Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
File: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft (raw, json)
Hash identifier: XdaqPqOxLbXG0P2sb2BZNz6VmhQ680F08ZorYhuj5QE=
Subject key identifier: F3:84:91:A6:FF:37:25:0B:91:FD:9D:EA:A0:52:A7:4F:AD:EF:35:89
Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
Certificate issuer: /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Certificate serial: 01A0005CFA6C702805AC70CD0C47DFFD1DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
Manifest number: 0685
Signing time: Fri 14 Aug 2026 13:01:28 +0000
Manifest this update: Fri 14 Aug 2026 13:01:28 +0000
Manifest next update: Sat 15 Aug 2026 13:01:28 +0000
Files and hashes: 1: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl (hash: KRz5x+i2aQFTt752Or/8jwsRRZEKirpo8wmLCbr2iVs=)
2: v795sY2U8jhvRzL8MVmYlvFz9_s.roa (hash: Hn47sYXDYoB/4A+t0th2lMVq06CbmCPSmHDsJlsUcW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:fa:6c:70:28:05:ac:70:cd:0c:47:df:fd:1d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Validity
Not Before: Aug 14 13:01:28 2026 GMT
Not After : Aug 15 13:01:28 2026 GMT
Subject: CN=f38491a6ff37250b91fd9deaa052a74fadef3589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:0e:17:dd:13:fa:21:ff:53:dd:b8:fb:a7:
73:58:00:42:5b:d9:db:94:bf:23:ce:c3:83:1b:a4:
f1:97:19:c5:c1:07:70:25:1c:5d:25:10:16:dc:7c:
ad:fc:ac:05:65:75:39:b5:b6:52:a9:c4:62:bc:25:
f6:88:49:67:14:e6:72:96:89:f3:4d:f4:a5:a4:76:
89:3e:ab:e1:04:12:39:0b:a3:c0:da:30:f0:18:28:
7a:b2:f0:a2:4f:ae:52:3b:7c:0f:21:bd:f3:2a:60:
05:63:f2:6a:29:13:3a:e6:7b:e1:0a:c5:65:55:c1:
1c:17:85:f7:e8:e4:a2:88:84:6f:07:9c:8d:24:21:
c4:a7:a1:24:2d:aa:31:90:e2:2c:2d:88:aa:dd:be:
73:74:37:ae:c3:f0:b6:0b:a3:62:e2:f9:28:c2:6d:
ef:03:b1:b0:8d:ee:c7:ad:93:8a:44:42:12:61:b0:
bd:db:6b:fe:97:9c:19:08:a4:73:36:8d:d6:3f:8e:
3c:80:43:e5:50:e9:96:74:22:2c:e5:a9:41:14:cb:
c9:4b:09:ec:8e:02:cf:f5:9b:fb:b5:4a:67:8c:8d:
f8:f2:74:6c:7b:37:61:b5:b9:23:d8:c5:a0:bb:d6:
7f:f3:c1:2f:11:a1:42:96:43:02:96:f8:e1:49:c6:
6f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:84:91:A6:FF:37:25:0B:91:FD:9D:EA:A0:52:A7:4F:AD:EF:35:89
X509v3 Authority Key Identifier:
keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5d:7e:96:c1:f2:15:c4:0b:b1:7e:24:a9:6f:ff:9e:97:d9:
c3:56:2f:6d:9a:83:73:54:b7:1d:4d:dd:d9:78:00:b8:5d:87:
33:6e:0d:78:e5:8b:35:8d:4a:9a:06:9b:8c:22:ce:08:d2:5c:
31:37:32:f7:c9:3a:f0:35:b2:3b:3a:40:07:38:72:91:8b:d3:
54:d1:5a:ed:1a:f1:a2:54:60:bb:db:a0:d7:ef:fd:04:87:4b:
c2:95:51:06:4a:44:8f:1b:e0:a3:6b:84:02:5c:1c:63:84:21:
99:69:53:62:63:ea:bc:5b:f1:8a:ad:59:5b:e2:31:b3:9c:8a:
30:d7:bf:47:7d:f9:73:1e:9c:53:51:d0:1f:5f:70:ad:a5:a0:
2b:1d:b0:af:0c:56:8b:85:0e:73:52:87:45:ac:17:84:b1:b9:
f4:53:71:bc:31:8c:de:31:3f:54:39:6e:0d:25:b4:b7:fc:5e:
e0:d0:ce:38:2e:79:71:e5:0b:a6:6f:12:3d:ea:3a:55:82:f8:
10:16:bd:85:13:84:2e:f6:3c:85:13:f5:eb:ee:0b:76:19:e4:
06:26:8f:ed:74:51:06:6e:35:29:cc:4f:fa:53:98:50:d4:98:
c5:e3:c7:30:8f:77:a5:f2:ab:88:83:59:86:98:99:98:43:d2:
b6:03:58:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:14 2026 by rpki-client