Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
File: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft (raw, json)
Hash identifier: t0JRU8MHeZe6XhIzoPqmnmr+zflxrent8bHERePnDG8=
Subject key identifier: 51:94:C4:54:56:D6:CA:CE:87:2C:23:84:80:1E:0D:5F:27:E3:5D:43
Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Certificate serial: 01A1412821A74AB3566DB644704C3842B76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
Manifest number: 0A13
Signing time: Thu 15 Oct 2026 20:01:51 +0000
Manifest this update: Thu 15 Oct 2026 20:01:51 +0000
Manifest next update: Fri 16 Oct 2026 20:01:51 +0000
Files and hashes: 1: CEJpQLikxHa8d-YkFw2pIJEL_OY.asa (hash: xgb9X1dskGV3X7TT8TR/dOTA4c0i1Dzq1gZPGAbJI6Y=)
2: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl (hash: P4AEABxZv8KNRqbP4qLgtcK087/xeRJGsyJBlzb7Qfw=)
3: cMk2mCaRACr3l8M7sJ_ept3JIs4.roa (hash: 4pfIgLqqvlkx/cyGi0n0BcL4NVT0kLVp1xsZdjF3ulk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:28:21:a7:4a:b3:56:6d:b6:44:70:4c:38:42:b7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Validity
Not Before: Oct 15 20:01:51 2026 GMT
Not After : Oct 16 20:01:51 2026 GMT
Subject: CN=5194c45456d6cace872c2384801e0d5f27e35d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:9c:5e:35:ba:ba:7e:98:6b:6e:97:b2:2a:
58:7c:4d:90:ef:f0:37:97:da:21:d6:9d:8e:70:16:
f3:dd:34:c3:ba:f8:ef:07:dd:29:c6:6c:ed:21:b5:
e4:12:72:92:f0:81:bd:3c:06:f0:ab:d9:8c:58:68:
c0:b3:16:7b:79:38:78:48:94:22:0e:64:ba:21:ec:
d5:c7:a7:47:0e:44:66:47:23:98:2f:76:e6:01:4f:
bd:cf:bc:e6:f9:c2:0b:ff:27:93:97:0f:5e:66:61:
a1:d1:04:91:9f:e7:8b:ab:eb:f0:e0:d3:66:ec:bb:
a3:47:6e:d9:d8:80:65:b8:29:20:4c:13:f6:e4:76:
82:d3:76:eb:10:86:ec:fe:ea:d0:e9:1f:56:cc:c0:
b8:31:14:2b:45:cd:fe:0b:6d:5b:29:f3:31:3c:25:
38:a7:df:e2:70:88:a4:5c:fe:2c:de:b5:02:c0:5d:
ec:ab:c1:23:0c:ea:d8:c9:bf:d8:e1:81:07:b1:57:
96:29:1d:ad:2b:2a:84:8f:f9:68:4e:c6:d9:14:e7:
37:b1:b7:23:39:f4:8c:e7:bf:0d:e1:46:91:30:fc:
05:a5:99:4c:3f:a0:6d:d0:3a:b8:25:7b:ee:27:8d:
36:1d:2e:f2:bd:e4:e8:fa:a1:ab:d9:21:55:f7:0a:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:94:C4:54:56:D6:CA:CE:87:2C:23:84:80:1E:0D:5F:27:E3:5D:43
X509v3 Authority Key Identifier:
keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:18:64:9b:42:75:5c:75:9f:4f:f5:0b:ba:bc:d4:a6:0d:0a:
8d:c8:81:99:d2:8e:c2:7a:41:cf:85:4f:f6:fc:ac:5e:71:e1:
65:be:30:e5:99:46:30:9b:ee:61:62:9f:22:61:d1:6d:2e:7f:
2c:87:38:f4:25:1e:45:7a:1e:a4:eb:e2:5b:ba:37:5f:c6:a3:
5e:bd:69:d0:08:86:92:bc:dc:99:df:28:39:5e:84:d0:aa:cc:
f8:bf:e2:fb:3b:59:f7:3a:04:ef:85:5a:99:39:b3:1f:0a:96:
03:ba:6c:fc:bb:b3:78:83:ae:96:9e:ae:db:f5:b2:c7:30:45:
a9:ed:c0:19:16:82:7d:97:3e:87:9f:f0:15:19:5c:b7:2e:c4:
b0:82:fc:96:be:90:b4:c5:b8:fd:f7:48:b5:4a:2b:aa:41:38:
2d:d5:e6:88:b4:06:32:35:8a:e9:bf:d8:06:73:37:ae:30:fe:
92:7f:17:e0:6c:ce:1b:da:8e:7d:5b:33:b7:dd:04:3f:b9:09:
3c:d9:fb:6b:c0:d0:28:c6:ec:fd:ee:f7:ee:2b:96:5e:af:be:
ae:86:05:98:cd:d3:9b:38:c1:28:c4:90:e5:95:62:27:23:20:
a9:5a:72:82:a7:89:22:1f:fd:18:01:2e:7e:81:56:1a:2a:e6:
9e:3d:a7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:06:26 2026 by rpki-client