Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
File: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft (raw, json)
Hash identifier: YP+u39sfL+zh2DT3ms4LD+mNPOKAtoTJwbwjUBrqt3I=
Subject key identifier: 19:29:28:D3:A7:AF:42:CE:44:13:20:BF:C7:99:F2:60:D5:DA:8C:C7
Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Certificate serial: 019E2881E1A0E757EEA16F30E5E1AD51F456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
Manifest number: 0878
Signing time: Thu 14 May 2026 22:01:00 +0000
Manifest this update: Thu 14 May 2026 22:01:00 +0000
Manifest next update: Fri 15 May 2026 22:01:00 +0000
Files and hashes: 1: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl (hash: 3mbS/lixBPzc3FX80zD7z50KtB4CkF/xtTEvhLv0RdE=)
2: cMk2mCaRACr3l8M7sJ_ept3JIs4.roa (hash: 4pfIgLqqvlkx/cyGi0n0BcL4NVT0kLVp1xsZdjF3ulk=)
3: opsubjEoRPBD2SKWbQwhsyQi_lA.asa (hash: Wxgmik5eog5zeLftYBqHXvPHZjZbZr+djsPQFi4j55s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:81:e1:a0:e7:57:ee:a1:6f:30:e5:e1:ad:51:f4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Validity
Not Before: May 14 22:01:00 2026 GMT
Not After : May 15 22:01:00 2026 GMT
Subject: CN=192928d3a7af42ce441320bfc799f260d5da8cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:41:f2:99:d9:65:9c:32:64:ca:81:3d:67:
a5:f1:4f:2e:f2:22:6a:d1:07:02:d2:cf:fc:bf:59:
83:4b:10:5b:c5:a3:ba:8f:28:b0:b3:5e:1a:e3:4f:
dd:3b:60:45:bf:c2:8a:e5:ea:f1:02:22:6b:ea:af:
ac:58:9e:77:da:af:06:ff:bc:db:82:15:75:66:84:
bd:46:2a:44:ea:f9:9e:8c:cd:29:17:c5:14:2b:ba:
e1:e5:e0:95:27:8b:b1:6b:bc:5c:04:0e:ad:4f:73:
47:b7:be:16:62:dc:b8:07:cc:b1:ed:11:b2:bb:cb:
a6:e2:29:24:50:af:22:17:1f:82:a6:19:5f:fa:54:
fa:71:e8:b7:9f:cf:19:0e:44:df:63:30:1c:28:ee:
bb:97:63:ae:4f:78:a9:0c:c9:49:89:6d:8b:f0:07:
5d:4d:42:f3:13:bd:22:3e:0c:22:5f:4e:46:33:60:
3d:5b:45:fe:19:cb:64:a7:4a:c6:31:77:2a:62:e1:
bb:b7:2a:38:e9:1f:fe:fa:bb:75:8b:14:7b:f8:ed:
c1:a8:81:02:34:08:16:97:22:12:87:58:9e:18:93:
55:7b:00:a7:a8:13:c2:48:97:bd:a2:05:aa:97:94:
a2:28:27:ac:da:94:1d:63:98:5f:6d:f7:6a:ab:df:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:29:28:D3:A7:AF:42:CE:44:13:20:BF:C7:99:F2:60:D5:DA:8C:C7
X509v3 Authority Key Identifier:
keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:41:5c:b7:5a:03:09:94:cc:fe:70:2d:32:da:fe:eb:51:5e:
92:32:d5:14:14:2c:8a:bf:9d:e8:bf:28:50:08:18:4d:7b:12:
65:72:fe:81:e9:97:ce:57:8f:84:d4:b5:dc:a1:9f:58:d1:90:
17:e9:71:b4:79:e7:22:5c:1a:53:a3:c2:19:85:28:e6:89:f9:
cb:76:5a:35:48:22:6c:a4:8f:67:fd:e5:8a:88:42:f5:1f:9c:
88:b1:4d:c2:39:73:bd:07:0d:e5:30:c8:e4:64:10:69:82:7e:
c4:1b:9d:93:a7:50:3b:09:a2:18:4e:1e:8b:41:3c:9f:de:39:
a3:76:d3:dc:7f:45:ef:36:5a:27:b3:ef:a5:6d:20:a8:35:2d:
cd:48:fe:c4:9c:2d:20:09:e2:65:40:8c:f0:79:01:f7:6c:f8:
54:76:ec:13:b1:33:66:d5:76:ee:6a:58:5a:5d:20:60:ac:44:
35:87:3a:d1:e9:b3:9c:8e:54:53:e9:51:3e:a8:a7:c2:b0:02:
6e:7d:2d:94:4f:2b:2a:fb:91:82:27:cc:3c:be:12:88:f6:f7:
23:71:09:b6:83:52:f2:a8:91:ef:d7:00:7e:49:b2:d7:84:fb:
1d:3f:12:b6:f8:92:65:e4:7e:71:ec:a2:4f:0f:22:75:51:f7:
55:2b:c4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:59 2026 by rpki-client