Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
File: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft (raw, json)
Hash identifier: U+pc+X/OKXkBQ38OxzHSxZsLSz2IYD2bMPhP7rFBC40=
Subject key identifier: 47:B2:45:E7:27:93:EF:E8:A3:D1:F7:AF:5F:A9:3A:D7:9D:AB:D9:25
Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Certificate serial: 01A002816C14A41111FFD42F9ACC0EE8AD6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
Manifest number: 096E
Signing time: Fri 14 Aug 2026 23:00:31 +0000
Manifest this update: Fri 14 Aug 2026 23:00:31 +0000
Manifest next update: Sat 15 Aug 2026 23:00:31 +0000
Files and hashes: 1: CEJpQLikxHa8d-YkFw2pIJEL_OY.asa (hash: xgb9X1dskGV3X7TT8TR/dOTA4c0i1Dzq1gZPGAbJI6Y=)
2: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl (hash: GwdHlcsBDc53NYRszlTz+Xl3OehfgX99u8/BJbaIZvU=)
3: cMk2mCaRACr3l8M7sJ_ept3JIs4.roa (hash: 4pfIgLqqvlkx/cyGi0n0BcL4NVT0kLVp1xsZdjF3ulk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:6c:14:a4:11:11:ff:d4:2f:9a:cc:0e:e8:ad:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Validity
Not Before: Aug 14 23:00:31 2026 GMT
Not After : Aug 15 23:00:31 2026 GMT
Subject: CN=47b245e72793efe8a3d1f7af5fa93ad79dabd925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:cf:9c:6d:f8:d6:a9:98:42:86:50:04:fa:
81:37:15:25:31:05:cd:bf:b0:de:ac:44:0c:59:54:
99:1b:21:ec:b0:4c:fe:66:1e:52:ea:06:7a:01:10:
95:87:c5:9e:47:92:96:1e:c3:f4:d5:9f:11:71:71:
b7:29:23:c5:13:d4:82:8f:df:68:c0:60:8d:dd:f9:
b2:a4:bd:dd:98:fe:73:2a:80:80:68:82:22:06:55:
d9:6f:76:d5:49:4a:5b:d7:44:63:b3:85:94:6f:a6:
86:60:c3:d1:ae:1a:d6:5c:24:a4:1d:4b:a3:47:07:
35:a0:07:d0:e0:52:4d:d7:25:5d:74:fa:0a:10:5e:
6e:36:63:a5:d8:8a:9a:4b:6d:17:4c:6e:95:89:e0:
98:0f:c4:11:0a:ba:98:c9:05:a5:06:a0:2e:d6:2c:
f0:08:4c:b5:a9:1c:31:dd:4d:60:a7:46:22:bc:d9:
74:f4:5d:f0:61:c5:69:f4:bd:96:4e:83:41:d4:2f:
2d:45:a7:c3:7d:e7:48:e8:7a:b2:82:e8:bf:9e:d3:
4d:06:84:2e:41:4f:15:3f:3a:56:a1:86:34:16:f5:
2e:8f:82:e4:4c:94:70:31:aa:c2:2a:c4:1b:d3:3e:
e3:60:f3:12:c9:a9:de:fb:8b:e0:4d:8a:57:29:5f:
56:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B2:45:E7:27:93:EF:E8:A3:D1:F7:AF:5F:A9:3A:D7:9D:AB:D9:25
X509v3 Authority Key Identifier:
keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:69:4b:e1:65:8c:21:49:65:20:bd:91:44:29:1d:be:dd:55:
7d:8f:0a:4f:44:d2:b9:f2:7a:b9:83:42:14:a2:82:bb:b1:c1:
de:4f:b4:f6:a2:01:ad:5e:18:37:97:6e:3a:6f:4d:72:49:81:
7a:2a:4e:13:d5:f5:69:0f:de:fa:1a:dc:a9:fb:47:5a:64:41:
3f:fe:79:b2:ae:a9:70:16:84:a7:f4:a2:00:4c:7c:26:43:57:
f8:e7:b5:5b:76:ac:b1:30:01:9c:87:1f:fc:dd:21:11:d8:43:
d1:43:8c:77:11:5e:c2:12:ca:5f:0b:14:d5:75:a1:11:68:8e:
29:60:2b:f4:cd:be:d5:ac:c8:4a:59:f8:f8:6b:0c:a7:a5:f1:
b9:d7:5d:ed:f3:5a:6f:17:64:37:b0:14:12:b0:33:52:73:cc:
3b:a0:2f:31:9b:de:6b:ca:6f:ca:2e:b1:88:38:45:a8:e7:ff:
22:0f:16:26:20:96:f8:4c:84:3e:8b:e2:dc:cc:55:ea:2b:12:
86:98:a4:bb:ba:a5:27:1f:a8:09:6d:6a:37:3e:9e:d1:29:db:
a6:58:3b:6a:58:3b:b1:34:15:38:32:f3:62:68:95:13:66:26:
8f:5d:b6:83:0d:42:19:d9:f4:f2:b9:a6:17:4e:3a:5f:89:ae:
e1:73:4f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:29:14 2026 by rpki-client