Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier: 1hKTbQdzq2rSK+x72MxOfblHkuvKgZCYfpX7wb453oI=
Subject key identifier: E5:0F:CB:2F:E9:DA:40:75:BA:55:7B:63:88:50:AC:0B:5B:71:20:B2
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 019D382EA191476A7F4E49E7A6B93C30D6C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number: 1142
Signing time: Sun 29 Mar 2026 06:01:13 +0000
Manifest this update: Sun 29 Mar 2026 06:01:13 +0000
Manifest next update: Mon 30 Mar 2026 06:01:13 +0000
Files and hashes: 1: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: I0mtC3E3PNPash6qH84nla02kR0f2YY6ZIQyeXGPY5g=)
2: 9gVKfPDu8oaxgCYhsIHGv4QIfWU.roa (hash: fllRN8SucuRDRWnVjdcisQzmvofCxZ5K6VMo5ZRY8Z0=)
3: YOp__Ry-NGpngn9AjDGoHEbjeCg.roa (hash: ON5r8fZJQGVj6wPi39Ya/7ATYu3d/0MWZ+FMIC4DzPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a1:91:47:6a:7f:4e:49:e7:a6:b9:3c:30:d6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: Mar 29 06:01:13 2026 GMT
Not After : Mar 30 06:01:13 2026 GMT
Subject: CN=e50fcb2fe9da4075ba557b638850ac0b5b7120b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:60:66:52:28:23:ca:fd:a4:0b:0d:d5:56:
65:47:d8:c6:b3:92:ec:1d:61:94:be:e4:fd:1f:52:
93:39:14:c5:aa:9a:6e:ef:4a:aa:26:89:e4:be:d3:
e9:60:82:53:54:c6:48:11:36:1b:4f:c6:2d:53:47:
7c:4d:a2:d8:6c:85:37:59:aa:54:49:d8:67:36:9d:
26:67:71:35:4b:04:be:51:43:93:a7:d6:3b:ee:76:
6c:64:e9:f0:c2:ff:61:00:ef:23:e8:58:b0:f5:e9:
7d:38:df:46:e8:7d:7c:31:e7:48:bc:bc:39:f5:94:
4b:e5:54:78:ea:1e:a8:11:21:86:c0:22:3d:0f:57:
8d:b9:06:cb:42:2e:f5:1c:08:f9:9a:d4:ab:d8:b8:
e8:58:db:ae:25:1b:4e:ba:12:cf:84:ef:d5:2f:94:
f3:85:c0:95:30:d3:3d:17:13:df:7d:89:de:a7:a9:
89:ac:dc:af:e4:74:9f:8b:fc:c6:46:43:30:e4:d3:
17:f5:37:b3:47:d6:d9:28:f0:c5:07:09:de:44:73:
33:ba:ac:df:38:2e:4b:b9:b6:ef:78:f9:8c:8b:c3:
55:ef:cd:52:be:8f:6b:f8:ac:b2:99:b8:84:22:91:
31:a1:a7:4c:3b:04:e9:95:a8:45:d8:a4:45:b3:45:
94:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0F:CB:2F:E9:DA:40:75:BA:55:7B:63:88:50:AC:0B:5B:71:20:B2
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:50:cb:38:a5:f0:e8:54:35:5e:5c:17:a9:d3:0d:5d:da:56:
f3:41:45:2d:e4:0e:a8:35:47:59:84:8b:ff:42:5f:60:40:09:
7f:9d:af:68:78:b9:0f:b6:22:1b:77:b3:e8:97:33:f4:d4:dd:
de:17:4b:e6:3c:c5:82:7a:70:13:27:fe:a3:92:ea:ec:91:18:
78:de:0c:65:23:6d:63:2c:3d:f6:38:ff:77:ae:c4:73:a1:64:
44:ee:aa:c0:ff:61:7d:66:13:a4:8d:87:dc:af:66:65:a3:41:
a8:fe:81:f2:80:0b:7a:15:86:31:b2:76:39:c6:cd:61:e1:63:
6b:53:48:83:c3:e2:bb:22:d1:04:1a:1f:27:4b:3a:af:05:8a:
35:41:bd:1c:71:af:32:ad:e4:70:79:13:29:b6:a4:10:6a:4d:
62:f8:b3:0d:f5:8c:4b:67:d7:1a:36:89:46:8a:a2:29:3c:26:
57:5c:b2:b6:ea:fe:b9:de:3c:1a:25:ed:28:3a:35:f1:99:51:
61:e0:fb:2e:99:14:1a:28:24:2b:6b:b9:a2:7f:f8:8d:38:c4:
d1:66:0e:6e:b0:8b:31:cc:b1:3c:4a:5f:60:5b:0d:16:89:ac:
14:ed:63:30:93:6f:8b:55:f7:08:66:3f:47:1d:42:e9:68:de:
b2:ea:80:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:36 2026 by rpki-client