Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
File: 0e1mT0ry-OEZuHomjF1DA_uzYRY.mft (raw, json)
Hash identifier: zZdUPn9mYhNo+b1I0ANlJAPgsnhur3sjRRbJ1CxZpyI=
Subject key identifier: FA:25:A8:FA:20:BF:F7:69:DD:41:79:D1:EE:26:E3:48:06:F4:28:42
Authority key identifier: D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
Certificate issuer: /CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
Certificate serial: 019CFA624E2AE4F08FB2B7A091F248118C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
Manifest number: 019C
Signing time: Tue 17 Mar 2026 06:01:12 +0000
Manifest this update: Tue 17 Mar 2026 06:01:12 +0000
Manifest next update: Wed 18 Mar 2026 06:01:12 +0000
Files and hashes: 1: 0e1mT0ry-OEZuHomjF1DA_uzYRY.crl (hash: df7ZwWEgMxpA8myUcz6motiKi641LkQvBeAe3dh3VCw=)
2: BMvBIwftHVjOq-ECziUj7FT9eNs.roa (hash: VyJ9dmhC8T/OTxMz+hnV4q4zH9/xxLGMFMd7o25VL7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fa:62:4e:2a:e4:f0:8f:b2:b7:a0:91:f2:48:11:8c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
Validity
Not Before: Mar 17 06:01:12 2026 GMT
Not After : Mar 18 06:01:12 2026 GMT
Subject: CN=fa25a8fa20bff769dd4179d1ee26e34806f42842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7f:c3:35:89:21:98:e0:31:4d:a5:d4:00:1a:
70:52:e2:87:a3:2d:c1:ec:48:c8:f1:0f:d7:3e:db:
33:0d:bb:9d:0b:b4:cc:29:27:ca:9d:84:62:e9:94:
26:0c:d5:32:b7:35:f5:db:3f:b7:a6:fd:64:23:82:
0a:0f:d9:cc:d0:97:2a:d0:d0:0a:12:8a:ae:73:21:
93:e5:77:00:39:3b:98:fc:68:d5:21:e4:c7:af:35:
ce:1b:d6:c1:1f:03:3a:12:f5:e1:0e:68:ef:4a:ea:
fb:00:56:48:5c:06:f4:34:01:a1:0c:7b:d0:f8:15:
82:ed:b9:05:59:d3:41:3c:7e:16:3e:4c:b7:21:b6:
57:42:54:49:3f:a2:cd:36:65:e1:55:bb:66:31:c5:
6a:c6:ad:4c:34:a4:1d:7d:bb:82:c9:f5:bd:df:ef:
a3:dc:5a:ad:2e:6d:58:e3:8a:e5:fa:48:e2:1b:31:
2f:8c:e9:b8:f4:f5:3e:60:63:18:d7:51:bc:c4:3a:
08:f8:a6:87:98:63:f1:f1:21:ec:a4:5b:41:ec:56:
05:4f:5d:9d:ae:a8:61:ab:8e:c0:21:be:5f:57:4b:
da:27:dd:40:c3:35:c3:23:5c:2b:03:84:dd:1d:da:
58:ca:41:4c:d4:fe:be:01:af:fa:fc:3b:a0:5a:2a:
59:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:25:A8:FA:20:BF:F7:69:DD:41:79:D1:EE:26:E3:48:06:F4:28:42
X509v3 Authority Key Identifier:
keyid:D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:93:3b:70:ab:e9:1c:12:8a:5d:1b:ab:d6:ea:b6:a1:f1:55:
28:1d:f8:04:c9:17:41:ef:a9:26:66:50:fb:05:db:7b:d7:e8:
a8:7f:84:38:ec:b0:17:64:5f:c0:76:d9:5b:ae:fd:f0:a0:ef:
55:79:cf:42:0a:51:4c:e4:1d:c3:82:59:ce:4d:99:c3:11:cd:
e0:50:7e:42:74:23:92:3c:ba:8e:ad:27:2f:52:2c:d7:ba:2f:
fd:b4:d2:57:08:3b:b0:ae:06:29:45:f6:19:9d:2e:52:ab:3a:
3b:6f:43:e0:34:fd:a2:44:2b:40:a9:e0:38:fa:45:58:c2:f8:
13:a2:e9:34:4d:15:08:a7:c2:46:a3:e3:bc:04:29:89:76:9f:
1f:e1:fd:bf:55:2f:47:3f:c3:f1:fe:1a:b2:bd:1e:aa:09:3c:
e7:a7:54:21:06:df:bd:fd:80:d4:54:a4:83:75:75:b7:78:51:
06:e7:49:35:4e:d4:2f:8e:b5:7a:8e:df:f8:fa:44:8a:1a:46:
4f:5f:97:a9:b2:85:32:78:b0:e7:f2:d6:38:54:52:ad:f7:93:
a8:bc:df:7a:e9:4a:22:c6:52:e5:f2:66:b0:70:ec:f0:2c:23:
bc:87:5a:d5:5e:f7:1e:78:bb:f5:f3:de:d7:c1:60:0c:e3:93:
ee:52:5b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 11:59:10 2026 by rpki-client