
File: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft (raw, json)
Hash identifier: 2yVqAT6vJBAPlMR1unRGJV/gDSBIlVq65RmUVI52GRc=
Subject key identifier: 82:04:E2:6F:EA:68:26:19:AD:F5:8F:C9:69:D7:4B:08:7D:59:0C:77
Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Certificate serial: 019F122E86066D41E365C2D1CA0FD1FD9082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
Manifest number: 08F1
Signing time: Mon 29 Jun 2026 07:01:06 +0000
Manifest this update: Mon 29 Jun 2026 07:01:06 +0000
Manifest next update: Tue 30 Jun 2026 07:01:06 +0000
Files and hashes: 1: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl (hash: Y3GImuNHo9WGRtQJcPpL3RbJpe2oisQ85WGoR32aFks=)
2: cMk2mCaRACr3l8M7sJ_ept3JIs4.roa (hash: 4pfIgLqqvlkx/cyGi0n0BcL4NVT0kLVp1xsZdjF3ulk=)
3: opsubjEoRPBD2SKWbQwhsyQi_lA.asa (hash: Wxgmik5eog5zeLftYBqHXvPHZjZbZr+djsPQFi4j55s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:86:06:6d:41:e3:65:c2:d1:ca:0f:d1:fd:90:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Validity
Not Before: Jun 29 07:01:06 2026 GMT
Not After : Jun 30 07:01:06 2026 GMT
Subject: CN=8204e26fea682619adf58fc969d74b087d590c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:7b:3f:1c:4f:1a:36:12:55:57:b3:52:73:
34:83:f5:4a:ef:2f:8e:59:4c:6f:5e:aa:8d:8c:7b:
84:fd:44:5d:b4:f1:03:ae:ab:ca:29:ff:da:d5:85:
ee:7a:41:14:73:df:e6:c0:de:8d:83:2e:bc:9c:54:
95:a9:2e:b7:7d:f4:64:03:aa:ff:cc:69:96:37:31:
89:61:35:17:69:4d:be:56:08:98:62:72:42:14:26:
0f:ce:f3:d3:bc:b6:a7:33:2c:81:90:83:36:db:07:
e2:c8:35:82:9f:05:bd:47:71:f3:f8:19:7f:8f:10:
5c:45:a6:b4:ec:31:1b:b2:49:53:9c:37:c5:79:e9:
92:bd:16:18:30:1e:fa:37:83:bd:57:b7:25:5d:a0:
5b:87:a7:0b:89:48:11:5c:ed:ca:7c:33:e4:7b:0e:
40:e1:f3:ea:f9:b8:fd:e3:5c:4c:4f:71:1b:48:b6:
f1:7f:f8:80:92:55:1d:97:f8:56:81:e7:86:3c:f7:
7f:d4:f6:58:52:c7:68:67:53:45:5b:0c:c8:af:99:
97:02:88:2d:56:3c:39:48:3e:12:f9:13:76:0b:b7:
f9:0d:92:d5:18:65:71:b1:69:21:aa:5e:13:1e:a1:
48:e2:5a:f2:34:ba:a8:84:db:ad:9a:88:c8:c8:33:
b4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:04:E2:6F:EA:68:26:19:AD:F5:8F:C9:69:D7:4B:08:7D:59:0C:77
X509v3 Authority Key Identifier:
keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fe:92:8c:9f:23:ae:7f:25:b9:4c:2a:65:36:6e:d6:81:63:
4e:75:4e:a0:a2:4a:82:19:12:2e:75:b7:56:30:ef:9e:68:85:
59:a3:f2:b8:5d:f1:9f:15:75:d6:d8:09:e2:49:96:f5:0f:af:
30:a4:bb:05:ac:bc:54:7c:52:1a:f9:d7:c2:69:97:02:b5:71:
bc:2a:30:0a:e6:f7:d2:0b:f6:3c:6f:ac:00:29:86:04:ac:25:
a8:c8:01:2d:25:00:41:3d:49:fc:27:b4:33:97:68:89:20:46:
ba:91:89:19:31:46:1e:85:07:e9:49:88:9d:ba:52:81:51:4d:
a4:f8:2a:16:b4:a4:88:70:9a:44:e3:e0:36:0a:08:fb:c5:3c:
40:0c:d3:db:30:22:01:25:ed:81:06:fe:b9:c8:a3:17:11:be:
9d:64:76:2d:0e:36:4a:df:5d:14:3e:94:ef:36:b6:0e:e2:58:
c5:01:dd:f9:03:c3:c3:f0:78:13:57:39:32:39:f9:80:76:44:
47:cb:0f:a0:7f:a1:c2:83:4f:13:f5:3b:1a:de:29:b1:94:5e:
cb:63:4e:3c:bf:f8:78:94:e5:2e:22:18:7a:e8:ef:be:03:11:
7e:fd:ed:33:b1:cc:b9:68:36:c1:41:43:25:62:fa:79:de:ee:
53:fc:79:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:39 2026 by rpki-client